Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa
File:                     396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa (raw, json)
Hash identifier:          7FYNlGapEbT1mF63a54IMlk8zjSbbdrXBKPbFXQTTuA=
Subject key identifier:   06:30:D1:4D:7C:3A:AA:EA:34:B5:22:EC:83:71:6E:BA:AA:65:61:39
Certificate issuer:       /CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
Certificate serial:       010D0C9F43285847E78F65DCC555477E33433000
Authority key identifier: 2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     393559
IP address blocks:        2602:f8c8::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:65:dc:c5:55:47:7e:33:43:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1b35dc3-b096-40ba-8edf-87e481b625c4
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=191fb4c9-389e-41f2-b5bb-a1c24692b044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:ce:4d:cd:02:89:1d:75:c8:b2:a8:88:a1:
                    04:7d:3e:fc:f8:c2:7e:23:90:f8:66:22:48:08:f3:
                    e8:8d:98:f6:09:ff:a3:32:01:9a:cb:f1:61:39:e8:
                    26:cc:ee:01:cb:6b:08:91:a3:c0:0a:b6:cf:7d:25:
                    a7:78:92:92:43:19:b1:bb:2c:35:de:90:85:53:ea:
                    d0:61:78:e9:3c:e8:be:5c:91:0e:1f:2c:93:f3:24:
                    cc:e3:05:b7:d7:b5:6a:12:1e:ab:a1:5f:a4:ce:39:
                    6a:a2:35:b9:a4:a4:89:93:f1:3d:ca:62:ab:dd:24:
                    91:cc:2b:1d:43:11:f9:cf:9f:e9:f7:64:22:0b:78:
                    df:a4:bc:68:a6:e9:33:89:f0:7a:65:c6:c8:72:86:
                    f1:8d:01:5e:52:12:7e:62:74:42:41:d0:8a:cd:9e:
                    ef:73:ef:fd:44:f7:e9:7b:ca:87:bb:76:ee:ef:93:
                    60:a7:19:c1:dd:e8:ef:84:fc:02:b4:d7:42:cc:38:
                    09:ee:c2:74:87:a5:51:4a:ab:98:4f:3f:c6:52:94:
                    8c:cc:a7:39:7c:7a:7f:e5:08:48:16:c0:4a:97:d5:
                    32:69:8d:39:3e:98:9c:37:9a:7b:70:23:94:3b:27:
                    21:07:63:83:00:6e:6b:7c:24:25:93:03:61:29:79:
                    7c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:D1:4D:7C:3A:AA:EA:34:B5:22:EC:83:71:6E:BA:AA:65:61:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/396df5c8-94c4-3cd8-b9cf-03ad9706a71f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4/b1b35dc3-b096-40ba-8edf-87e481b625c4.crl

            X509v3 Authority Key Identifier:
                keyid:2E:74:CD:6B:0B:BB:49:7B:EF:E2:32:E4:BB:DA:A2:98:54:EB:C6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b1b35dc3-b096-40ba-8edf-87e481b625c4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8c8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:07:e6:ca:d9:af:aa:47:75:a9:4d:b7:6d:f0:d1:05:8f:
         25:3b:e0:8e:87:58:3c:b2:57:51:bd:1b:6c:e1:7c:b8:0d:66:
         a8:0e:5b:3b:c8:30:7a:24:bb:72:4a:50:94:ad:06:34:82:f3:
         40:cc:55:e6:e7:0a:50:44:b8:31:f0:b9:28:2e:b5:61:07:a5:
         d3:e2:cc:b9:1c:16:78:09:79:7d:f7:ac:d6:40:70:ad:5d:f0:
         75:41:3f:3a:6f:d9:95:88:12:d0:b6:e9:51:0f:a6:e5:45:25:
         37:3d:08:03:de:c3:9c:f4:69:e0:d8:6c:a1:66:e5:f5:83:a9:
         65:89:35:e2:e9:35:78:53:a8:96:e7:2d:a4:9b:cd:0b:c6:17:
         ea:f9:40:ff:b6:73:8b:f2:55:45:c0:52:8d:29:92:65:9c:63:
         e0:9e:29:d6:c3:a4:b3:e9:fb:fe:26:c2:2f:05:e0:d0:96:86:
         c9:01:13:fa:77:96:9b:c4:05:68:86:e6:b8:59:6c:e6:9f:73:
         b9:07:70:77:b0:64:83:06:b1:41:7d:b5:30:59:b5:05:81:76:
         87:5d:ee:5f:2f:57:16:cc:d8:ee:c5:ca:e3:d6:f0:3c:a3:6b:
         c1:d3:03:1f:aa:e1:36:4d:cf:52:d2:9a:73:5f:03:8e:0c:04:
         29:de:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----