Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/29b0d289-4491-3afd-a3b8-050f96331f6e.roa
File:                     29b0d289-4491-3afd-a3b8-050f96331f6e.roa (raw, json)
Hash identifier:          dcYSB/7gvmdLwBzqcww7t2x1wES82N//mSyTI2hscUw=
Subject key identifier:   CE:CD:C0:BC:FE:E4:42:2D:AD:BB:FA:28:FA:56:07:04:8A:E5:7A:EB
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F4328584851A5708A1344BFD754CBD8C0
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/29b0d289-4491-3afd-a3b8-050f96331f6e.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     6649
IP address blocks:        2606:5240:f1be::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:70:8a:13:44:bf:d7:54:cb:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=a7398003-e8fd-455f-87d2-1e71595dd663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:79:80:34:84:2c:e4:97:40:d8:97:93:4e:8d:
                    d1:d1:0a:5c:9c:93:ae:e0:b6:dd:e1:46:05:5e:ab:
                    18:9f:6c:e8:22:7b:fa:01:83:a4:7e:21:cc:a7:0c:
                    93:ab:7b:79:1a:b5:f5:c5:3e:2b:a4:d0:9e:4a:19:
                    d8:98:48:0e:25:dd:10:2b:fd:fc:85:45:b1:5b:02:
                    01:5d:f8:d9:e7:44:e2:40:be:05:81:aa:cc:65:86:
                    b6:4b:af:f4:44:ab:d4:68:36:77:a1:c6:57:75:de:
                    19:27:1e:bb:34:26:84:62:be:52:ba:21:ea:dd:45:
                    95:29:22:c5:c4:5b:94:46:63:94:de:d7:6f:1b:9e:
                    74:97:10:e6:d6:9f:2a:09:9c:f2:36:e2:6c:81:70:
                    8d:12:1b:b1:ec:a4:5a:c6:db:73:c2:95:bc:88:d5:
                    ca:e4:42:be:f9:e7:39:7d:86:4f:99:a0:bd:97:89:
                    bb:a8:91:32:73:57:0f:41:67:55:26:9d:a8:26:37:
                    7c:10:a0:c7:2f:ff:3e:8a:ca:8f:2f:7e:d7:68:63:
                    db:14:25:2e:7f:36:f6:f3:f7:72:33:11:3c:fc:bf:
                    15:eb:fe:e1:13:ad:57:fc:0c:c9:bb:73:60:36:4c:
                    82:d1:9f:15:a2:28:ce:64:9b:ac:3a:c8:8e:5b:07:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:C0:BC:FE:E4:42:2D:AD:BB:FA:28:FA:56:07:04:8A:E5:7A:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/29b0d289-4491-3afd-a3b8-050f96331f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5240:f1be::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a3:46:64:7b:76:76:47:4e:a1:ea:1d:6f:0e:ad:a2:6e:b9:
         24:ba:4a:2b:4c:1c:6b:f8:e1:77:06:d0:54:45:5b:7d:9e:c4:
         ec:61:22:7a:1c:fa:61:16:82:5d:7d:95:68:f3:8b:17:77:c9:
         a9:ce:b3:f0:31:48:3a:68:63:d7:56:c1:36:54:2f:83:8b:1a:
         99:47:b3:34:fd:cb:7d:82:01:a8:40:68:c4:1d:00:7e:0b:31:
         40:74:07:0f:65:a9:ab:6c:c2:e6:e3:59:48:d6:60:cf:ca:7d:
         0b:52:2a:27:f9:67:1d:d4:c2:f2:7d:19:b0:08:15:d7:3b:76:
         c2:35:a7:e8:28:86:09:fd:96:d7:1b:3a:c7:82:7a:c6:fb:c0:
         38:b5:c3:a2:c9:74:da:7f:b7:6e:d7:c1:e9:a5:ea:8e:ce:ac:
         f0:ae:b8:de:dd:d3:dd:f0:6f:8d:8d:3a:ad:05:27:89:f9:d1:
         e4:ef:02:76:e9:6e:4d:6c:8c:71:f7:39:d3:f0:47:f4:74:0f:
         b6:e4:90:40:9e:7b:4c:cc:9f:bb:42:66:e6:78:9e:94:97:7c:
         7a:c2:1d:4d:1d:4f:86:d7:e7:2b:70:80:d4:98:e5:7f:4f:bd:
         93:23:e2:01:5d:08:39:21:e4:e0:41:ea:fd:17:69:98:f8:d0:
         90:8b:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----