Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa
File:                     5cad48ae-519e-3c6b-ac26-e146145d06bd.roa (raw, json)
Hash identifier:          cfUXitHLPDAjo4LXxbo38fb0C/4r/u9yf6QvB0qQmBw=
Subject key identifier:   47:A4:0D:45:E5:DE:8C:3F:E2:81:95:F5:79:0B:E0:1E:E9:DC:C5:49
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858482BF5593B9753156FA6B5C400
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        2607:fb30::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:59:3b:97:53:15:6f:a6:b5:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=753ee27d-3679-4358-b03f-c9b5a69397d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:e7:ed:a9:36:d3:30:b7:5a:95:59:84:82:
                    62:bc:d1:6b:17:dd:22:7c:65:a5:74:0f:ea:f4:e7:
                    8e:19:40:73:91:57:b2:a2:b6:10:88:95:81:38:88:
                    76:14:7e:48:dd:d0:b0:f0:90:75:51:8b:6f:55:27:
                    36:4a:e2:cb:5f:6f:61:b6:64:0e:f6:05:68:f2:eb:
                    24:4d:8f:5f:2e:3d:34:d6:13:62:6b:d9:40:1c:e5:
                    c8:3a:fe:b8:29:c3:2c:5f:67:d9:63:41:e9:fd:e0:
                    4a:5e:90:02:58:4e:6b:26:f5:b9:15:f9:47:b9:30:
                    34:45:f9:b1:00:8e:0b:27:eb:9e:20:69:91:cd:02:
                    0f:b6:34:d4:d1:7c:f9:74:95:21:92:18:87:9e:8d:
                    f1:a6:de:29:a2:73:c0:ae:14:b6:fa:05:7e:cb:bc:
                    d2:7e:96:76:79:67:0d:dc:58:c1:bc:57:3f:25:e9:
                    ad:be:0e:4d:56:e7:cb:57:74:16:87:b0:7e:6f:4f:
                    38:5f:fc:e5:ca:39:23:66:f7:2d:05:46:0e:b8:f7:
                    15:c3:9e:c8:2f:a1:7e:34:3a:91:d0:48:05:3f:5a:
                    bd:60:8e:fe:76:b4:e8:b4:46:1f:82:04:68:3a:46:
                    1b:e8:74:25:66:61:f2:c4:14:a6:cb:67:97:93:07:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:0D:45:E5:DE:8C:3F:E2:81:95:F5:79:0B:E0:1E:E9:DC:C5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5cad48ae-519e-3c6b-ac26-e146145d06bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb30::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:95:6f:46:ed:e6:d2:9b:00:ba:9a:13:7b:4f:d6:45:f1:44:
         ba:4b:48:28:16:01:1b:78:fe:22:89:fe:0e:74:7e:13:32:96:
         49:b6:83:9f:c3:f8:dd:4c:be:58:ee:19:3e:9a:53:24:2b:b6:
         14:99:17:03:f8:55:5b:c4:4a:b7:6d:14:13:86:4f:03:4f:d0:
         80:1e:f5:a3:97:dd:34:51:9c:54:5d:90:ca:7f:df:5e:25:f5:
         97:1e:ba:e6:7e:0d:f7:bb:56:5e:d4:bb:d6:29:b4:f3:71:5d:
         16:b9:00:f7:d6:f8:e0:9d:7f:a4:a9:2a:33:fc:3a:3a:b0:76:
         9c:6b:43:a5:f7:bd:aa:ee:d7:47:85:e5:00:07:cb:28:15:04:
         8a:d9:e1:39:0a:95:64:0c:20:31:e5:95:a0:13:01:df:28:c1:
         e0:c3:c2:97:e6:d6:4a:b7:29:8d:23:9e:0b:a9:6e:1b:24:85:
         25:cf:82:58:7f:a2:e8:10:9e:34:33:dc:7c:b4:41:d6:35:71:
         86:89:c8:fe:e7:7e:41:03:90:69:46:25:70:75:7b:7b:7c:54:
         42:4f:bd:f2:5e:c9:54:8e:9f:39:55:4f:1b:58:64:f1:46:91:
         7b:67:b8:c4:f2:86:32:29:41:43:21:13:1d:50:4d:e8:b7:47:
         cc:3f:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----