Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/da532ee3-b146-3bf2-8687-6f6c9701c3bd.roa
File:                     da532ee3-b146-3bf2-8687-6f6c9701c3bd.roa (raw, json)
Hash identifier:          0wxB8qzsXM3xljY6hUKIioU9cDZMPGgyDhU1geOTxcI=
Subject key identifier:   C8:23:A0:27:65:1D:8B:A7:F4:CC:08:14:14:42:F7:E6:51:0B:4C:90
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F432858482BF55A439600BE69C277B700
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/da532ee3-b146-3bf2-8687-6f6c9701c3bd.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     208223
IP address blocks:        2602:f9f6:420::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5a:43:96:00:be:69:c2:77:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=92c4d6ae-b139-45b9-923e-dc3402d62a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:05:b6:14:f2:67:bd:76:8b:83:cd:e4:43:
                    e9:3b:ca:e7:b1:c5:da:6c:08:14:47:d3:2a:18:20:
                    39:d6:ee:3d:a5:69:36:09:02:3d:33:65:b9:f6:85:
                    b7:a1:8e:5d:79:6d:8f:3b:96:a6:cf:48:c9:12:6b:
                    c2:12:60:d0:00:98:42:6a:b3:6f:c7:15:be:70:c4:
                    80:14:2a:17:98:56:4c:ec:e1:a2:69:c4:72:ea:e9:
                    19:03:15:29:22:5a:f5:0a:e7:bf:16:b1:3f:60:f5:
                    38:7e:e0:a7:47:9f:79:04:df:60:19:0a:84:f7:df:
                    d5:9e:92:99:6b:fe:1c:9e:5d:a1:e8:1f:ca:f8:10:
                    c7:77:b2:6c:4b:bf:54:25:46:d2:c9:b9:93:7c:cb:
                    c5:65:3d:ad:c8:d8:d4:02:fd:03:97:11:b4:13:38:
                    8a:a3:86:3e:0f:e7:13:8a:63:66:5d:aa:a7:9d:0c:
                    7a:a2:91:b4:70:4f:46:e9:43:e8:f5:ac:bc:4d:54:
                    30:b8:39:60:c1:d0:12:82:55:cd:0b:c2:52:15:24:
                    b8:32:9d:9d:e0:9b:12:a9:a9:b6:8c:57:5b:98:b0:
                    6d:4f:5f:a5:ab:33:28:84:ba:b6:0a:1b:a1:14:b5:
                    24:ca:e0:3b:cc:2d:a2:31:d3:95:5a:5e:94:6d:66:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:23:A0:27:65:1D:8B:A7:F4:CC:08:14:14:42:F7:E6:51:0B:4C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/da532ee3-b146-3bf2-8687-6f6c9701c3bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6:420::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:00:87:58:f1:3a:c7:78:ae:b9:70:dc:c1:dd:f8:28:5a:33:
         e5:7b:d3:46:39:78:33:9b:32:26:6c:c7:3c:0e:e4:76:3c:a0:
         71:43:5b:cb:a8:52:e5:4f:77:93:f6:40:f5:de:42:a0:3a:c2:
         4c:0d:13:69:bc:e3:da:79:2a:e4:65:57:f4:3e:2b:ce:2b:51:
         13:f9:b6:86:91:a8:74:5c:70:63:61:7f:cc:5b:ab:be:bf:38:
         95:2f:54:9a:2f:e3:86:9c:5b:40:71:32:75:22:4d:6d:cb:1b:
         28:1d:ea:1f:d9:b0:30:73:7e:3e:02:28:88:9a:ac:f6:26:74:
         96:52:e0:f0:93:a3:58:21:33:74:e2:84:e0:1d:48:85:5a:ea:
         bc:c0:3c:2a:02:4d:d6:1b:7f:e5:3b:fa:77:24:80:d8:06:f6:
         a2:49:5f:fc:cd:84:4a:1c:28:e7:9e:0f:35:bb:c0:5d:7b:3f:
         c6:39:9b:e1:99:2d:64:b8:27:e8:75:6e:8f:02:25:c6:e4:31:
         7b:8c:a2:cb:8a:3c:31:4c:59:9c:ef:57:5c:50:9e:8f:ee:cd:
         db:b3:40:06:e0:a0:91:fd:ab:07:35:84:b0:35:5c:98:9f:b3:
         aa:d8:0d:7f:87:ca:b9:3e:f1:1e:b2:67:ae:c7:e1:e7:4c:2e:
         49:52:a7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----