Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa
File:                     1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa (raw, json)
Hash identifier:          SxMnWN1/cE0V8+Wg1Cv6w0ZFU8wEoPuw1ANSYUL6uFU=
Subject key identifier:   68:71:13:BD:48:72:C1:57:81:9B:D0:50:F2:D9:3E:C9:51:67:1C:7A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B18F3C9A4EE264B3E9100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2001:4888:8037::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:18:f3:c9:a4:ee:26:4b:3e:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2c9efb52-6b83-42e4-a122-eb21eb45088d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:92:2a:c4:35:ae:99:37:97:a9:21:3f:a8:
                    35:be:ce:08:0b:de:ff:36:4d:c3:6d:0f:18:db:1a:
                    a4:3c:14:fa:13:aa:c6:5c:2e:1f:5c:e2:23:8d:1d:
                    be:2c:da:6a:0e:ac:1f:49:5c:f9:c1:d7:f7:21:77:
                    2c:07:1d:1d:9c:df:90:c1:e0:6e:25:ef:a7:b1:0d:
                    d8:f1:d6:70:1a:09:75:fb:7a:6b:a7:9a:29:7e:ab:
                    6c:74:d3:e2:1b:f0:f5:1d:bf:20:f4:88:ed:f6:7c:
                    0a:7d:2e:a5:f5:ac:4d:8e:33:bf:82:da:a1:87:28:
                    49:44:80:b7:9b:90:e4:a3:5c:db:44:f9:ce:7c:88:
                    7a:0f:12:32:fa:6f:0c:d7:bb:96:66:8b:8c:20:da:
                    db:d3:e2:b1:1f:44:a1:ad:0a:2a:bc:54:a3:54:e7:
                    0e:85:34:9d:2d:38:82:2c:4e:a9:d3:4e:d7:8f:90:
                    cf:c4:38:e4:7a:5d:26:c6:a9:c9:0c:78:b6:2a:cb:
                    03:1e:31:6a:18:c1:93:2d:5a:e3:ae:97:1c:5f:f2:
                    49:57:d1:89:16:dd:ab:35:c1:f4:50:0a:a6:ba:96:
                    c2:48:80:6a:98:0a:72:0b:87:91:58:26:09:1a:18:
                    ca:63:e0:d8:bb:b2:88:8c:de:49:80:d8:aa:d7:82:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:71:13:BD:48:72:C1:57:81:9B:D0:50:F2:D9:3E:C9:51:67:1C:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1ac1f0fe-5ea3-3f06-871f-938e1f219f1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4888:8037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:6d:85:36:d9:70:b1:5f:66:19:13:b1:ee:75:7b:02:f4:
         04:01:50:ee:a6:08:50:3a:91:37:c5:dd:02:46:9b:b3:ec:11:
         b4:9d:3e:d2:33:48:5a:3a:de:49:a7:81:95:8f:a6:31:fe:bf:
         8b:91:f8:5b:c4:58:51:62:7d:27:c9:bb:49:75:f4:bf:cc:50:
         8d:a7:9e:7e:9d:73:81:4b:f4:05:6a:54:9e:ed:e1:a0:91:13:
         39:de:2d:af:1f:ab:e4:a6:c5:5a:db:8f:77:4f:78:e2:29:19:
         7b:33:ee:99:1b:ca:45:2a:85:4d:5a:f8:3b:6d:5a:d3:cf:7d:
         4e:db:d8:50:37:a8:49:45:49:b5:c3:50:ea:4f:9a:b3:5c:53:
         2a:ce:9a:ea:c2:f3:fa:e2:cd:d1:59:ea:31:72:9c:ad:b8:99:
         15:d6:71:71:c8:e4:98:ff:47:2d:fa:a1:41:f2:39:88:b5:eb:
         40:e6:41:a7:2f:33:43:73:3a:71:44:0a:82:aa:7b:58:95:ed:
         35:34:b3:d2:a8:59:72:93:5f:c7:d0:c5:f6:0d:df:f5:fd:22:
         eb:5d:03:98:b0:00:9e:31:cb:21:97:31:0a:2b:1c:44:7b:0f:
         cd:9e:a8:ee:f6:c9:9c:02:39:ce:9f:4a:41:97:46:2a:eb:b7:
         68:89:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----