Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa
File:                     01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa (raw, json)
Hash identifier:          R9FFoMmZ0dJ7GK1suOu91IE1Y+NrfGndqztDdwkbJsQ=
Subject key identifier:   17:AF:E5:81:C3:1D:C3:72:14:F8:7E:64:6E:14:1D:78:E6:11:F3:85
Certificate issuer:       /CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
Certificate serial:       010D0C9F4328584838855EC683AC1161C6776280
Authority key identifier: BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa
Signing time:             Mon 16 Dec 2024 02:00:39 +0000
ROA not before:           Mon 16 Dec 2024 02:00:39 +0000
ROA not after:            Sun 16 Mar 2025 01:00:39 +0000
asID:                     25830
IP address blocks:        2604:a40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:85:5e:c6:83:ac:11:61:c6:77:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4
        Validity
            Not Before: Dec 16 02:00:39 2024 GMT
            Not After : Mar 16 01:00:39 2025 GMT
        Subject: CN=a8de68f2-06b3-4900-81bd-1b732231fb49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b8:59:23:3e:c5:82:e1:40:d4:a2:e6:81:4c:
                    fd:c8:65:3d:09:25:4f:29:c1:9f:3c:d1:a9:8d:12:
                    a4:b7:3b:63:56:64:2c:8b:c8:55:5f:c8:8d:ab:42:
                    4f:bb:7c:0a:6e:80:85:13:2d:21:62:8a:f5:e6:ef:
                    a3:0c:cc:b6:d9:62:38:ae:93:0e:48:5c:23:56:ff:
                    0f:1a:cc:a2:b3:f7:ce:e4:f1:9d:54:6f:86:50:e1:
                    70:2e:c8:e1:27:6a:74:41:f5:b9:f7:38:f0:e5:a0:
                    b7:04:38:d0:90:9b:a6:24:1a:d8:ea:84:d5:a8:c8:
                    36:e1:ba:d0:9e:3f:76:1f:61:8b:c0:5e:f1:b3:6c:
                    a3:7e:ad:79:4e:c8:75:b6:e0:e5:2b:84:0f:19:19:
                    d9:d3:c7:ba:96:f1:6e:c2:cc:8c:21:13:2e:ff:c6:
                    9e:b7:26:a8:6e:6b:7a:4e:57:b7:eb:d3:f2:10:f2:
                    41:48:5e:d7:5a:df:0d:f5:0e:a7:1f:cd:f9:c8:f8:
                    57:e4:37:fa:39:0b:92:1c:2d:98:73:79:6d:0b:2d:
                    72:d8:53:5f:c6:9e:e8:25:94:24:90:39:2c:54:b0:
                    de:c0:c1:21:ca:ef:38:a9:d9:4c:ce:54:27:a9:13:
                    39:15:1d:fe:e0:8f:78:48:11:d8:6b:70:42:36:fa:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AF:E5:81:C3:1D:C3:72:14:F8:7E:64:6E:14:1D:78:E6:11:F3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/01d0f9c0-735d-31f3-ab7e-2fe439f2f276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.crl

            X509v3 Authority Key Identifier:
                keyid:BF:C2:9B:C0:5B:B5:EC:2F:7F:D9:9D:2E:8E:8F:76:88:57:6C:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adccd3b3-dda5-453f-b50d-0a1e9e4d4ef4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:eb:8d:e2:7d:d8:be:21:41:94:80:ac:51:34:82:d0:3d:09:
         7e:7b:46:0e:63:5f:03:e6:43:2c:59:55:88:c3:a4:a8:e7:56:
         c4:30:bf:aa:ac:80:06:43:3a:f5:b5:c0:a1:69:37:71:5d:78:
         e6:9a:ec:fc:a8:f0:64:7e:54:ac:fc:5c:77:3d:c8:cc:e8:17:
         b6:b8:9a:b5:cc:ab:17:9c:02:7d:fc:75:3a:dc:cb:87:6d:7c:
         83:93:24:3e:f0:42:51:fe:c6:d0:64:fa:83:b5:4e:8a:96:e1:
         64:73:64:29:d3:a6:fc:00:d5:0d:83:49:c7:27:4f:81:22:30:
         0e:a1:b9:2c:18:62:7e:35:7f:d2:65:de:0a:2a:13:8d:9b:f1:
         d6:dc:29:79:88:c4:ce:84:4b:10:e1:87:2a:e5:9c:86:71:c6:
         af:9d:cd:27:00:1e:b1:88:ec:c0:9f:d1:d6:be:1e:28:c5:f9:
         6c:2e:0e:ea:94:d8:32:a1:06:81:c7:17:cb:30:15:54:d7:e5:
         38:5c:88:27:a2:0b:f3:62:03:bb:eb:6b:16:49:52:13:1f:ea:
         49:45:cb:d3:87:3a:e8:47:a0:09:e5:df:bf:22:a9:7d:1e:30:
         40:31:4f:80:cb:73:cc:66:91:04:24:b5:c2:1c:c8:4c:cc:70:
         96:c1:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----