Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f93d9f5-c077-350f-8938-c7c8a384e92e.roa
File:                     8f93d9f5-c077-350f-8938-c7c8a384e92e.roa (raw, json)
Hash identifier:          GYsgpu0XOht8aAyClgrkDO1PptsKJXEqrwoqXLevHqA=
Subject key identifier:   C7:15:B5:1C:10:0F:11:02:2F:ED:29:9E:CF:16:80:EE:2F:CE:46:58
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424B1BFE32AE52E06AE1BE90
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f93d9f5-c077-350f-8938-c7c8a384e92e.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     22394
IP address blocks:        2607:f160:8800::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:1b:fe:32:ae:52:e0:6a:e1:be:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=619b93ae-428b-4ebc-a018-ad978d40edd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:05:9d:78:8d:64:8f:9d:ad:19:1e:76:7f:
                    b8:25:1c:15:bc:c8:cb:ad:8a:96:43:51:0f:2c:14:
                    92:68:99:eb:85:3e:8f:9e:4c:6c:75:39:e9:a3:cf:
                    89:5c:85:f9:7c:1f:a5:a4:c3:13:29:43:72:c3:15:
                    56:8c:9e:64:11:06:68:b5:67:ef:b7:8e:a6:9e:8d:
                    a3:1c:17:35:72:0b:7a:c4:5f:cd:11:10:3c:f5:c1:
                    57:79:7c:fd:72:77:5c:e6:33:2b:66:98:e5:b7:1f:
                    18:1c:9d:93:e1:9d:9b:95:e4:2c:09:f2:f7:ff:05:
                    97:59:f4:7c:35:50:8c:81:f3:5f:82:a2:db:6d:36:
                    74:a7:f5:98:1a:dc:31:5b:e5:cb:bd:4f:1f:8b:4a:
                    08:1b:20:99:c3:a1:41:0f:28:79:a0:30:31:8d:ba:
                    ba:4c:a2:90:92:3f:63:98:c6:94:3c:4e:52:37:35:
                    9c:5c:cc:bb:e0:de:df:f6:5b:13:de:5a:47:5f:0a:
                    05:a7:97:64:e1:55:23:c9:f2:f5:07:07:4c:c8:2b:
                    d4:5b:d4:18:e3:42:fe:9a:a0:0d:1f:66:49:4b:d7:
                    82:5c:2d:26:b0:3e:7a:f0:86:32:52:96:fd:42:10:
                    cd:3f:f9:21:a2:9c:14:bc:cd:5e:da:9c:7d:47:75:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:15:B5:1C:10:0F:11:02:2F:ED:29:9E:CF:16:80:EE:2F:CE:46:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f93d9f5-c077-350f-8938-c7c8a384e92e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f160:8800::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:6d:b0:0d:3f:f3:91:29:ba:b8:02:be:05:b2:86:32:29:
         b7:18:39:1e:21:49:05:ab:bf:63:37:98:8d:d8:98:7f:f7:8d:
         98:71:dc:04:0e:93:f9:c1:87:57:4c:2e:d1:c0:91:2a:7c:49:
         f9:74:e5:30:29:39:3f:dc:34:2a:01:14:be:af:72:cd:0c:a9:
         a4:5d:f5:6f:47:06:30:ae:a6:94:f4:93:70:81:79:d6:6b:d5:
         93:00:40:5b:e3:bc:b9:94:64:4c:38:10:dd:88:c2:2d:6e:bd:
         df:c6:a1:3b:1a:b6:b5:26:3e:fe:3a:1a:aa:ea:e1:19:7b:d3:
         1f:9f:26:ba:7d:32:ff:ac:46:48:23:d4:cb:c6:5f:ea:6a:98:
         2f:43:53:f1:67:77:a2:23:4f:82:16:e6:4c:46:71:01:fc:9f:
         9a:7d:fa:71:9a:f3:c0:dc:af:5f:52:fd:bf:9a:95:46:da:0f:
         59:c6:46:cd:77:fa:62:28:44:08:09:17:0b:ec:4b:4d:a4:d1:
         6f:a4:10:62:e3:8c:9a:68:f3:87:7a:40:cf:ac:0f:70:fd:ab:
         b9:c0:fa:96:49:75:1a:20:b4:b0:27:f7:02:55:5d:91:64:fc:
         61:02:24:96:68:00:29:41:cc:c5:35:42:c4:c6:a6:02:0d:c5:
         38:c2:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----