Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
File:                     7d68b9ce-b762-3e17-8013-4ff3f5937365.roa (raw, json)
Hash identifier:          4WFsL298vs9f8EN0ecbXOEWfMV3PqGCe7mOghdai0nM=
Subject key identifier:   05:49:6E:A6:F1:95:DB:77:7D:6D:43:6C:70:DB:15:D8:22:05:0B:74
Certificate issuer:       /CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
Certificate serial:       010D0C9F432858487E5068680AD24600B5A07E00
Authority key identifier: 5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     401268
IP address blocks:        2602:f86d::/40 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:68:68:0a:d2:46:00:b5:a0:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad03f8e2-2c6b-41ab-8a4f-a20f958719ec
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=9db37042-1680-42fc-ba4f-07fd344c3109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:b8:39:62:4c:25:d6:79:68:3b:45:d3:77:
                    75:7c:b4:3a:ab:98:54:16:f8:ab:e9:69:f1:0f:cd:
                    e8:a5:ae:3e:8e:8b:2a:ce:81:52:ee:1e:46:b9:65:
                    e4:90:fd:a0:a2:07:3e:a3:2d:ed:43:22:9c:1d:a7:
                    45:6e:4d:f4:32:bc:dd:b5:5b:05:bf:20:24:88:c9:
                    4f:66:c4:32:2c:e2:8d:64:d8:d4:9d:5b:ff:72:32:
                    9b:24:8a:e0:42:40:da:79:4a:f2:a3:76:e7:df:67:
                    fb:99:95:3b:f9:e6:65:a6:65:88:a7:7d:0e:fe:28:
                    63:73:4f:98:d1:0e:3f:d9:53:68:7d:e0:18:bf:3f:
                    c3:05:45:4c:bf:6b:ae:32:71:78:0a:87:cf:9d:5e:
                    52:fa:4c:46:0e:0b:7e:b0:30:db:14:9f:39:c1:bc:
                    c1:81:e6:96:1b:b2:21:f5:1a:91:05:0f:d7:9e:f9:
                    0d:15:5f:7c:00:8a:ac:65:23:31:56:bf:6f:d6:c5:
                    e1:a0:de:1b:9a:c5:99:67:e2:20:25:4c:cc:8b:2e:
                    8d:1c:f4:d0:74:41:d1:ae:17:91:f3:ab:72:70:c0:
                    02:54:2a:66:98:3b:e5:da:f6:c4:0a:9c:70:31:73:
                    ed:58:15:f8:9c:ec:b4:49:96:b9:a6:96:e4:53:b2:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:49:6E:A6:F1:95:DB:77:7D:6D:43:6C:70:DB:15:D8:22:05:0B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/7d68b9ce-b762-3e17-8013-4ff3f5937365.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.crl

            X509v3 Authority Key Identifier:
                keyid:5D:5F:F1:BE:36:F6:F7:F7:0E:7B:B6:2D:C5:C6:79:16:5E:87:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ad03f8e2-2c6b-41ab-8a4f-a20f958719ec.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f86d::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:1a:5e:7d:b0:9d:2f:91:ec:b9:ca:5b:84:53:ea:9c:5c:
         fb:ff:ec:b4:7c:e2:11:ff:4b:e4:15:bb:a6:49:d8:66:7c:ea:
         cc:46:cd:a9:93:2c:40:e8:b1:35:68:ec:18:35:a8:bb:e8:9a:
         59:7d:bc:60:12:7d:54:0d:7a:0c:96:dc:fe:c5:3f:8a:bd:03:
         86:c0:0d:b6:ef:a9:99:42:d4:40:ab:7b:71:b1:04:c2:57:95:
         73:0c:a2:89:69:c4:15:cf:84:15:e4:af:e7:da:7e:6c:6d:bc:
         11:bf:63:21:d2:b4:8e:65:d7:79:60:53:6e:03:0d:2b:64:85:
         b2:6b:bb:31:3b:23:20:60:25:a1:90:87:76:2a:44:5d:6b:56:
         29:0a:1d:32:9a:96:df:83:3c:3f:51:3c:9c:6d:e6:44:f0:e9:
         a5:35:e1:e3:15:e6:9e:66:45:ae:41:9d:f7:2b:46:5a:cd:b1:
         d1:c9:b1:f7:c5:c6:2d:79:d1:b8:57:8b:35:2b:fb:c9:2c:69:
         07:30:8d:0d:42:f3:5d:77:e5:01:42:9a:0b:00:e8:48:cf:a3:
         fb:8e:21:2f:13:3a:83:c1:5e:14:28:2c:e4:ce:ee:e9:f8:da:
         ca:b2:bd:85:39:ce:9b:cf:0c:2a:21:04:aa:23:d6:a5:61:17:
         19:6b:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----