Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa
File:                     2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa (raw, json)
Hash identifier:          AyqMqvM0/8cOtMJdid/G+pbUVyXq4rTWPp47dUpVkt4=
Subject key identifier:   A9:1E:04:0F:CD:F7:1F:75:D8:3B:74:80:16:9D:48:77:7B:7F:27:B5
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F432858484D758BF04083C7063DE57000
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     8038
IP address blocks:        2607:fae0:b000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:8b:f0:40:83:c7:06:3d:e5:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=9d59c6ef-774f-4d0b-86bf-9a5a1293f526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:2b:2f:5b:a3:63:85:aa:20:20:57:e9:3e:
                    31:a4:b3:8a:24:31:6b:c3:ad:4b:ae:5d:d4:ae:d2:
                    69:00:8a:40:f6:e7:08:75:79:23:f2:1a:1e:69:2f:
                    8a:44:17:70:8b:05:37:02:bf:55:1c:ce:a8:64:11:
                    fe:d3:e9:a8:0d:ea:a5:50:25:bf:1b:a2:32:03:4f:
                    ca:e5:75:32:e0:18:03:b8:a6:95:9c:9a:c9:de:2e:
                    d0:a1:50:ce:7c:6e:98:29:39:29:98:58:a8:ed:5f:
                    74:8d:e3:9d:22:f6:e2:a1:3a:47:a9:b9:3f:a7:20:
                    9e:c6:7f:5e:5a:df:56:82:65:b0:55:6d:27:c2:43:
                    1f:3f:2e:b1:7f:81:13:a9:f2:9d:03:31:31:94:7d:
                    29:3e:8b:e5:9e:8c:d7:0a:36:bf:0a:5f:46:84:57:
                    61:af:02:cf:a2:d5:ba:e9:2a:dc:1d:04:5c:91:b0:
                    c5:be:cc:84:57:6a:2a:24:e7:58:20:3f:48:2c:b1:
                    8a:10:eb:e2:97:c7:a0:23:99:15:9a:27:a0:5c:3b:
                    00:37:14:fa:95:c5:8f:c7:6d:b1:39:f2:3e:74:58:
                    a6:cd:69:5e:25:a0:f2:53:c9:a3:3a:a5:c0:98:66:
                    3b:37:7b:13:cb:a2:96:fd:88:62:a0:e8:35:7d:ba:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1E:04:0F:CD:F7:1F:75:D8:3B:74:80:16:9D:48:77:7B:7F:27:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/2d0656bc-69dc-3fdf-aef4-4051d5b70831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fae0:b000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:42:27:30:45:f8:a9:f0:65:a0:f5:78:55:9e:46:7e:8c:cc:
         4a:f8:d7:0d:b8:3e:b1:5f:d1:99:aa:d2:62:c2:84:df:56:d3:
         41:4d:48:7a:0f:c2:ba:25:b7:a8:a1:df:ad:05:5b:27:c5:f5:
         b6:eb:4c:8e:d3:b6:ed:22:01:66:90:fb:e6:c8:35:2e:18:d0:
         a8:9e:98:3a:97:79:92:19:bc:33:fe:24:b4:be:74:61:99:88:
         49:7e:35:3d:45:4c:5d:0a:94:f9:de:51:86:0c:8b:0b:8c:06:
         b2:d1:d1:89:56:d7:ce:80:a4:82:47:2d:77:a6:a8:d4:be:e7:
         25:4a:65:ae:8c:ab:65:a3:f3:1d:1d:65:db:02:4c:99:e3:44:
         52:16:97:31:2a:83:52:fe:b0:42:ca:29:4c:49:8a:a1:b5:84:
         19:bd:cf:d0:c6:f3:bd:99:7f:64:a5:80:31:81:01:ec:68:ba:
         99:11:71:4a:46:20:26:34:e2:cc:2d:04:64:11:d5:e6:af:d2:
         c8:74:29:b7:b9:d5:0a:75:9b:92:43:19:06:91:19:7c:fc:e6:
         81:eb:5f:e4:34:01:7b:0a:17:dd:f1:9d:b1:f4:2a:de:b4:60:
         8a:43:75:7c:5f:85:01:63:6d:c1:77:24:b6:86:e9:1b:20:bd:
         f9:54:14:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----