Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6e2141ca-fde0-3351-bf14-bf9318855b01.roa
File:                     6e2141ca-fde0-3351-bf14-bf9318855b01.roa (raw, json)
Hash identifier:          adrxg6g3K/ojGDjQRAqDld0Li/+3f3FofK0ilTa0h94=
Subject key identifier:   77:10:53:A1:DA:B1:81:EF:28:5B:BA:05:2C:91:F2:23:C4:E3:B2:4D
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F43285848222FD463B01BB0800B47C880
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6e2141ca-fde0-3351-bf14-bf9318855b01.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     22799
IP address blocks:        2607:a000::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d4:63:b0:1b:b0:80:0b:47:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=3d0a6278-2058-4021-a0d4-86ef22f43350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0c:88:f9:d2:d8:f8:f9:6c:db:7d:7a:79:8e:
                    c6:90:04:66:db:ab:34:7f:7f:9b:ba:e9:52:37:fc:
                    c1:d7:d4:a9:04:be:ee:b5:37:f6:a4:a7:76:05:72:
                    49:3d:00:8e:46:84:3f:f6:76:1d:ea:b9:74:0c:46:
                    39:60:60:df:27:93:e0:dd:d3:8d:5c:11:c4:9c:9e:
                    47:57:7c:81:28:c6:44:73:f0:f6:63:0d:3c:5b:9b:
                    ea:f2:27:f2:f8:48:41:07:69:66:15:dc:59:10:25:
                    ea:c2:48:c7:50:f9:97:42:5a:6a:a7:a8:68:2b:57:
                    e4:e2:f0:51:af:0c:8b:58:a7:06:55:a0:a7:11:da:
                    6a:82:62:34:c0:05:18:d4:55:d4:e2:c2:5e:b6:21:
                    eb:20:9f:9f:33:43:71:89:01:ef:6b:10:e9:39:96:
                    81:88:35:bc:9a:09:58:c9:8e:ae:62:ea:46:e4:66:
                    f4:73:c3:34:ba:06:f3:e0:1e:86:97:71:88:d8:eb:
                    8f:bf:ce:21:fe:2e:5f:53:ef:17:23:f7:13:a9:15:
                    b3:f4:fe:8e:28:7d:6a:7a:15:94:f5:9c:da:3f:7e:
                    b2:39:47:a1:25:67:7a:b3:32:f3:8d:49:50:70:a5:
                    d3:44:16:99:0c:fd:4a:cb:d1:e1:fa:b1:97:60:61:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:10:53:A1:DA:B1:81:EF:28:5B:BA:05:2C:91:F2:23:C4:E3:B2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6e2141ca-fde0-3351-bf14-bf9318855b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a000::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:de:2b:f2:b0:ba:92:e1:dc:94:1b:aa:75:e6:76:44:f4:46:
         11:80:06:67:72:04:f6:21:8e:09:49:f6:28:ea:9f:fd:87:de:
         d8:6a:47:85:9c:f9:62:71:af:97:6f:fd:9f:56:c1:fa:4b:da:
         09:10:82:f7:04:3d:80:07:93:b2:db:70:e0:21:49:fa:46:c2:
         eb:62:e8:50:ab:a1:98:92:33:20:3c:3a:97:05:50:c6:3c:25:
         53:5f:02:0d:0e:a0:a8:54:91:dc:be:78:d8:86:a2:6d:71:65:
         82:a1:7e:1e:6f:3c:92:f0:a8:1c:82:4e:31:f4:9b:e8:90:f8:
         2f:82:e6:fb:fd:b4:c9:ad:5d:ed:b1:6c:8c:40:63:0d:a9:c7:
         da:1c:17:42:06:89:f0:4e:1d:50:32:90:b6:b5:d7:31:44:f1:
         8b:a6:9f:7b:83:30:31:52:b4:96:52:0d:8b:6c:73:b6:44:ca:
         c0:21:23:ce:06:bd:47:a1:81:70:1d:4f:e5:f3:27:85:95:ca:
         3d:c9:16:18:0a:db:91:10:91:00:7c:8a:2e:97:d4:c5:87:2d:
         a1:e4:67:d3:cf:2c:5e:6c:f0:55:8e:77:ab:78:f6:09:a9:2c:
         76:3d:14:e0:a0:3a:b3:d5:8d:7d:7c:9b:17:9e:8e:c4:00:96:
         45:2b:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----