Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa
File:                     9111181e-12c6-3f08-a615-706c438284a2.roa (raw, json)
Hash identifier:          5paHM1PjBf37jAGE36sPhd9tC8EZlg/NSnigg0f41Eg=
Subject key identifier:   4E:DA:BB:90:22:D0:E6:F2:E2:3B:B9:89:5C:E5:E7:62:40:6C:A6:2C
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F432858480214EFAC31FA46DD501F1200
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa
Signing time:             Tue 26 Nov 2024 14:00:39 +0000
ROA not before:           Tue 26 Nov 2024 14:00:39 +0000
ROA not after:            Mon 24 Feb 2025 14:00:39 +0000
asID:                     53978
IP address blocks:        2602:807:6000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:02:14:ef:ac:31:fa:46:dd:50:1f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: Nov 26 14:00:39 2024 GMT
            Not After : Feb 24 14:00:39 2025 GMT
        Subject: CN=d4c13615-584b-4be0-b373-fd2b5376a503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d9:b3:37:ea:83:d1:59:4e:e7:90:3f:c0:5b:
                    55:ae:91:cb:2f:11:07:8a:ef:63:cf:e3:a3:bf:08:
                    fb:ac:63:dc:76:d2:d7:14:52:e2:78:0f:22:3e:ae:
                    a2:86:00:fd:42:e8:45:e2:ca:e4:35:fe:58:6e:b1:
                    d5:95:54:16:63:60:96:74:dd:a7:26:fe:14:17:09:
                    a2:5f:9d:ee:90:f8:be:48:df:18:fa:12:e4:40:bc:
                    2f:f4:47:f0:27:d4:ed:49:d9:82:44:73:6c:15:8a:
                    bb:c2:1c:56:30:82:86:02:f9:67:19:63:dd:e9:7d:
                    17:9d:8f:a3:5d:98:c6:21:41:e8:fa:61:57:f4:2a:
                    1f:60:81:e7:8e:f3:3f:3f:a3:44:d4:a3:df:cc:7a:
                    83:b2:09:eb:f8:42:1f:8d:b1:40:6a:cc:43:9c:dd:
                    1b:b1:16:b1:10:07:84:0e:09:b2:54:88:3d:ba:02:
                    b5:30:81:f7:3d:51:6a:1f:32:8f:5a:86:7e:b4:88:
                    30:f0:84:1c:7c:2b:50:e1:79:18:b5:fb:2c:da:80:
                    76:1d:ff:f2:eb:70:44:33:70:5a:cb:90:52:12:06:
                    e2:50:bb:63:c2:15:34:fd:b0:34:52:ce:38:8d:85:
                    91:03:71:68:2d:f3:ef:11:63:1b:e4:c2:f6:a5:e9:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:BB:90:22:D0:E6:F2:E2:3B:B9:89:5C:E5:E7:62:40:6C:A6:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/9111181e-12c6-3f08-a615-706c438284a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:62:cf:28:15:d9:1b:bc:ef:43:17:02:a8:01:bd:9b:94:
         c1:bc:62:18:4d:1e:89:11:ab:67:59:46:fa:3f:64:c7:65:77:
         1e:61:bf:a7:2e:15:ee:d4:e3:f9:35:ce:27:db:47:0f:c1:34:
         d4:e7:ac:32:55:32:b3:ff:5c:f4:e4:2c:31:23:e9:39:0c:a9:
         c3:9c:19:bf:f7:58:84:d5:0b:19:a3:13:e0:70:08:86:c1:1d:
         a8:fa:56:4b:f1:02:a5:51:bc:c0:61:ba:02:0d:90:ee:8b:60:
         55:8c:b7:9e:75:d4:de:01:b7:e7:f1:de:39:84:3a:fd:4a:51:
         05:c1:fa:f6:04:90:a1:06:df:7b:ac:7c:ec:e3:6d:0d:a0:21:
         77:3c:62:1e:47:f0:c5:fd:6b:3f:68:d9:b4:66:e6:bb:ad:47:
         53:29:77:b0:4d:43:d1:ff:bb:1d:98:a3:2b:b7:f6:30:fd:83:
         8e:b3:88:16:50:a3:7e:e6:54:6b:f4:a2:de:7b:44:fa:17:55:
         8b:28:f3:41:2c:d4:86:43:34:74:0d:53:ff:62:2e:32:84:ea:
         3d:73:ae:7e:9b:38:8a:b0:40:de:d7:fa:fc:f0:a6:5b:38:3a:
         59:0a:3c:69:ac:d0:42:f4:4b:d8:38:99:6d:98:06:98:99:b1:
         61:07:14:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----