Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa
File:                     3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa (raw, json)
Hash identifier:          nR9Na98OLVx4MIMZrQCkRq50YGUIDx3JuWH09D86tSo=
Subject key identifier:   C2:D9:B3:4F:85:69:D5:0B:17:33:67:A7:1A:51:DC:B2:0C:43:37:C8
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFF6D76DC8C90BDE4B4080
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397219
IP address blocks:        2001:502:ad09::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:f6:d7:6d:c8:c9:0b:de:4b:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=e743ab4a-51d1-4e90-bef2-cec1c409f8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:5c:89:ee:84:26:f1:49:8f:7b:06:e0:3d:
                    a1:2e:96:1c:52:74:ca:e6:c8:d8:94:69:48:47:8c:
                    b8:e0:b7:f2:ce:54:eb:14:c4:cc:9c:8c:36:62:1e:
                    88:ef:e2:f9:c6:df:83:fa:e5:5e:df:15:b4:be:e7:
                    8b:48:86:be:5b:35:25:c2:59:34:f5:23:e2:35:1d:
                    af:ec:ce:6c:86:2e:93:07:e9:39:a0:24:9c:a8:dc:
                    31:9e:81:29:82:f4:fd:4d:cc:73:e1:70:52:9a:03:
                    3e:f0:17:78:2f:22:be:c7:e1:d3:79:8a:b2:ab:af:
                    36:a0:33:92:74:3f:cd:78:51:2c:76:85:28:0c:8b:
                    02:35:1d:0f:8e:9f:1b:ac:b8:ef:8f:fb:85:45:ca:
                    a3:6a:36:70:4d:29:c2:2d:f3:7c:26:dc:75:c4:df:
                    11:ae:90:22:a8:ae:50:79:98:5a:d1:69:b5:d3:59:
                    6b:cc:a9:d6:c0:37:24:41:96:6d:64:7d:bf:e1:28:
                    8f:1c:ae:9b:b0:a3:2d:10:36:57:1d:68:c8:71:6f:
                    46:5d:62:88:9c:78:23:73:b7:b8:20:5a:9d:ca:a3:
                    2d:e0:4a:6e:2e:c5:31:9c:81:99:5b:f2:f6:e1:30:
                    fe:fe:dc:7e:a8:db:d9:91:ee:2b:db:85:de:9d:08:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:B3:4F:85:69:D5:0B:17:33:67:A7:1A:51:DC:B2:0C:43:37:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3090c9c5-37b8-3f8e-9dc6-82c6e825fa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:ad09::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:73:c2:39:a8:73:e4:a9:74:8c:15:25:12:75:49:1c:a7:3b:
         b2:a6:d0:35:06:98:da:94:c0:13:d3:5f:46:68:20:60:6b:70:
         37:e6:3e:e2:3d:33:02:7b:92:51:60:3d:35:60:b2:d7:c3:20:
         3f:bd:84:ac:09:cc:03:af:7f:65:f7:7a:8b:76:9d:28:77:c1:
         6a:5d:27:9f:c5:da:9a:44:2f:89:b1:b0:74:e1:57:de:b9:e3:
         76:e9:e1:26:2e:d0:d3:dc:83:3b:ee:0a:0f:6b:ad:c1:8b:7b:
         36:03:33:2d:b3:fc:00:10:38:bf:a6:aa:61:9d:e4:71:d8:65:
         aa:49:d4:2e:03:a8:11:31:c0:ce:77:2b:8c:12:5d:08:c3:fe:
         c5:9b:bd:2d:ae:d8:80:38:30:5f:23:8a:73:07:67:97:a1:8d:
         ba:e3:09:f6:48:aa:02:c0:b1:e4:9e:1c:35:b6:69:a4:55:d8:
         c0:c7:26:58:cf:c3:3f:c8:67:f6:bf:72:23:5d:45:b1:04:6f:
         fa:0e:f0:01:e2:5f:65:cf:7e:3b:85:15:dc:22:f5:5b:ba:11:
         98:6d:29:aa:d8:f4:ef:7c:f0:e5:af:65:52:e7:62:de:54:9f:
         01:86:bd:b3:67:d7:c4:6f:f6:f9:c1:52:b2:30:70:98:2d:3b:
         74:a5:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----