Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
File:                     4d791053-3127-3f02-a4e7-20d3e1e44946.roa (raw, json)
Hash identifier:          Uy9eiXh99YVfOB2VjDpEhiMrEHbYDCoXM1WZJ8+R6oo=
Subject key identifier:   6D:3A:5A:D3:7F:92:D7:33:D4:DE:0A:37:F3:C9:42:5E:97:D9:FC:50
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F43285847F584EDBD9270AD39B1D2DDC0
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa
Signing time:             Fri 22 Nov 2024 02:00:40 +0000
ROA not before:           Fri 22 Nov 2024 02:00:40 +0000
ROA not after:            Thu 20 Feb 2025 02:00:40 +0000
asID:                     399045
IP address blocks:        2606:d640:100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f5:84:ed:bd:92:70:ad:39:b1:d2:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Nov 22 02:00:40 2024 GMT
            Not After : Feb 20 02:00:40 2025 GMT
        Subject: CN=6fa32403-16f7-4051-ac4e-3d52f26891a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:1d:2e:32:36:8f:22:eb:1a:15:ec:a4:f9:
                    3d:46:c9:7c:c0:34:af:86:d6:5e:50:22:57:6c:ce:
                    81:54:77:d4:89:df:f5:31:af:a0:83:62:37:c1:11:
                    e8:1f:cf:2f:92:d7:ac:6b:58:13:0f:c8:9c:ea:bf:
                    5f:79:52:cb:67:09:9a:b4:aa:3e:3c:b5:e9:f5:47:
                    b2:3d:c7:aa:f2:53:d1:dd:cc:e1:e2:4f:67:af:66:
                    a0:99:f0:fb:4e:ac:23:f4:b3:d3:23:38:d6:25:ce:
                    1f:b2:72:36:69:cc:3b:22:a0:30:a0:dd:67:4f:b8:
                    19:ad:d1:87:0e:77:cb:42:f9:cc:87:ca:04:db:d7:
                    c2:b7:9c:d7:95:83:77:52:00:28:30:09:a2:69:94:
                    51:36:8e:dd:4c:19:45:96:e5:c4:c3:96:69:65:3b:
                    ad:93:e2:09:04:70:6c:54:c9:af:8c:4c:ba:c7:ed:
                    d2:7a:23:08:1f:a8:6a:7c:4f:9c:2d:b0:19:04:03:
                    e5:f4:d9:f5:54:16:6e:a4:4f:96:70:33:32:df:59:
                    37:92:7d:ee:a8:26:bf:5f:20:f9:1b:93:14:5c:3f:
                    bf:bf:32:24:35:6d:8d:a7:cb:44:d2:14:f3:64:fd:
                    2d:ba:30:b7:ac:28:44:f6:cc:2b:7a:43:49:53:44:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3A:5A:D3:7F:92:D7:33:D4:DE:0A:37:F3:C9:42:5E:97:D9:FC:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/4d791053-3127-3f02-a4e7-20d3e1e44946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d640:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:40:fd:70:8a:db:f7:de:a0:64:9a:78:e2:9f:61:8f:4d:b9:
         c2:47:f7:91:5a:c4:58:5f:1e:c4:f9:ba:55:ba:a0:fa:eb:bf:
         ed:06:75:7e:6d:28:7f:27:7d:83:44:2b:9c:41:1b:23:40:b3:
         9c:96:d0:d0:3f:79:b6:4b:d2:6b:13:f9:0b:af:76:af:fe:95:
         1e:f4:31:d6:85:91:61:c3:61:f5:d9:2d:cf:09:c8:2f:d8:70:
         99:2d:3c:89:12:85:11:19:14:d4:95:d6:97:ed:fa:8f:e3:bb:
         d0:ae:83:e1:63:17:a3:e0:e6:0e:41:5f:bc:b3:3a:0d:ec:6b:
         68:85:32:a2:bd:fd:08:c7:9f:d2:61:3a:c3:33:e8:9a:03:87:
         d5:da:80:3f:c0:dd:96:7f:5f:37:8f:f1:6e:e8:e5:8b:65:15:
         fa:c9:fc:fa:c0:62:86:57:6a:77:7e:46:32:42:60:06:99:93:
         97:de:9a:55:d3:27:ea:a8:d9:8e:8c:79:44:e7:4b:40:f3:59:
         e7:99:2c:bb:3d:58:b7:76:5f:09:e0:4c:8d:7b:53:1d:46:ea:
         03:8e:2c:e8:b1:74:26:3b:f1:f1:f0:74:36:13:f0:a2:39:54:
         a8:51:ab:c5:8d:1f:f4:a3:34:e1:95:d5:9c:ce:93:88:17:54:
         24:fa:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----