Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa
File:                     dad7d956-91ce-309d-a710-c9e480e1eb82.roa (raw, json)
Hash identifier:          4BV7vu6Fjjc5jWaL8RAbg56N33n/IXYfHMxRhrZlWV4=
Subject key identifier:   E4:26:C1:42:C3:E1:96:24:4A:60:8A:F5:2A:C3:36:7C:B6:7B:63:6A
Certificate issuer:       /CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca
Certificate serial:       010D0C9F432858489340A893200CE8ED2DC3D960
Authority key identifier: 02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     400644
IP address blocks:        2620:aa:a000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a8:93:20:0c:e8:ed:2d:c3:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=cbab6b15-d61b-4a14-890d-2848ab7c4241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9b:b3:ba:e0:9b:2d:b2:10:3d:c0:01:fb:40:
                    c1:70:d4:d1:d9:6c:45:06:ed:a4:2f:03:b8:5a:10:
                    fb:07:1c:75:3f:3a:4d:1c:27:4c:08:63:f5:1a:8f:
                    4a:27:83:02:88:be:1d:a1:80:03:aa:6e:66:87:7a:
                    c1:2c:8a:02:93:49:35:c8:ae:d0:40:2c:34:83:77:
                    0c:a1:d5:f7:5e:0f:b2:b9:93:5a:cd:ff:17:96:63:
                    87:98:7d:67:d0:88:c1:4a:36:37:70:0d:53:2b:b9:
                    f7:fc:e8:be:d0:12:2f:33:ce:0b:60:94:7e:ce:3e:
                    2e:f8:b2:7e:d6:13:e8:50:a7:ab:70:e4:97:e8:68:
                    08:bc:1a:80:9f:71:fb:3e:39:88:e2:40:0d:e5:dc:
                    53:05:be:98:22:00:e4:3a:a5:0a:fd:c2:19:eb:b5:
                    ca:f4:0f:17:e1:31:b0:47:99:c7:1d:8f:bf:9b:ed:
                    46:1f:43:78:9f:fa:3e:d6:48:06:7d:55:b7:f4:46:
                    24:66:30:89:98:3e:16:a4:56:6c:12:8d:aa:16:e7:
                    93:bd:b7:f1:17:86:95:f1:0d:74:d9:d7:d0:e7:be:
                    7a:52:05:62:81:15:f3:1a:e9:25:70:4a:26:a3:f0:
                    5f:74:75:c1:87:a0:61:d7:14:55:ac:8b:29:8a:b1:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:C1:42:C3:E1:96:24:4A:60:8A:F5:2A:C3:36:7C:B6:7B:63:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/dad7d956-91ce-309d-a710-c9e480e1eb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.crl

            X509v3 Authority Key Identifier:
                keyid:02:5F:8E:3F:1A:33:F6:22:34:19:90:CE:F1:19:AB:2B:9B:5B:AF:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5ba1aa8a-bad6-4e09-a4c6-ac424f04f5ca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:aa:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7a:d6:bb:8e:99:2e:f0:a8:47:0f:7a:3f:a1:05:0c:37:3e:
         46:10:08:86:b7:91:4f:ec:72:56:3f:2d:6e:c0:48:92:04:37:
         47:f4:75:9d:f5:f6:fc:e2:d3:60:19:f2:4a:64:0d:e4:f3:6e:
         1b:b6:6a:4a:c2:91:47:ec:94:ea:20:f8:11:9f:e4:56:2a:f1:
         10:e7:ac:9d:5d:b3:e0:c7:c2:b6:9e:3c:d0:e4:9e:88:51:51:
         a2:4e:96:6e:35:ad:e5:04:a5:56:54:6a:d9:ca:20:d0:a2:37:
         ab:12:b7:c7:aa:ae:e2:28:7c:b6:62:39:51:36:22:6f:f6:10:
         2c:e9:ef:c9:2b:cf:4e:04:11:ac:5d:6e:4a:56:a4:91:bc:3f:
         b0:10:d1:b6:93:62:35:df:f5:88:10:50:99:bc:98:77:d6:23:
         fc:80:f2:63:d2:be:e8:79:cf:5d:cc:b7:18:83:14:44:fe:c6:
         86:97:43:72:5d:2e:7f:5f:c1:7b:dc:66:0a:7f:63:e2:c4:df:
         aa:51:27:e6:7f:6b:b4:8d:a3:2c:a9:84:80:42:8a:2f:a1:fb:
         ef:fa:de:57:a3:56:9f:5b:ed:39:49:a2:9a:bf:f0:07:99:ca:
         17:f8:d8:c0:24:9f:a1:29:01:8d:a5:fa:6d:46:bf:e3:1e:7b:
         24:7c:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----