Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/d22ab872-ce7f-3a0e-8230-06c6d0f36fd5.roa
File:                     d22ab872-ce7f-3a0e-8230-06c6d0f36fd5.roa (raw, json)
Hash identifier:          hCcez+jbLVvBKHWhhgD5ZOZ/+P140pDZR+CN5+506M4=
Subject key identifier:   10:2D:B9:01:32:9F:17:12:6A:01:1C:39:6E:35:9F:9E:B9:17:9B:19
Certificate issuer:       /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
Certificate serial:       010D0C9F43285847EE8A2E09F0A60AC715624900
Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/d22ab872-ce7f-3a0e-8230-06c6d0f36fd5.roa
Signing time:             Tue 19 Nov 2024 14:00:39 +0000
ROA not before:           Tue 19 Nov 2024 14:00:39 +0000
ROA not after:            Mon 17 Feb 2025 14:00:39 +0000
asID:                     199203
IP address blocks:        2602:f9a9:c00::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8a:2e:09:f0:a6:0a:c7:15:62:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2
        Validity
            Not Before: Nov 19 14:00:39 2024 GMT
            Not After : Feb 17 14:00:39 2025 GMT
        Subject: CN=03dd583c-293d-476b-b6c3-6e5e22e98233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f5:45:47:49:99:cd:ff:38:21:1b:8c:e9:a4:
                    27:81:56:8c:b7:30:74:7b:e6:7a:4c:8a:90:62:81:
                    e0:6a:09:04:e1:21:ac:38:66:1d:19:c1:09:1a:0b:
                    22:b0:6c:ea:b8:ab:c2:6b:2f:2b:65:9f:fe:43:b8:
                    c1:bf:95:dd:da:fa:b7:d3:a4:34:05:a5:95:9e:48:
                    20:06:ce:83:d8:80:78:fd:24:b4:c6:1f:14:cd:8f:
                    a2:d9:d1:ca:61:1c:71:fb:cb:fe:95:87:7a:45:fd:
                    71:8a:5c:ea:74:1d:6b:e9:a0:7b:1e:7f:b4:da:0b:
                    77:af:29:b3:9d:4f:45:42:74:34:fa:e6:cd:09:cb:
                    1e:f6:95:7d:36:50:01:bf:92:a3:1d:a2:b5:58:11:
                    75:6b:e6:f3:9b:3a:0c:d1:dd:83:1c:37:91:b8:52:
                    98:6f:c5:c7:b0:29:4c:52:f1:e0:57:9d:25:a9:8f:
                    b2:28:7e:37:04:9e:93:a1:18:a7:d1:d8:d4:1a:98:
                    9c:c1:a8:bb:88:bc:ec:64:83:a2:16:af:17:0a:fc:
                    60:a6:fe:73:56:dc:d8:04:f0:16:48:7c:50:aa:9a:
                    8d:bd:88:ca:11:25:c7:96:93:d5:17:e6:b7:a1:13:
                    fe:f5:3d:d6:b4:b2:f7:6f:b0:93:1b:92:49:77:a7:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:B9:01:32:9F:17:12:6A:01:1C:39:6E:35:9F:9E:B9:17:9B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/d22ab872-ce7f-3a0e-8230-06c6d0f36fd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl

            X509v3 Authority Key Identifier:
                keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a9:c00::/39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:a9:9b:d9:e9:b2:93:30:9a:03:41:19:a9:ee:6f:aa:16:
         9e:76:59:f7:c3:fa:1a:0b:3b:c0:46:20:57:74:ea:c0:fd:c6:
         51:fb:7d:49:9a:fc:b1:f0:f8:e7:6c:a0:de:7f:ba:5c:30:1b:
         47:b1:d3:9d:30:d5:f6:32:d3:38:ea:24:45:18:17:d9:0e:8b:
         25:f5:a0:56:71:da:f4:3c:79:13:1c:c0:9f:8c:3b:05:d8:24:
         47:b4:ab:59:92:16:0e:63:b2:7e:88:d1:67:ce:f8:92:a9:58:
         5c:e2:c5:9c:0d:04:89:a4:f0:32:00:7c:49:12:96:24:9c:85:
         58:bc:ee:a8:1e:ba:e9:ca:04:2a:35:c8:b6:e9:35:11:c6:38:
         9a:0c:3b:46:0f:b2:bc:02:ba:9e:6b:b9:72:40:6e:ac:38:ae:
         b8:b8:8a:3e:3d:86:e2:39:95:84:6d:5d:32:e4:33:88:22:f9:
         68:57:96:ef:1e:11:9e:0a:44:17:9b:01:2c:e7:cd:14:81:22:
         b7:21:f0:f7:fb:36:b3:74:4d:93:5e:d6:ee:93:10:7c:28:fa:
         40:01:42:c9:5f:29:35:3f:8d:13:c6:62:24:76:9d:4c:f5:26:
         d1:2e:b7:64:cb:27:28:28:2a:19:1e:d8:78:cb:37:a7:f5:f4:
         87:e0:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----