Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
File:                     24b668fc-a509-3a42-8684-d6b7501ff35b.roa (raw, json)
Hash identifier:          zrYNIBXM0A1BFR34EncM1n8jb9Ij0kQ7GA3IEoMGJts=
Subject key identifier:   A8:E0:CD:62:59:32:0B:AC:BA:93:F2:92:8E:6A:10:23:F2:88:72:7F
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F4328584827C54A16F864FCED0C3A6F80
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     398646
IP address blocks:        2602:fe6b::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:4a:16:f8:64:fc:ed:0c:3a:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=3196962f-0610-48d3-b0b5-936081cf0624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e5:b0:ea:8b:ca:50:6d:7f:00:93:70:12:1c:
                    3f:0f:c4:1b:ec:8f:72:22:d2:09:8e:2a:40:ba:a4:
                    46:04:4d:4d:c4:3a:24:65:cd:a9:d5:9d:e0:e6:8d:
                    66:b7:7d:57:63:d3:2d:75:9b:35:62:97:92:eb:74:
                    d1:fa:77:8f:d9:99:c9:74:3b:56:45:ad:f5:13:44:
                    b9:66:8c:c4:4d:5c:02:5c:b4:45:de:02:8b:a4:8c:
                    9e:c5:11:89:41:3d:2e:fa:ad:d4:1e:0e:43:17:26:
                    9f:07:da:37:54:41:15:39:49:05:d9:a2:43:1b:e5:
                    67:d9:3c:f1:69:6d:bf:c7:33:ef:4e:16:b2:93:49:
                    5d:2c:08:e7:4d:a3:31:42:3a:97:53:9a:05:d4:32:
                    2f:72:34:f3:55:d8:a0:02:de:e7:e1:69:71:38:3f:
                    df:54:6c:af:d4:70:22:e7:32:4d:50:97:41:e9:7d:
                    da:30:02:1a:b4:29:b6:5c:02:d4:11:ee:42:34:a4:
                    2c:de:f9:7e:5c:22:06:9e:6d:5a:d8:cb:e3:08:69:
                    5d:0a:42:51:d6:65:47:84:4c:e6:ed:43:8b:1b:56:
                    fd:ed:7d:d2:3c:ce:38:3d:c9:fa:87:45:31:8c:ee:
                    bc:cb:2d:c0:f2:2c:a4:79:5c:4f:5e:ae:91:21:b1:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E0:CD:62:59:32:0B:AC:BA:93:F2:92:8E:6A:10:23:F2:88:72:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/24b668fc-a509-3a42-8684-d6b7501ff35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:1e:95:da:ef:f2:0f:4a:d2:51:18:12:7d:aa:94:14:86:
         a4:28:87:41:64:04:66:2f:05:19:e1:2a:cf:ed:ed:74:03:b0:
         1e:1f:6c:45:9a:ce:3d:af:12:e2:ee:c2:6e:08:0e:81:59:a0:
         6d:8c:66:3e:02:42:23:fe:e4:eb:bf:95:0f:7e:29:e3:40:e9:
         9b:bf:28:6e:bd:3c:c7:0d:0d:fe:83:8c:a8:bf:30:03:84:19:
         62:58:12:40:40:ce:27:53:ed:0d:16:f4:5d:a1:24:49:c5:1c:
         02:d9:ff:55:44:3f:06:d8:43:37:5f:23:f0:73:74:aa:ee:20:
         26:c4:06:9a:f5:74:b8:e2:50:c7:a5:0b:67:69:1e:14:9e:7f:
         65:40:1b:43:42:59:32:8c:ec:c9:2f:61:31:23:a4:43:e5:f5:
         25:af:d0:1e:51:64:5a:64:42:57:e2:47:b5:78:3f:46:35:b1:
         e7:e2:bf:cd:ab:1e:9f:a0:80:37:3e:59:bb:db:48:09:4f:20:
         44:95:0d:60:07:a1:fa:80:dd:19:d3:a8:5e:63:57:33:a2:00:
         73:4a:21:49:99:9c:43:32:1e:7a:09:0a:87:77:69:4d:ef:09:
         39:39:f7:da:dc:1d:74:97:ec:13:e7:cf:b9:33:84:bc:7f:52:
         be:4b:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----