Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa
File:                     a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa (raw, json)
Hash identifier:          QobysG05V9/MeFiq1ylXeKmUhDHQx8Gt05UNuc+rXLo=
Subject key identifier:   0A:13:66:A8:D6:78:D5:ED:1B:EC:28:AE:92:EA:A3:EC:95:46:F2:84
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F43285847E094C637FCA40A775C01B300
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     14618
IP address blocks:        2620:ac:6000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:c6:37:fc:a4:0a:77:5c:01:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=3817a883-22cc-4f08-a634-139725d5f349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7c:ec:9e:94:8e:02:78:53:01:85:00:eb:5d:
                    d4:2c:1a:8a:da:3f:a9:0a:91:53:5e:1a:4b:7f:5e:
                    27:fd:6b:a0:53:07:ca:1c:a0:9d:37:67:0f:f5:5c:
                    15:56:ac:b4:84:72:63:04:57:3b:4e:aa:d3:4a:17:
                    5e:f2:0d:50:95:39:39:bd:e8:c2:68:81:eb:87:15:
                    24:13:95:78:f5:db:2c:52:b5:9f:82:c9:72:17:11:
                    fe:e3:6a:cb:6b:13:cc:72:8a:43:44:3b:e4:9e:53:
                    22:8f:3e:94:a4:35:84:d6:52:03:6e:e5:79:0b:0b:
                    e4:3e:8b:0b:5f:1e:fc:c4:28:01:6d:26:44:91:63:
                    89:c9:f9:a4:aa:3b:1b:84:e1:2e:fc:d0:59:d3:01:
                    55:2f:a0:87:cb:e9:43:d8:7c:2d:2b:cb:d1:86:f0:
                    fc:91:1c:a9:95:83:81:5a:0a:24:31:ed:bb:16:3e:
                    92:d4:ff:d7:cf:6d:fc:70:f7:ff:23:39:d9:87:cd:
                    c0:3b:c2:5b:e6:e2:4f:c2:ad:2d:ed:ab:dc:18:3f:
                    b8:b7:3a:e4:73:ce:6b:e7:37:96:a3:88:2e:36:f7:
                    29:19:ed:27:3f:a7:1a:69:65:f1:70:c8:10:ec:3d:
                    2d:17:e5:f8:b7:af:4f:d3:17:84:a4:5f:e3:28:3b:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:13:66:A8:D6:78:D5:ED:1B:EC:28:AE:92:EA:A3:EC:95:46:F2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/a1ae0d9a-1156-315b-95dd-ed4a667b81eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:ac:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0f:e0:ce:76:a2:9a:15:61:cd:87:21:36:72:83:c7:90:fd:
         68:5a:eb:7a:99:8a:16:29:41:4b:75:27:70:d8:ca:a9:28:e1:
         42:a4:d0:9e:d8:d2:d5:bc:7a:c4:0b:11:0e:c8:ae:8a:9e:53:
         d1:39:d4:e9:d8:0d:22:b4:6b:e0:a3:4c:0a:4a:82:25:4c:20:
         20:cc:0f:e9:b8:02:33:eb:8f:ed:11:00:8d:90:a0:71:d4:1c:
         e2:9e:d0:b1:18:b9:da:24:72:12:1c:a7:59:f0:8f:68:a0:54:
         44:cf:49:84:7c:39:05:a4:cc:f1:5f:3d:96:09:65:23:16:be:
         91:74:3f:19:37:72:3c:c6:7c:9e:f7:a9:fb:50:f1:ca:28:87:
         4b:7d:1a:54:0b:f3:7a:46:75:c5:13:06:32:1e:ba:1d:1a:f3:
         13:f6:4a:a1:d9:6b:50:0d:c7:39:df:42:fd:6b:a5:32:ed:62:
         a4:d0:b9:2b:4c:ab:11:c9:d3:96:a4:c0:d2:f4:7b:de:60:80:
         c5:2d:97:51:01:ec:00:ae:29:75:37:d6:e0:04:06:25:5f:84:
         17:da:e0:7d:88:0e:fa:ec:b7:e4:e5:df:bc:fd:5c:c9:24:55:
         30:81:a5:9f:fb:d3:97:b0:21:91:43:58:c8:81:bb:0f:d4:dc:
         4e:22:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----