Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b855a079-b15a-3b29-a593-36df46cc3095.roa
File:                     b855a079-b15a-3b29-a593-36df46cc3095.roa (raw, json)
Hash identifier:          bB5wuXWGVhiu/W+B/35QuFYhCcyvniZEz/Z5R6eSOiQ=
Subject key identifier:   D8:A4:1A:37:CF:43:E7:45:66:BE:56:80:66:D4:EB:6F:6D:72:0F:73
Certificate issuer:       /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial:       010D0C9F43285847F584FA5096D6F78E41F8BE80
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b855a079-b15a-3b29-a593-36df46cc3095.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     15169
IP address blocks:        2606:40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:fa:50:96:d6:f7:8e:41:f8:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=f65393ce-f25c-42a5-bd1c-70ed573c7483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:81:fa:00:97:90:46:12:7f:5c:ee:27:95:71:
                    8d:8e:79:ba:3b:fd:1f:a0:0a:f6:90:ab:90:ed:4e:
                    c2:7c:00:f9:6f:cb:f6:59:63:64:9a:15:ba:55:07:
                    3c:cf:40:3b:3b:25:6d:98:5f:ba:c8:2a:78:bc:77:
                    90:c9:7c:04:fe:ba:50:b2:86:92:38:e9:13:87:6b:
                    79:be:10:c3:b1:2f:98:70:2a:ae:9a:79:a8:70:84:
                    86:13:c3:db:b9:7e:39:94:4c:1b:52:0b:59:7a:f7:
                    05:4f:91:cb:f7:19:f5:25:68:5b:78:a4:d9:7c:9a:
                    23:35:e1:10:16:87:25:64:59:73:c3:8f:6f:ed:70:
                    a9:31:2b:6a:8a:7f:67:68:d5:5d:fa:1f:2f:27:ef:
                    bc:0e:f0:90:ab:69:ba:af:aa:c1:23:31:5a:c7:a0:
                    80:80:c4:54:5a:40:50:c1:da:99:28:cd:ab:81:6f:
                    6a:19:d0:27:45:ec:b5:05:be:cb:a9:da:74:d3:0d:
                    68:dd:d4:3e:49:25:d2:f5:b5:1e:78:2d:5e:7d:a1:
                    e5:99:92:88:16:1c:da:5e:6c:12:b8:2f:da:a4:b7:
                    cf:36:f6:97:ca:8f:61:0b:45:4e:9f:a6:bd:90:25:
                    2f:a6:40:a3:78:26:db:16:1c:84:85:8d:36:89:08:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:1A:37:CF:43:E7:45:66:BE:56:80:66:D4:EB:6F:6D:72:0F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/b855a079-b15a-3b29-a593-36df46cc3095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl

            X509v3 Authority Key Identifier:
                keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:31:e8:80:7f:68:f7:22:e6:d6:7b:31:7d:6e:61:81:d7:d9:
         d7:94:bd:68:ed:34:70:96:41:d4:84:cd:4e:ae:ae:99:89:ed:
         20:85:88:b4:88:12:9a:87:63:e4:bc:e4:7a:b0:5b:88:2a:3c:
         82:01:86:63:2d:90:11:67:4f:f8:88:ca:eb:b4:85:cc:00:cb:
         0e:2d:ac:75:af:d5:96:87:d7:92:b4:64:9b:dd:09:42:b2:84:
         f6:17:0e:89:e2:15:7b:0c:2e:b1:8d:ea:46:eb:0d:2b:d1:76:
         75:7f:5d:60:3d:32:f4:6b:a2:f8:92:9c:ae:29:f2:41:5a:8a:
         01:84:1c:e2:95:e0:0c:ba:70:83:b2:92:ce:ef:ca:ee:48:e3:
         a9:2d:56:90:2f:0d:6f:1e:50:88:97:d0:59:ce:78:18:61:cc:
         cc:9f:77:3f:c7:f9:db:3c:1e:ae:46:82:43:a7:2f:d7:3f:c1:
         96:28:f2:58:7a:d9:97:8d:9a:1e:37:87:28:de:79:5a:73:a4:
         47:81:55:9a:3b:35:34:57:2f:97:a3:97:b2:99:f5:05:09:c0:
         a9:00:66:a4:ce:3c:44:d7:42:28:9e:4a:c9:6b:e3:67:bd:5e:
         a9:2b:fd:66:df:3d:1f:87:ee:9b:b2:2a:8c:46:d7:b0:66:68:
         82:d1:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----