Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be2c5e7b-baaa-3c4c-9f35-b4468491d5c6.roa
File:                     be2c5e7b-baaa-3c4c-9f35-b4468491d5c6.roa (raw, json)
Hash identifier:          oXhGUO/V+RiffeiS/YBX1+GVQqLqEtO8ZMfGd89i6Bk=
Subject key identifier:   96:C2:36:51:2D:72:8C:C8:17:5D:C8:79:03:64:F0:A8:40:C0:95:B1
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832EFED9C639904A635AAEE20
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be2c5e7b-baaa-3c4c-9f35-b4468491d5c6.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     12008
IP address blocks:        2001:500:3682::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:ed:9c:63:99:04:a6:35:aa:ee:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=37ffbfa6-844e-4b37-9b16-847249833b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:10:3a:2d:7d:aa:29:2b:e0:59:8d:ea:73:
                    83:23:65:a4:02:5b:3d:67:2d:95:34:b1:d1:fc:6a:
                    6d:5f:f8:b0:8a:54:92:63:ac:0d:1c:b6:18:c2:9b:
                    ff:d0:d1:71:22:90:4c:5f:93:ff:ce:aa:7e:70:26:
                    61:d0:9c:29:84:ab:b3:8c:66:df:ab:9f:45:7e:b4:
                    e7:1a:13:ee:67:af:b5:cc:ab:78:e7:69:f1:cf:1c:
                    ed:c9:31:79:35:dc:91:c4:f8:e6:81:45:39:9e:f3:
                    31:0d:50:e4:08:5a:72:8e:5f:69:bd:8d:a9:16:9e:
                    e1:65:03:8c:d1:14:d7:08:85:7f:f0:72:a2:c7:1c:
                    e5:75:ad:e8:e3:65:93:1a:95:a5:dc:88:10:4b:93:
                    7e:a9:68:8f:fe:67:39:33:c7:6e:55:7c:b9:8a:57:
                    6f:8b:61:96:1d:f3:a8:5f:a5:56:df:07:69:d3:eb:
                    47:eb:9b:e4:d9:9e:f6:42:f8:f2:6f:27:eb:2f:23:
                    74:f0:b0:9c:aa:69:a0:95:28:86:e5:a5:a7:9d:30:
                    01:c5:b5:95:69:5c:e5:3b:5e:f2:14:3c:57:91:ed:
                    26:b2:8f:8a:fb:de:d9:2d:b1:f4:f8:41:81:7b:9c:
                    de:a5:f6:34:00:ab:e8:bf:4a:2b:ad:2d:00:92:67:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:36:51:2D:72:8C:C8:17:5D:C8:79:03:64:F0:A8:40:C0:95:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/be2c5e7b-baaa-3c4c-9f35-b4468491d5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:3682::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:4d:03:75:62:1e:07:f2:a1:e7:95:38:9c:cd:ed:6a:b9:82:
         b3:6a:ce:fa:13:51:eb:1f:8d:98:20:de:94:eb:78:a4:7c:37:
         3d:62:a1:6a:eb:da:c9:3f:fa:c3:c8:c9:ea:09:db:0d:52:c7:
         b5:ba:d2:01:0e:95:6d:c2:36:07:43:a8:1d:81:6e:b1:9c:88:
         d2:a7:57:af:ca:dc:16:2e:68:b6:f7:b3:0d:66:24:cc:73:01:
         de:6b:12:c8:fe:b1:91:ad:c9:ae:c5:89:3a:a8:85:b2:cd:a2:
         a9:f6:7e:c5:40:55:f4:55:40:21:95:3f:f2:89:a7:aa:81:de:
         1a:ba:ce:a0:c8:e2:7d:de:43:0e:4d:93:4e:41:03:91:1f:93:
         42:b0:89:48:6b:f3:6f:7a:2b:f6:71:80:c9:40:b2:14:f0:f4:
         2f:77:84:07:ff:7b:ed:c9:08:14:b0:9f:d2:52:92:d0:a6:52:
         50:aa:5f:44:b9:c6:ac:47:5f:0b:36:49:18:8d:12:9d:67:8f:
         4f:95:95:f2:18:f4:e8:ef:7f:fe:7e:fa:9f:46:0e:fa:a8:79:
         f4:bf:78:07:79:13:bc:c5:7b:28:36:03:68:fa:cf:d7:4b:8d:
         08:97:ae:56:0d:a3:50:1a:59:fa:13:2d:3b:5a:1f:97:82:7a:
         35:af:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----