Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/0944a831-1267-3949-b96c-668ba406b04d.roa
File:                     0944a831-1267-3949-b96c-668ba406b04d.roa (raw, json)
Hash identifier:          cxHCjjBi7maTM8eY5AY3hGKvP7Wyz6IdGQjWdzuDM5o=
Subject key identifier:   14:79:2D:64:75:9F:6D:E0:10:9B:EC:02:02:62:BE:9A:2F:68:C8:F4
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F43285848345560BAC189C840E4EE5F78
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/0944a831-1267-3949-b96c-668ba406b04d.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     19529
IP address blocks:        2602:fd10::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:60:ba:c1:89:c8:40:e4:ee:5f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=53c3d5fc-881e-4c83-83ac-35b568d58d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:a3:7c:26:1e:76:7b:6b:57:fc:47:5b:7f:
                    23:b2:b7:e7:d7:84:93:4b:8c:1f:98:cf:9e:e7:c5:
                    d9:85:72:a4:de:a6:b8:85:de:fe:1b:35:d3:0d:b9:
                    11:fa:3d:d1:ef:c2:71:86:ad:25:fe:a6:1d:18:27:
                    9f:63:22:d7:b3:73:56:8d:89:89:28:88:9d:1f:75:
                    4b:8f:a5:20:41:a4:f0:3d:e2:d5:be:79:c2:61:97:
                    8a:b0:df:86:f4:3a:6a:16:9b:84:77:bb:32:f9:00:
                    d6:c8:4a:5c:ca:1f:c8:b2:3b:d9:3b:81:f9:db:ae:
                    ca:e8:28:eb:ce:7f:39:fa:83:57:2e:c2:f6:95:39:
                    d2:ae:ce:5e:aa:17:ff:ae:d8:b9:33:4c:43:7f:52:
                    bf:3f:93:04:80:5c:97:b1:6f:af:44:cb:19:ff:9b:
                    e8:39:bc:a7:f0:73:1c:67:a0:51:3a:9c:17:8f:bd:
                    9e:25:cc:f8:39:8c:01:b6:30:f1:82:e1:bb:8d:ae:
                    45:0d:3d:d4:68:2b:12:d5:10:51:53:7d:60:64:8a:
                    4e:4d:69:dd:af:b7:4e:eb:bd:4a:a7:33:3e:9c:bb:
                    74:3b:39:40:1a:e0:f4:db:96:c9:2e:19:4b:1d:cc:
                    8d:a1:63:31:a4:0a:5b:26:69:e8:66:01:ed:43:7a:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:2D:64:75:9F:6D:E0:10:9B:EC:02:02:62:BE:9A:2F:68:C8:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/0944a831-1267-3949-b96c-668ba406b04d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:18:59:dc:a8:4d:ac:14:7f:8f:2c:2a:de:ee:9b:78:39:fd:
         47:21:28:18:a5:e3:77:70:c1:12:31:b9:38:dc:1f:f6:28:19:
         62:bb:f2:e8:3c:14:f4:b7:ed:d0:90:91:ce:cc:64:02:a6:ed:
         ad:71:e0:6c:d8:23:6c:b8:81:d7:ec:fe:6b:c6:86:6e:ac:f9:
         4e:7c:79:20:ff:a9:bc:0a:50:8b:1b:82:a7:e9:8d:c3:82:f3:
         d8:47:d2:c8:a4:32:58:93:c2:2d:e0:f2:89:8a:17:1e:93:a9:
         5f:b8:0f:7c:30:af:93:a3:22:88:e6:4e:5f:d4:04:bd:0e:c9:
         83:64:d8:a3:20:3e:8d:c3:41:6f:23:7a:d7:32:ed:b0:b1:31:
         c6:af:55:78:7b:28:06:cf:53:52:d9:3a:b2:9d:6a:b1:49:e0:
         f4:71:e2:34:79:30:64:90:47:fc:4a:6b:47:54:19:61:77:51:
         06:a4:c7:69:d2:69:23:6b:3c:b0:a3:ff:c1:8e:98:11:5d:46:
         3a:92:24:63:44:10:dc:4a:58:8a:a8:18:de:12:5c:9b:c0:33:
         b0:c8:6d:d1:31:d4:ad:d6:d9:8e:c5:4e:b4:2f:1b:b7:df:24:
         69:01:cd:b6:de:4f:7e:ec:f0:44:0b:d0:17:86:a3:81:b6:b3:
         02:ea:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----