Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa
File:                     232197a3-ae46-3995-9e63-d41aa97f6f15.roa (raw, json)
Hash identifier:          phttEOF2Q7/qEiV3IjiYsLv7fRGzNPXtDtOTBFPN/zA=
Subject key identifier:   70:FF:93:34:F9:60:44:A8:9C:76:0A:ED:18:10:DA:35:C0:FB:D8:52
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F432858482BF54D032669CD690D29EC00
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     5065
IP address blocks:        2606:58c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:4d:03:26:69:cd:69:0d:29:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=647d5f84-6619-4e3a-94d7-05d605292876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:cf:90:fb:65:b2:69:bd:e1:15:5d:33:7a:
                    f7:3f:bf:af:25:65:53:9f:13:90:f1:c9:a7:84:d7:
                    51:36:55:44:f2:27:6e:f2:77:ab:2e:86:39:11:7b:
                    38:ad:90:83:4d:c8:10:42:02:91:85:e9:d8:a9:c7:
                    82:3a:90:0d:1c:fc:c1:c8:2b:1b:e9:53:6e:01:5a:
                    f3:bd:be:2e:0f:5e:59:a5:08:53:b2:e1:11:c3:58:
                    0a:bf:8e:70:a8:e1:be:81:84:a0:31:e3:5f:a8:c8:
                    3a:1d:89:f8:bb:0e:ad:c5:1a:fb:13:e5:02:e3:82:
                    62:33:d0:06:de:9a:70:06:c5:13:ea:0f:f9:f1:e9:
                    bb:ff:79:ab:2f:3e:d7:01:d9:74:8c:a7:11:1a:0d:
                    dd:9e:e7:5f:b3:92:dc:96:d0:07:a9:3f:81:46:92:
                    06:23:fb:0c:c9:1d:74:6e:7e:ef:bd:0e:2d:c6:87:
                    d4:ed:b3:b1:1e:01:95:83:c4:84:c8:c6:b0:17:5c:
                    75:c1:cf:11:c4:d6:79:62:f0:f6:12:bf:b6:8b:0b:
                    66:b9:33:63:73:76:d0:b6:6a:e5:33:1f:f2:5e:6b:
                    73:8e:09:21:3f:4a:32:6a:40:92:5a:47:9f:23:8c:
                    ba:61:f4:8b:94:26:70:28:58:bb:5f:27:b0:69:f1:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FF:93:34:F9:60:44:A8:9C:76:0A:ED:18:10:DA:35:C0:FB:D8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/232197a3-ae46-3995-9e63-d41aa97f6f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:58c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:66:f4:d7:fd:3c:f7:ab:db:bc:f7:4c:ec:fa:f2:4d:ec:
         ba:49:f7:4f:d8:b8:8d:ab:1a:f2:27:3d:8e:6b:bc:7a:ea:3e:
         54:c7:a9:60:2c:a2:ac:82:ba:b0:58:b0:c3:bf:2f:d6:34:9d:
         ab:91:1e:90:bb:79:b6:0c:27:f8:4e:95:e2:d7:0c:d1:f6:7e:
         92:9d:9f:69:74:2d:fe:da:bb:f9:a4:2c:fe:a7:e1:d8:d7:64:
         9c:cd:a7:47:3d:b4:c7:26:b9:14:99:a3:d6:a5:b6:5b:67:ac:
         80:27:64:42:4f:91:f5:14:00:0e:3e:d1:a1:93:5e:a6:23:bd:
         c8:50:87:de:ba:07:76:a0:ff:f4:f2:15:12:15:09:d0:a3:b9:
         8d:80:c9:8c:e0:fe:8e:10:8d:1c:c0:a9:81:fc:82:21:2d:0e:
         3e:a8:b2:bf:2c:5d:f6:56:42:2e:10:d0:7c:5b:ed:a9:97:7d:
         b8:2b:aa:4e:ab:03:7e:3a:9c:d0:be:45:99:0d:bf:c8:5f:7b:
         a2:f6:ee:34:eb:76:fc:fb:14:cc:60:3c:17:b4:5a:fe:ed:a2:
         10:2f:70:75:fa:f5:77:05:b5:a8:44:eb:c5:b0:95:5b:69:96:
         39:64:5c:db:9e:96:90:87:12:87:34:bc:dd:d8:ce:fa:c0:f2:
         c0:8a:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----