Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa
File:                     5e889615-28e6-3865-9da3-bc83f494f968.roa (raw, json)
Hash identifier:          mcAg35IDi4R8n4uG48wrk+EKL4cLLCPHHMV4GR/DkrI=
Subject key identifier:   F9:7B:B4:C8:CF:1A:FB:4D:88:3E:60:52:66:7F:90:56:1E:41:ED:6A
Certificate issuer:       /CN=03cb17c9-7597-4c95-a127-009654391416
Certificate serial:       010D0C9F43285847EFEF85DC14376DE22358E100
Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     40776
IP address blocks:        2602:f8ab::/48 maxlen: 48
                          2602:f8ab:4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:85:dc:14:37:6d:e2:23:58:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cb17c9-7597-4c95-a127-009654391416
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=26e3610a-2d4c-437a-b508-8f2bf116b9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:3c:31:07:7e:25:70:35:57:20:5f:5d:5a:
                    c2:15:3d:82:19:83:a7:3e:a4:e1:0d:42:9c:b9:71:
                    6a:71:a1:c3:93:fd:4b:78:bb:5c:49:16:1c:5a:9b:
                    05:1c:58:8a:43:30:86:2e:b8:05:dd:b1:13:eb:18:
                    53:9c:2f:d5:07:9e:73:44:b0:e5:f9:ec:3f:f5:c1:
                    4c:3a:a0:40:92:95:90:5a:01:05:89:96:9f:d9:b8:
                    11:73:fd:96:1c:0e:df:d0:e8:a4:0b:e1:6a:d8:68:
                    98:47:5e:1b:60:05:27:97:d1:7d:63:b3:63:a9:f7:
                    0f:65:4c:bd:2a:75:74:f0:21:ad:bf:a3:38:fb:38:
                    bb:1b:a5:6a:a6:17:3b:bb:4a:c2:be:23:b7:4e:14:
                    b1:13:e2:8d:fb:1e:df:09:5b:af:b9:8e:9d:f0:b5:
                    46:88:bc:3c:5f:4d:ef:af:4e:58:24:51:f2:50:23:
                    ac:1c:c6:03:86:8e:99:bc:fd:eb:61:b3:a1:60:91:
                    22:c8:ce:da:ea:db:fb:e3:f6:98:5f:4c:f8:ab:d8:
                    40:b2:f7:7d:59:25:f6:eb:8c:5f:14:91:52:47:8c:
                    58:82:dc:87:be:8d:a7:4a:3e:1b:18:36:5a:9b:d9:
                    09:69:1d:29:97:a4:ea:b9:f9:a1:24:13:83:2e:bd:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7B:B4:C8:CF:1A:FB:4D:88:3E:60:52:66:7F:90:56:1E:41:ED:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/5e889615-28e6-3865-9da3-bc83f494f968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl

            X509v3 Authority Key Identifier:
                keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8ab::/48
                  2602:f8ab:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:04:99:4b:1e:2e:8c:46:bd:b6:76:9d:c1:94:37:ed:da:4e:
         f0:dd:d2:68:44:14:27:9e:4f:54:d5:34:68:78:ef:5e:46:4e:
         60:10:76:cf:b7:19:dd:b8:99:d9:e3:56:c5:61:91:0d:f5:ba:
         ad:87:0f:33:47:fb:d0:42:12:71:06:89:ce:a2:5a:00:8c:3c:
         57:e0:bd:f2:bb:df:eb:97:52:6d:d1:e5:5a:66:cf:ad:58:88:
         c0:51:f7:c5:2b:cd:bc:31:5a:40:4e:3c:81:f3:4f:ef:d6:67:
         e5:ba:a8:a6:9f:e1:68:55:fa:de:2b:8e:06:51:8f:d7:8c:30:
         9f:25:32:72:2b:e2:e9:8b:96:80:b0:7d:2c:7f:c5:e9:09:a4:
         18:af:20:1b:d1:6f:d0:1b:05:3e:5b:d9:9c:77:48:4a:19:52:
         f4:5a:19:1d:b3:1f:dd:e7:6e:66:d2:3c:da:5f:1f:85:a5:fc:
         9e:af:c2:bc:97:83:c8:d7:97:83:14:33:d7:ee:64:17:19:0e:
         a4:a5:c0:77:e3:49:b7:e0:1e:69:e5:5e:ac:c4:ae:44:50:f3:
         7a:94:30:58:69:07:be:e3:cd:07:e0:c2:e7:0f:c2:d0:2b:0e:
         e1:68:d3:29:36:1a:cd:c3:99:60:40:f5:ff:e4:19:96:63:17:
         92:14:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----