Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
File:                     3ad9037d-cc4e-3a46-981a-715e438d4f71.roa (raw, json)
Hash identifier:          5TeOOXy6nSWjPQ9STdCiZ0DvKx6Qbz3bG3Rxn6UM+qA=
Subject key identifier:   A3:8B:07:51:A2:9A:0B:9C:6D:E7:43:D8:41:F2:B1:03:14:14:FB:FC
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F43285848424ADAE82CDD8C9867D25460
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     48231
IP address blocks:        2602:fa93::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:da:e8:2c:dd:8c:98:67:d2:54:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=7eb7de6d-4251-4f13-b7d3-edc6b1afe106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:44:73:5a:7c:e7:f5:4b:7b:84:99:41:70:
                    46:c2:d1:1a:31:fa:e6:bc:b1:e8:b2:12:fd:01:65:
                    47:2c:fb:1c:6b:8c:3c:3d:27:c2:f0:ec:9a:89:e1:
                    a9:aa:79:73:54:8c:4f:0d:f3:20:1d:bc:40:67:54:
                    89:bc:3c:50:dd:47:0a:bd:80:bd:0d:c5:f4:34:88:
                    30:4e:d1:95:1c:fe:fa:5c:d6:08:25:1d:fe:4d:08:
                    1c:ac:40:6e:48:4c:08:38:a4:b2:aa:05:2b:fc:fa:
                    f4:df:d4:ff:e0:85:bc:dd:da:75:02:8e:c5:da:ff:
                    5f:48:f3:fb:15:e8:1a:0b:71:f9:b0:14:7d:ba:7f:
                    af:00:c8:93:5f:19:bd:80:c5:ca:72:6c:94:11:fe:
                    0d:d6:df:61:ef:2d:7d:98:3d:4b:d7:0a:15:96:45:
                    94:41:91:21:10:02:6b:70:6e:f5:dd:b1:5c:e5:1f:
                    09:3d:35:65:6a:38:a0:45:71:24:f5:bd:63:cc:0d:
                    b2:59:88:25:a4:2d:88:7a:81:ba:0c:cb:89:31:3a:
                    0f:82:b9:f8:f6:5b:82:12:9e:80:13:6e:2f:d4:06:
                    41:17:f3:ba:7d:53:ec:33:93:ab:28:ea:5d:65:92:
                    7e:35:9b:1c:dd:f8:26:34:da:f0:bf:2a:5f:9e:b5:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:07:51:A2:9A:0B:9C:6D:E7:43:D8:41:F2:B1:03:14:14:FB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/3ad9037d-cc4e-3a46-981a-715e438d4f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa93::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:1c:6c:59:81:a2:30:8c:ab:7a:ef:f7:0b:fe:c6:3a:d1:fe:
         4d:99:fd:f1:16:27:87:e5:81:1c:1e:89:9a:e1:47:9d:ff:b9:
         45:11:1f:e5:d3:61:c3:e0:0f:da:e4:10:b6:43:93:d7:10:f8:
         2a:bb:b9:ca:da:98:cd:27:a8:2b:32:8a:fd:21:b3:70:f9:2b:
         fe:ac:76:1a:ba:7b:e3:70:1a:d9:bf:4b:c5:be:27:b7:88:76:
         53:1c:33:db:fc:a5:d6:bc:db:b5:80:04:f0:ac:51:9d:24:41:
         bc:ef:16:f1:c0:cd:17:ff:48:c3:cc:57:d5:cf:31:8c:24:03:
         fd:2f:31:22:94:28:4c:49:93:a3:6e:f5:fb:f2:2b:e0:09:11:
         70:1e:fc:68:1a:70:16:9e:fe:79:7e:18:f2:77:30:64:6c:2a:
         ed:2a:49:30:b4:19:5f:29:a0:ec:cc:70:5e:e2:5e:48:85:be:
         52:fc:19:a7:09:c4:ff:c4:8e:fa:7a:f5:11:c3:b4:e1:63:1d:
         47:45:fb:f9:8b:a5:0a:b9:e3:45:e8:b7:4c:9a:9f:b5:58:04:
         29:ff:60:e4:f7:ae:dc:9d:4a:58:72:b0:39:3f:62:37:41:49:
         5f:62:69:94:8f:d2:27:43:89:23:19:ed:d5:14:d4:db:4a:81:
         40:c5:44:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----