Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa
File:                     589da0a2-d425-3d1f-92f5-29c36941c1a5.roa (raw, json)
Hash identifier:          E7IfkIKNgfviAaQ1SW85U5nNqaiXFynJmgMJINXoe4c=
Subject key identifier:   7B:82:1E:A6:60:E9:6F:72:F2:04:BA:8B:D0:95:09:71:F5:2D:E1:CF
Certificate issuer:       /CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
Certificate serial:       010D0C9F43285848577F79B35293E40FBD534D40
Authority key identifier: 8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa
Signing time:             Fri 27 Dec 2024 04:19:04 +0000
ROA not before:           Fri 27 Dec 2024 04:19:04 +0000
ROA not after:            Thu 27 Mar 2025 03:19:04 +0000
asID:                     401541
IP address blocks:        2602:f757::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:7f:79:b3:52:93:e4:0f:bd:53:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dacb0047-4725-424f-a3e9-b6f212c4c5e3
        Validity
            Not Before: Dec 27 04:19:04 2024 GMT
            Not After : Mar 27 03:19:04 2025 GMT
        Subject: CN=654a2752-3060-430d-9e20-8772af9c091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:07:bf:45:07:c8:d8:ea:c7:d7:58:52:67:c9:
                    e1:07:da:4c:04:43:00:e7:04:9a:cd:9a:f6:08:63:
                    10:42:59:6d:e1:00:a2:d2:80:55:2a:c1:02:db:fe:
                    7a:20:f0:df:92:44:13:ae:bf:92:76:b0:0a:da:25:
                    9b:2c:1b:a6:d7:02:bf:83:af:f2:2a:92:fb:fd:67:
                    a5:2f:7f:b4:9e:de:69:a3:bb:7b:ab:60:67:42:e5:
                    e3:5a:88:46:60:45:c0:a0:8e:d3:f9:f1:cc:88:4e:
                    fa:7a:82:39:54:d5:a0:bf:99:81:cb:6f:b3:0e:20:
                    a4:ab:b7:ff:43:c6:01:62:b0:e9:bf:cb:4c:fb:ec:
                    a9:2b:fe:16:c6:65:03:5b:33:b3:3c:25:49:82:60:
                    45:ac:c4:0e:d8:f2:00:58:9b:8a:62:1e:c4:c4:7c:
                    a3:9e:bf:30:c6:96:d3:02:27:94:2b:c4:9c:f9:1f:
                    6b:1a:c7:f3:48:cb:bc:7a:39:b8:f1:74:bd:5a:87:
                    14:82:c1:34:57:44:0b:c2:52:64:e7:a7:a4:d8:ff:
                    d9:e6:94:30:8c:ce:0f:64:cb:66:6d:e1:d0:c4:dd:
                    de:0c:de:4d:7e:65:da:11:8a:7b:b3:21:43:69:4a:
                    3e:98:e3:dc:5e:37:ad:69:ce:81:8e:05:35:77:98:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:82:1E:A6:60:E9:6F:72:F2:04:BA:8B:D0:95:09:71:F5:2D:E1:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/589da0a2-d425-3d1f-92f5-29c36941c1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3/dacb0047-4725-424f-a3e9-b6f212c4c5e3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:97:87:F5:9B:AF:E2:9E:8A:04:00:52:AF:25:84:7D:11:C7:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dacb0047-4725-424f-a3e9-b6f212c4c5e3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f757::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:84:b8:3d:cd:32:7b:63:6f:0a:ff:fb:52:90:30:37:66:
         28:53:cf:9c:5e:27:01:27:f4:b9:28:a5:e0:12:16:39:9a:ad:
         a7:28:37:06:ca:1b:96:b5:bc:12:8e:b6:50:e4:50:48:41:0e:
         31:38:c6:81:3c:dc:e7:7e:55:75:83:0b:82:63:fa:dc:fa:ed:
         df:d9:fe:9a:69:27:fb:b0:33:61:fd:3d:2a:e7:d6:6e:4c:8d:
         5c:af:c3:b7:07:b0:82:3e:25:fb:8e:68:2d:f3:c3:99:71:ab:
         0e:fd:16:58:57:41:7e:cb:d4:da:b7:9f:a4:f5:53:f2:58:85:
         be:bf:8c:40:0b:cb:84:45:ad:44:d4:9c:83:2b:45:2d:74:b2:
         a3:6a:79:6f:a6:ac:23:71:93:38:e1:c3:c6:c9:df:ab:35:6f:
         fb:cf:c1:77:f7:62:2b:da:65:a9:21:23:f2:89:62:93:57:28:
         0d:09:e4:81:75:08:0b:78:b7:af:17:5d:f6:3c:5a:77:8c:73:
         00:c9:50:85:13:de:df:3c:f6:26:ca:c7:5d:da:ef:a3:1b:71:
         68:1e:40:77:66:8f:52:e3:3e:e5:ad:dc:20:2d:88:51:cc:20:
         15:8c:2b:c2:05:5c:c9:52:8d:bf:3d:d9:33:18:5b:ba:c5:f0:
         f7:60:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----