Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/8a46b765-cf03-3ea7-bb68-bf40c02e7071.roa
File:                     8a46b765-cf03-3ea7-bb68-bf40c02e7071.roa (raw, json)
Hash identifier:          zQyTIS5fSWFpOKNLPUnk+UczMtfs62w12xZbxtCYzbM=
Subject key identifier:   CA:4E:52:9E:2A:6E:C8:D8:FF:A4:48:E1:10:A8:2C:84:7D:5F:7C:DA
Certificate issuer:       /CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca
Certificate serial:       010D0C9F432858483E1ABC50EF03FF5C4F36A240
Authority key identifier: DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/8a46b765-cf03-3ea7-bb68-bf40c02e7071.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        2602:2a5::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:bc:50:ef:03:ff:5c:4f:36:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8efa6bf-6e74-4780-a80d-cf85d80c97ca
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=ec3f263c-cb6e-4b19-9a69-fb02fea36db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:8e:6b:c4:e8:5e:5f:80:6f:4c:13:94:5b:
                    41:fa:c2:bd:d3:a8:d0:07:30:23:90:f7:db:46:07:
                    b6:7a:77:52:8e:85:75:b5:e9:f6:cc:7a:28:6b:76:
                    b5:d0:50:f1:f6:20:d9:9c:b7:9a:4d:e1:26:ab:44:
                    d8:91:e1:41:91:95:cb:cf:4b:86:82:71:07:07:eb:
                    14:ef:f9:de:cd:39:4c:aa:0d:31:ed:b9:7e:0b:8a:
                    d6:0e:01:b8:a1:94:32:8b:1e:62:13:21:d4:93:12:
                    f0:9f:d4:29:85:32:32:18:cb:dd:5c:a4:4a:66:7d:
                    f2:04:20:0c:ac:5b:5d:4e:e7:17:97:a0:74:98:a5:
                    7c:55:fa:2d:e6:ba:28:ae:69:35:24:a4:a5:69:6e:
                    42:9b:53:75:e8:4d:ef:d9:14:82:93:b7:b8:e8:cd:
                    50:39:03:e9:b7:f8:d0:67:ed:1d:2a:f1:df:f9:68:
                    08:4f:5e:52:b3:ee:65:a2:42:52:51:2f:11:11:91:
                    f8:64:b2:1d:84:33:21:7e:3c:f9:0d:e2:f2:85:77:
                    59:43:c1:de:ca:94:2f:ed:dc:dd:38:30:fd:88:bd:
                    57:0d:92:23:08:37:26:d0:e9:39:08:fe:cf:17:40:
                    32:86:e3:61:08:0d:3a:9a:2b:3c:61:14:96:ba:1d:
                    6e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4E:52:9E:2A:6E:C8:D8:FF:A4:48:E1:10:A8:2C:84:7D:5F:7C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/8a46b765-cf03-3ea7-bb68-bf40c02e7071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.crl

            X509v3 Authority Key Identifier:
                keyid:DF:F8:64:A7:2D:1C:EA:15:63:CB:A7:32:9C:AC:00:33:B5:71:3A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8efa6bf-6e74-4780-a80d-cf85d80c97ca.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5b:0b:62:dd:d3:4c:e3:d0:36:29:72:c1:a5:72:a9:f5:35:
         8e:3c:31:4b:26:ad:8f:40:66:41:be:f4:a6:64:ad:a9:ad:0c:
         0c:a0:44:31:ec:5c:5c:ab:50:bc:a1:f0:c5:02:18:70:3a:b6:
         37:c9:b3:90:e2:56:4a:17:d9:0e:38:61:96:83:ec:b3:ad:a9:
         a6:36:7e:06:46:43:4a:f7:9d:ae:3a:70:7c:4c:6b:dd:a1:33:
         89:ba:01:7c:fc:6e:20:02:32:a6:63:e5:86:d8:0c:74:ce:42:
         f6:1f:9c:b7:15:aa:dc:58:ce:2f:27:65:85:b0:78:ad:54:d3:
         02:e9:93:a4:0c:6d:34:c4:7c:a6:8b:fd:19:fa:92:9c:4c:91:
         7a:f3:fa:63:d1:8c:08:c8:94:c9:56:25:a2:96:b5:e9:62:60:
         cb:9a:ae:f4:cf:76:60:39:a5:01:ec:6b:2b:7d:21:4d:ba:fc:
         99:bf:44:c4:b1:25:a6:8f:aa:6a:bf:c0:a1:3f:ae:b1:95:59:
         56:12:19:0f:28:b4:cf:14:5e:b3:db:6d:ee:a3:b2:af:26:87:
         06:3a:f2:1e:7e:d4:bb:18:d0:c0:bb:6e:23:02:ae:e9:93:dd:
         0b:27:d5:76:63:9b:d2:76:4a:8d:52:6c:fb:4d:b2:d8:c6:6b:
         5f:fc:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----