Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
File:                     ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa (raw, json)
Hash identifier:          OkX3JWwPcdO1f/39WYIDgw/su2yWGaZUCw9E/TADLQI=
Subject key identifier:   DB:A8:A9:A2:76:92:13:9E:F0:DC:DE:54:9A:B2:F1:33:47:3D:88:5E
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285848345564B19A2F9F17D522AD00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     394354
IP address blocks:        2620:10a:80ae::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:64:b1:9a:2f:9f:17:d5:22:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=82ae07be-34d9-4f39-81ac-fa373c72829b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:df:d3:6f:a9:88:77:88:cc:b7:83:06:dc:
                    a3:98:de:7d:af:71:22:63:de:be:f8:40:0d:d5:6d:
                    d8:51:15:02:b9:f5:6c:70:79:cf:4e:c2:d4:8d:07:
                    b4:e5:dc:cb:e4:85:7a:15:38:d0:c9:46:0a:4a:80:
                    3f:de:0a:f5:bb:04:8f:ad:2e:3f:28:be:5a:74:3f:
                    01:25:c7:91:18:6a:81:e3:45:2b:84:9a:84:55:a1:
                    54:13:a7:00:12:4c:f0:45:ac:78:c2:a6:ea:72:99:
                    7b:7d:56:98:db:f9:fe:a2:6d:1a:0b:ff:fb:23:c2:
                    df:9d:37:a0:f3:89:7b:9c:61:8d:3c:50:5d:95:a5:
                    3f:61:18:e2:1b:96:de:66:45:be:cf:e7:c4:b9:17:
                    3e:5f:90:a6:07:c3:8c:b7:05:d1:ac:e7:ba:32:cb:
                    c4:0a:9c:fe:8d:34:e2:98:14:8d:ad:68:98:c3:08:
                    44:c8:1c:82:f9:89:4c:c6:e7:12:a6:6d:9b:c2:de:
                    b8:7b:18:17:24:f9:ab:4f:1b:04:1c:54:56:4a:db:
                    42:c0:65:1b:7e:0c:e9:4e:81:36:b1:b9:87:0e:e0:
                    17:de:f5:b3:4a:07:5d:16:68:f2:c6:6d:c0:4a:56:
                    01:23:5c:85:e8:5c:38:9c:88:b2:cb:8e:f3:e7:f4:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A8:A9:A2:76:92:13:9E:F0:DC:DE:54:9A:B2:F1:33:47:3D:88:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/ff3afc12-14b9-39d0-8cf1-9f0a2179e057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:80ae::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:6b:9c:81:a4:bf:4b:16:1d:b6:c2:7c:98:e9:14:31:2c:ad:
         01:19:a2:cb:a1:8c:9a:9d:26:54:dd:4c:4a:0b:28:4f:52:5c:
         25:cf:e2:f4:0b:53:c5:0d:66:8e:98:f2:68:1a:81:8b:13:b0:
         ca:14:f4:ad:38:7f:82:45:65:e0:0b:40:d0:da:50:a0:f3:84:
         49:d9:bf:7e:14:4b:3d:1e:da:f7:47:d1:d6:c5:2c:60:f0:ec:
         b1:fd:24:11:75:aa:bb:fb:c1:0a:e8:6d:d1:af:27:09:a1:8a:
         5c:fa:21:42:cf:29:5f:27:19:a3:64:e6:5e:45:f7:5c:69:43:
         be:3d:57:f5:44:f6:5b:7e:72:f8:53:3f:29:db:5e:10:82:c9:
         c4:c4:72:ab:a7:f8:ce:6f:29:a9:c5:f9:3e:8e:63:1f:ee:58:
         2e:46:e5:4b:f7:a5:80:99:4e:d1:5d:76:79:da:5a:38:0d:35:
         39:23:4e:7e:15:bf:da:11:03:0e:8d:69:48:98:0d:88:56:b6:
         a2:ed:e9:eb:63:66:cb:a5:1d:60:06:db:da:85:05:43:a0:2c:
         36:19:3a:98:18:3e:0c:ea:e2:cb:a5:6e:2f:40:1f:8a:72:06:
         13:24:a5:fa:d8:d6:9f:30:09:26:99:c7:1a:85:1d:d4:9f:c0:
         08:9a:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----