Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa
File:                     d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa (raw, json)
Hash identifier:          faJOh33emcvR+2XqkrtDsIifmuZdDA8zk4ryu0vQH+c=
Subject key identifier:   95:1B:4F:A2:51:EE:80:E5:2D:A4:89:BF:AC:46:F0:5A:88:EB:45:C5
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584838855EE07DE89529879F15BC
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     31898
IP address blocks:        2602:fdaa:41::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5e:e0:7d:e8:95:29:87:9f:15:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=1c72e693-afac-4c1c-8295-1248ccb42dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:6a:e9:da:47:ac:5d:c0:ef:c3:54:48:ed:
                    c2:42:b4:c8:85:2b:47:db:c9:e4:e4:cd:64:9c:f1:
                    e2:60:50:f1:e3:fa:5c:33:c9:da:8b:5f:db:8d:2e:
                    74:dd:db:c5:36:c1:a7:bc:ce:83:32:0a:7c:87:46:
                    af:99:c7:a2:7b:41:d4:6b:b9:e5:0f:f4:43:2d:d1:
                    5f:5d:66:3c:7b:98:54:ef:4d:ab:bf:fb:45:4c:3a:
                    02:fb:f9:07:59:8c:73:18:99:fa:f6:3e:b9:0a:bf:
                    ee:42:3a:0a:fc:6e:db:26:ee:b3:0b:c6:6f:05:9c:
                    63:1b:28:07:18:80:c1:79:cc:0e:61:ac:e9:30:8f:
                    76:1a:b1:ce:0f:c2:f1:b9:8e:e8:e2:8e:c5:09:cb:
                    97:b3:33:3c:a0:fd:8a:f8:1d:2a:35:97:97:0e:83:
                    85:ec:7b:7f:b8:51:be:92:87:0d:65:de:fd:cc:1a:
                    58:c8:b6:68:69:26:b4:54:89:f2:60:1d:78:86:7d:
                    d5:fb:3f:d2:67:c5:e5:e8:d3:98:cb:e2:76:83:15:
                    96:55:4f:b1:fd:15:9d:09:b5:aa:fe:93:84:62:01:
                    e1:32:4a:22:31:1d:2d:94:23:15:8f:49:d3:e1:8f:
                    bf:4b:23:8e:ce:c5:b3:00:14:82:26:ba:0d:2a:ea:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:4F:A2:51:EE:80:E5:2D:A4:89:BF:AC:46:F0:5A:88:EB:45:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/d7d6d61b-0705-3c22-8ccc-7f6d38d7ee8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fdaa:41::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:39:2f:6e:36:a4:db:8f:5f:1a:55:23:79:65:a1:19:33:96:
         c7:ce:68:ac:5b:07:fa:14:81:01:cc:e6:69:39:f1:91:60:cb:
         26:12:25:d1:26:24:25:51:82:4b:80:e6:74:e6:d4:30:66:46:
         17:b2:8f:ad:bb:2c:36:ac:85:92:9a:72:a3:58:0f:f3:53:4c:
         f3:9a:cb:0b:fe:4b:64:a3:a1:91:49:4d:b4:66:56:c9:32:a7:
         fd:70:73:93:64:f9:d0:3b:b2:2b:47:98:2d:6e:8c:5a:06:02:
         d3:8f:98:da:5d:c8:e3:47:82:57:d7:19:f0:59:db:1c:11:6b:
         ae:36:d1:22:2c:52:e9:c3:0a:73:82:46:d6:ce:4e:b0:51:24:
         cf:67:4a:01:93:df:c0:0e:02:43:a3:57:df:fe:31:1a:67:fe:
         41:eb:62:fd:cd:23:c3:c6:88:fe:84:55:67:55:b8:05:12:f7:
         d2:51:a5:38:ae:ff:2a:44:9a:b4:7a:57:5e:cc:d1:e3:d1:bb:
         5f:86:dc:34:84:24:db:a1:f4:85:c4:95:48:bd:8d:d0:48:8e:
         3d:1c:54:c6:b3:54:2f:05:b9:f9:a6:f4:d7:9d:da:a3:8c:fb:
         26:e8:8b:77:56:a0:58:c9:98:77:cf:82:31:82:f2:91:5c:59:
         96:90:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----