Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa
File:                     69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa (raw, json)
Hash identifier:          bpIHOVskT8gShwbq5Cxw0brGUsdFyDJ+y9J2baCfOhg=
Subject key identifier:   35:D2:D7:F8:33:AA:A2:B5:9C:C5:31:AC:AD:DB:DD:38:2F:6F:D9:44
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F432858482A8FDFA48A3C437FFE2357F0
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa
Signing time:             Wed 11 Dec 2024 02:00:38 +0000
ROA not before:           Wed 11 Dec 2024 02:00:38 +0000
ROA not after:            Tue 11 Mar 2025 01:00:38 +0000
asID:                     7212
IP address blocks:        2607:8a00::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2a:8f:df:a4:8a:3c:43:7f:fe:23:57:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Dec 11 02:00:38 2024 GMT
            Not After : Mar 11 01:00:38 2025 GMT
        Subject: CN=8a73e025-8ded-435f-92b4-2e81a42c990b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:96:76:e4:83:a3:5a:31:7a:ae:cb:a3:29:
                    71:3a:85:8d:40:9e:21:1b:da:54:48:a0:6f:8e:76:
                    b3:72:88:e2:75:f5:4d:e1:b4:6a:ce:66:6f:4f:85:
                    7f:0c:62:ad:dc:9a:4d:07:17:cf:bb:cc:3e:70:e3:
                    3c:f1:62:ec:57:74:39:c2:d4:37:44:c1:14:3f:e9:
                    dd:40:a7:8e:06:76:d8:ae:3f:e3:11:c6:87:f1:c6:
                    57:d9:a4:29:10:c7:30:bb:16:55:fc:6f:db:1d:3f:
                    74:79:b9:25:92:96:1f:0f:d3:7b:21:a5:76:2a:35:
                    84:fc:b4:ff:47:96:06:73:15:be:16:a1:45:05:1f:
                    c8:98:ee:d5:3b:86:05:f5:27:86:6c:35:8a:57:6f:
                    09:44:09:bc:81:81:2a:96:53:6b:56:cf:19:7d:1c:
                    f1:f4:e5:17:7b:31:06:87:46:11:67:8c:a4:46:4d:
                    96:f6:6f:a8:90:be:bd:83:76:ee:06:25:94:2e:8a:
                    ce:8f:16:fc:7a:8f:92:74:fa:9d:13:96:44:c4:9f:
                    2b:36:53:c8:70:79:06:6c:09:ec:28:3f:fe:34:d8:
                    86:ba:8f:d8:8e:36:06:e5:04:1c:43:d5:ab:36:83:
                    0c:de:08:b8:82:ea:f8:d7:20:7e:78:95:56:97:cc:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:D7:F8:33:AA:A2:B5:9C:C5:31:AC:AD:DB:DD:38:2F:6F:D9:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/69eb3ff7-5e52-3044-bd59-908fb46f8abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:34:d6:7c:e5:8a:9c:61:9b:7d:fa:d1:41:e9:45:ad:dc:4a:
         a7:91:7f:fb:6f:ed:b6:f1:5f:7e:e9:92:0b:94:1c:f0:af:fa:
         39:e2:fc:91:3f:a8:3b:a5:ef:d3:e4:56:1d:69:77:d8:6c:cf:
         c1:67:b6:bc:40:14:cb:12:11:d0:41:b5:43:b7:d1:dd:a8:3e:
         37:35:00:b9:6a:be:91:e5:73:ca:4b:f3:63:e8:65:c7:51:1b:
         01:db:4b:68:66:0a:d6:2b:5a:8b:f6:33:b0:c4:ef:cb:b9:15:
         e4:9d:63:ab:ac:91:3e:37:b8:6b:eb:40:6c:87:eb:af:44:d6:
         8e:ba:a4:25:38:ff:e9:88:82:bc:06:b5:61:a8:ea:1a:bb:d0:
         a4:09:48:9c:f6:90:d6:3a:8e:ed:fa:54:1c:6d:b1:18:20:97:
         ff:bd:6d:34:b5:d7:2b:1a:2f:51:19:3e:97:96:f6:b6:93:1b:
         7f:09:e3:21:fc:01:6c:91:c4:69:c8:c8:ad:26:42:99:61:b0:
         d1:ec:19:fe:85:d5:38:3b:52:6a:16:0a:5a:96:df:2a:9d:23:
         af:29:33:7c:de:91:46:56:11:62:fc:c3:db:e7:c4:83:5f:cf:
         ff:71:29:11:f1:62:63:cb:53:b1:16:0a:e1:de:dd:8d:f6:78:
         63:df:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----