Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/751bd616-950f-3832-9508-050789292e7f.roa
File:                     751bd616-950f-3832-9508-050789292e7f.roa (raw, json)
Hash identifier:          4b4xAhIILUZHag0ayM4HwU3W/ombjpUTL80t2QVDMHQ=
Subject key identifier:   93:7C:95:A7:D6:2A:73:6C:DE:EE:1E:C9:84:29:6C:BF:81:93:53:E2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFF8A4C0A72309AEC98AC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/751bd616-950f-3832-9508-050789292e7f.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397216
IP address blocks:        2001:502:d399::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:f8:a4:c0:a7:23:09:ae:c9:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=d00f76ef-58e9-4f47-a19b-1d3f5b67e0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:ea:af:a2:fb:60:c3:8c:bd:1f:fe:cb:69:
                    03:b5:0d:f3:96:70:e5:fe:76:38:c2:c8:f7:d3:f5:
                    bc:4f:d5:4a:4a:4c:bf:e8:40:83:56:de:bd:9c:fc:
                    83:aa:a7:e3:27:23:1b:7f:b4:75:a9:0e:41:2e:7a:
                    a2:a1:90:04:1d:28:01:f1:89:4b:63:bf:0c:05:78:
                    cf:87:a8:88:f3:a2:d3:dd:1d:91:be:0c:bb:4b:0b:
                    12:e4:b2:b5:c2:11:a2:c0:3b:20:ad:67:bf:a9:09:
                    a1:44:c3:30:1f:b1:9e:61:ea:27:42:99:e1:ed:13:
                    d3:aa:48:5f:e9:94:48:57:6d:51:5d:4b:bf:09:dd:
                    79:6a:3d:98:94:8c:29:ce:f7:79:83:42:05:6d:b5:
                    ac:66:53:12:35:ad:98:6a:f9:5c:04:2d:80:04:b7:
                    57:e8:43:3d:c4:1e:af:30:38:9c:73:e7:10:04:35:
                    d4:65:f7:01:63:df:76:d2:c4:4f:df:91:1e:a9:35:
                    c1:fd:ac:0a:f8:66:10:cc:2b:dd:1c:0f:46:76:81:
                    ab:9e:37:03:12:f4:4a:ec:71:ff:01:8f:7e:a5:b3:
                    98:df:d8:f0:52:fd:19:00:fe:77:de:e6:2b:b5:68:
                    55:33:34:d3:36:cd:b4:d5:a2:82:dd:bd:69:4f:c6:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7C:95:A7:D6:2A:73:6C:DE:EE:1E:C9:84:29:6C:BF:81:93:53:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/751bd616-950f-3832-9508-050789292e7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:d399::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:df:42:6b:0e:f2:b0:ae:2d:38:3e:d5:27:88:13:af:a2:
         cd:cd:0c:1c:10:d2:14:e3:5c:be:e8:77:1d:b3:68:54:44:ee:
         67:b5:c6:23:5e:2d:1d:48:a4:ce:7b:5a:28:34:5e:f6:9c:bf:
         e0:20:3e:9b:cd:e1:ee:fb:5d:05:90:60:d1:05:b2:69:25:14:
         f8:62:91:0c:87:a9:4e:78:81:15:aa:6e:a9:7d:0b:03:93:24:
         33:29:9d:e4:80:8b:a7:1a:97:56:db:ff:85:2f:49:62:1e:01:
         95:8a:6c:85:ae:59:bd:d0:d2:3b:9d:3e:7e:6d:50:73:f3:02:
         be:fc:83:0e:7c:77:84:04:6e:b3:35:d0:9d:f8:80:27:62:d9:
         f2:36:d4:68:75:d5:76:78:20:3c:d7:4c:18:fe:0b:62:0b:8f:
         68:07:59:2c:76:26:b8:e9:3b:e7:86:57:14:c8:6d:d3:4a:62:
         4c:0c:ec:f3:26:28:5e:5f:04:cf:f9:22:cc:22:ea:5b:af:0a:
         cc:09:c7:70:04:b1:df:51:0c:be:b5:e4:42:fd:37:40:e2:f2:
         58:fb:12:98:32:5d:80:61:49:c1:bd:59:aa:af:7d:52:ec:8f:
         47:5f:29:57:48:6e:ad:2f:59:f6:48:89:4f:aa:b5:ae:cc:b9:
         bf:fc:40:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----