Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a141aecc-d387-3289-865d-15a9235c3670.roa
File:                     a141aecc-d387-3289-865d-15a9235c3670.roa (raw, json)
Hash identifier:          rSVEV6U9htvt4uMzM+9GMVpXvkTCxn4IA+XO7N+x588=
Subject key identifier:   AC:84:7D:F9:26:9B:F3:BA:98:4A:6E:E1:15:66:DA:6A:70:2C:70:9D
Certificate issuer:       /CN=dd62a733-0e13-4012-8294-fce655e4a41a
Certificate serial:       010D0C9F43285847ED24BCDA797278325D5D5DC0
Authority key identifier: 91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a141aecc-d387-3289-865d-15a9235c3670.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     36231
IP address blocks:        2602:fd92:cc0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:bc:da:79:72:78:32:5d:5d:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd62a733-0e13-4012-8294-fce655e4a41a
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=e06fbf2f-1b8c-4e17-878b-96f38178ab65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:13:c9:de:16:3a:1e:54:18:e5:c9:11:17:9a:
                    91:ad:8e:2f:89:d5:7c:4f:8c:9b:7f:7d:0f:a7:a2:
                    38:41:8b:2f:ef:2b:b8:bc:d0:39:7e:c3:fa:43:79:
                    93:7c:48:de:b3:9c:10:78:10:30:2e:cd:08:8a:d1:
                    fc:30:02:97:88:4d:ad:d8:a0:e8:ed:46:cb:13:c5:
                    cd:9d:d1:01:01:96:89:2b:79:8d:dd:44:d6:01:3c:
                    f5:49:03:2e:98:04:1d:bd:39:37:4f:89:41:b3:e2:
                    87:06:c8:2c:b0:8d:9b:69:14:91:15:8a:6d:e0:d5:
                    b8:cf:98:f3:d9:e4:8f:15:1d:19:57:4d:d3:89:33:
                    d1:2e:2f:93:08:42:bd:0b:bc:6f:32:4b:27:df:b7:
                    02:6f:7f:85:8d:17:1d:aa:fe:56:6f:c8:f5:32:6c:
                    08:9e:99:c8:46:2d:c2:5a:a7:3c:e5:ec:5d:01:05:
                    ec:4b:d0:ca:6b:22:23:55:e6:d7:15:56:c2:ce:3a:
                    2b:34:d6:3b:ba:b3:96:62:76:6f:ef:e3:15:4b:b2:
                    a1:8d:e2:ea:a3:c2:95:4c:1c:8b:66:5f:92:1a:4e:
                    9e:da:5f:a0:bd:78:99:49:bd:1f:f8:70:a5:f4:93:
                    ae:0e:57:ff:ff:a9:28:5f:35:c1:c5:eb:d2:a8:38:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:7D:F9:26:9B:F3:BA:98:4A:6E:E1:15:66:DA:6A:70:2C:70:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/a141aecc-d387-3289-865d-15a9235c3670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a/dd62a733-0e13-4012-8294-fce655e4a41a.crl

            X509v3 Authority Key Identifier:
                keyid:91:13:58:B4:76:AE:9F:A1:B0:7E:93:8D:BC:37:2C:AB:97:3D:76:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd62a733-0e13-4012-8294-fce655e4a41a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd92:cc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3e:a6:91:38:6e:b4:16:f5:a0:ab:f4:fe:ac:5c:56:08:ed:
         bc:bc:ad:6b:9f:f7:eb:90:dc:be:f3:06:66:eb:30:26:5b:25:
         8f:de:9f:d9:13:ac:32:60:2d:23:89:0a:96:01:d0:2d:ac:7e:
         2f:21:15:a3:da:20:38:e5:cb:3c:e6:55:cc:2b:53:d6:34:be:
         25:1b:cc:07:0d:8d:49:93:c2:f0:29:cd:99:0a:7c:0f:05:e8:
         7b:9e:fa:09:7f:53:ec:47:5f:1c:ab:18:a0:e8:51:d3:75:f4:
         ad:04:0b:c3:b4:4d:67:6b:91:17:07:6e:88:21:84:61:ac:4a:
         f3:cd:c3:7c:25:9a:55:0a:a3:a4:20:ce:8e:46:f5:9e:b6:99:
         fa:a2:37:29:cc:e9:a1:51:57:3a:91:b3:bb:cb:45:d5:72:20:
         c2:d7:f3:81:64:86:39:5e:3b:1f:b8:ec:19:c3:02:9c:f1:17:
         df:78:37:c1:2f:fa:c0:20:7a:d6:0c:fa:65:10:f9:23:43:49:
         8c:3e:df:6b:27:0a:f9:b6:0f:9e:e5:3b:7f:6c:f2:e8:ea:6f:
         0c:0a:a4:25:6c:a8:24:39:c2:f8:63:56:72:ae:38:8e:ba:c0:
         f8:21:bd:19:51:37:a9:06:07:db:21:28:34:a8:d0:c0:cb:d0:
         86:73:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----