Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa
File:                     ef6288bf-9586-3449-8d94-7be543b242f9.roa (raw, json)
Hash identifier:          TftZ4zrUAFTG7A66gPHWUiwI+XQrrjAbFp6vtLz7yMw=
Subject key identifier:   B4:1F:61:AD:23:C5:E1:B5:F0:B3:43:C6:F4:6C:A3:83:56:F0:DE:A8
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F432858482EBFFA63608B28EDB38832C0
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     3257
IP address blocks:        2620:4e:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:bf:fa:63:60:8b:28:ed:b3:88:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=22303478-3fbd-459d-bb14-94e8f57c53d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:93:9f:15:aa:a4:f2:9e:6e:4f:16:15:68:a8:
                    f0:cc:79:f4:b0:20:e4:ef:37:5a:bb:ba:de:94:3a:
                    ee:69:00:51:66:f1:59:b6:bc:df:1a:dc:14:a4:e0:
                    a4:a5:9f:38:8a:f6:ef:ed:78:11:43:f3:14:a7:1d:
                    d7:c9:2d:da:fc:ab:1f:00:3f:64:c9:10:33:6f:3f:
                    71:2f:3b:8c:8a:39:95:3b:2b:7d:3f:11:08:ea:2b:
                    62:2c:86:95:76:5c:51:1d:53:68:69:83:1e:05:98:
                    43:85:17:31:83:48:31:2e:b8:7c:c3:40:f7:f2:9d:
                    da:42:e7:44:8c:db:56:41:99:8f:88:35:fe:ff:e8:
                    e0:07:54:22:5e:48:cf:87:dc:70:e9:8d:38:89:ac:
                    d9:f1:ff:65:1e:6a:05:57:c4:1a:0d:98:72:8b:ce:
                    e3:19:dd:34:c4:86:62:36:e9:de:03:c4:5b:1e:f6:
                    12:39:be:6e:4c:1c:0b:0a:9d:ef:dc:31:a5:c0:7c:
                    e6:e5:18:53:6e:bf:59:74:b5:bf:7d:66:df:1e:d8:
                    10:ac:69:77:0a:3a:de:6b:2c:0c:fc:db:a0:04:5b:
                    9a:7e:e0:af:84:31:96:ff:de:73:32:02:e3:d0:97:
                    76:e5:a5:b3:01:b1:69:6b:61:57:a0:fd:36:14:11:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:61:AD:23:C5:E1:B5:F0:B3:43:C6:F4:6C:A3:83:56:F0:DE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/ef6288bf-9586-3449-8d94-7be543b242f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:6e:41:63:55:d2:9d:95:45:ed:df:17:95:a5:94:82:94:68:
         ca:99:7d:0a:59:34:c3:31:37:48:65:ff:a6:75:42:84:3c:a8:
         e1:34:03:b2:9d:e9:03:1c:43:e0:08:87:da:2b:e2:13:85:81:
         9d:bd:6e:0e:5d:2c:bb:7e:b4:cf:95:82:4f:42:51:af:44:2a:
         d0:74:51:00:cd:1b:7c:98:55:f0:b6:52:51:5d:27:15:da:66:
         61:66:32:39:59:2e:0c:25:0b:af:aa:1f:23:ad:92:af:77:74:
         aa:83:58:18:bb:d1:0c:2c:2f:32:be:46:a6:91:83:e6:5d:4c:
         f2:8c:f7:8b:09:34:b9:bf:d5:b4:05:6e:32:5b:45:7a:d5:09:
         50:22:30:bf:14:f2:13:69:5d:26:d6:e9:7e:40:5e:9a:f8:a4:
         f9:9f:46:7f:e5:15:8f:26:d5:29:86:58:96:49:4d:13:35:5e:
         b6:fe:53:09:1c:66:85:c0:b8:6a:11:7f:ae:28:75:bb:e8:37:
         32:4c:f6:70:b9:36:d0:90:cd:83:f3:62:43:e0:b2:fe:db:fe:
         69:40:d6:bf:03:35:96:6b:7a:eb:89:a7:c2:d5:92:04:34:31:
         f1:21:f7:7c:0f:ed:e3:13:fc:b1:ae:f6:65:45:d7:64:dc:b4:
         18:a0:68:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----