Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
File:                     c8e59d5d-26d2-3644-b480-2e571c81f11c.roa (raw, json)
Hash identifier:          7tTJV2AYYRz9yb1ClBLwZu0OZq6zPAWGQIwJkDxFE4Y=
Subject key identifier:   C1:6D:4C:B1:2D:10:7C:5B:32:13:B1:5F:1B:C8:95:D2:9A:63:C5:3E
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F432858484C102FAB29F2C59925A0BD80
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     8070
IP address blocks:        2602:f9e7:2a::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:2f:ab:29:f2:c5:99:25:a0:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=6e18fc3e-a1ad-4776-a4ed-61a55d832048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:2e:6c:ac:9d:12:41:32:70:04:11:7e:42:
                    37:ea:3c:f3:7b:61:ba:e5:f4:15:b0:76:e7:b6:8a:
                    ff:01:4d:31:93:c2:37:72:61:bb:1b:79:30:48:96:
                    c0:7f:f8:ff:9f:60:7c:03:91:20:69:0b:b0:cf:6a:
                    a2:49:4b:99:0a:56:e0:cb:85:8f:1e:d9:3a:5f:73:
                    6a:79:c5:13:d8:e5:bd:b1:e8:5c:24:15:25:ec:db:
                    91:e1:b0:51:2b:9c:33:af:09:e7:e7:a9:94:dd:d7:
                    f7:f9:37:65:29:3a:b3:1c:70:f7:2e:0c:fe:f3:67:
                    12:d6:fe:c6:2c:5c:3f:cb:77:ad:43:1c:c0:cc:ea:
                    b9:15:67:c3:f0:ed:ca:c0:d2:e7:95:eb:cc:cd:5f:
                    87:de:f7:35:ce:0b:2a:d8:a8:ac:9a:0d:72:4c:c4:
                    13:d8:4f:f9:3d:73:05:b1:e1:8d:f7:41:70:cb:f7:
                    71:d5:79:7e:dd:6a:42:4d:15:bb:6c:28:6d:25:68:
                    b0:86:1c:77:df:a3:53:e4:df:cc:62:40:b3:7c:7c:
                    00:6f:2a:26:f6:2b:ea:95:ab:09:04:13:bf:6d:c5:
                    ba:04:0a:b1:5b:35:52:13:7a:a1:f0:42:2e:e6:26:
                    5f:ef:12:ce:d4:7f:b6:d0:e1:69:f5:3f:8f:f4:69:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:4C:B1:2D:10:7C:5B:32:13:B1:5F:1B:C8:95:D2:9A:63:C5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/c8e59d5d-26d2-3644-b480-2e571c81f11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9e7:2a::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:87:76:91:4f:c6:fb:ef:75:d7:b2:0e:15:a7:ec:f5:35:
         e9:38:c9:05:02:03:18:23:f4:1d:db:95:30:fc:bf:20:20:65:
         7a:bf:69:5b:4d:af:38:19:b2:18:f4:7d:98:d9:13:f1:e7:eb:
         49:9d:74:e6:94:5c:2d:c2:ab:eb:22:4c:68:fc:b9:56:bf:4d:
         6e:83:60:ad:1e:93:df:b7:25:3b:28:96:68:8d:cc:77:af:e9:
         96:f1:2f:de:55:d8:d2:83:87:06:f7:6c:f6:41:15:72:15:54:
         40:a7:fd:21:d1:1f:09:eb:cd:f5:74:5e:ed:ca:b1:8e:e5:34:
         80:a6:90:a4:ae:c5:7f:a4:5a:7a:a0:f9:7d:ba:8e:3e:0a:57:
         54:2e:55:48:f9:cd:77:bf:4a:1e:e0:76:a2:9a:8e:2b:6b:04:
         4d:12:75:c0:4b:a1:77:ad:ff:ff:0c:a0:05:60:d8:40:a4:de:
         64:fc:98:03:2c:0c:02:bf:01:26:ca:da:17:ee:5b:c0:73:a4:
         83:4a:ad:6e:67:ea:55:99:b2:bf:64:ff:30:a9:ce:cc:ab:50:
         22:be:d9:c5:b3:5d:59:03:73:f7:88:0e:34:38:db:4c:c4:08:
         8e:6b:6d:a9:ca:4d:9f:5b:98:51:20:7d:b7:52:b0:61:ae:75:
         c4:25:9c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----