Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4e2f3049-4f72-306b-a264-59eda095804a.roa
File:                     4e2f3049-4f72-306b-a264-59eda095804a.roa (raw, json)
Hash identifier:          zdXys2ZC7plqNPFryM/zujJNhg0Tn3lnCox6CNS55Fw=
Subject key identifier:   E2:10:1A:63:EB:01:B9:12:63:BE:A7:BA:83:4C:2D:D4:D2:11:69:8B
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037B55ABF5686D3738DA5780
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4e2f3049-4f72-306b-a264-59eda095804a.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c80::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7b:55:ab:f5:68:6d:37:38:da:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=6203db18-ea6c-4ab6-b033-702e37fd7b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2d:03:32:e3:55:eb:d1:ae:f5:57:52:76:c5:
                    75:d5:25:cf:3c:22:c6:b4:4d:89:ed:d8:60:8a:8c:
                    a9:38:32:e5:81:65:f2:eb:2e:73:e3:06:ce:c2:03:
                    ea:66:45:d0:52:78:e4:20:13:10:16:77:e1:ba:90:
                    5b:54:7e:51:95:47:91:42:38:1b:d4:84:83:6b:b0:
                    06:4f:3b:3f:b9:15:25:ce:1a:6b:1d:08:48:11:47:
                    99:6f:b0:81:fe:f1:53:57:97:d0:3b:bf:7c:99:ce:
                    6a:fb:f3:95:f5:e8:c6:a3:fb:6b:81:34:36:a2:91:
                    81:78:2b:e1:0a:de:34:bf:47:fb:cb:44:e2:df:9a:
                    5a:86:cd:40:ea:4d:e4:5c:a3:76:7d:be:21:45:6e:
                    19:67:92:69:f3:99:20:a9:7b:7a:9f:72:65:fb:1a:
                    9f:3a:42:62:cb:9b:5f:e0:64:c9:a4:c4:3c:62:8f:
                    e8:7b:86:89:d3:94:7d:9f:50:9a:1b:7a:0d:39:66:
                    b1:3b:45:74:fb:f4:9f:e6:3d:bf:23:51:4c:ca:5d:
                    17:07:d6:d9:fe:f2:68:70:f9:02:07:88:bd:05:e3:
                    2a:6c:0f:0d:d3:28:fc:6f:ab:ce:22:b5:e1:d5:dc:
                    5f:60:07:61:9c:18:06:ad:d5:d5:1e:5a:3a:09:fb:
                    6a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:1A:63:EB:01:B9:12:63:BE:A7:BA:83:4C:2D:D4:D2:11:69:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4e2f3049-4f72-306b-a264-59eda095804a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c80::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:d5:ed:5e:8c:da:ab:e6:4e:ca:ab:19:3d:66:d0:2b:5f:
         e5:a6:51:72:66:62:cb:ae:fe:3a:49:48:64:a9:99:dd:f7:e6:
         64:d6:19:62:f2:4e:e0:79:77:e9:a6:53:ea:f5:d6:bc:ad:6f:
         cb:ab:3c:7b:11:42:7f:c2:07:7d:b0:ee:60:c9:b6:8e:67:33:
         35:05:14:e1:f5:30:4c:b3:23:a0:19:cd:e4:c6:48:ed:68:47:
         c9:9d:8e:0b:38:9a:c8:e0:54:60:81:fd:91:95:3d:5d:a7:04:
         61:88:c8:33:17:5e:72:9d:d7:18:d8:03:53:f6:49:f5:82:b1:
         b0:6c:0c:ca:cd:06:2c:20:a8:63:2c:89:22:0e:6d:bf:c7:9d:
         28:fa:83:23:c3:83:7a:3b:a8:22:61:cb:35:72:1f:88:c1:af:
         fd:9b:70:48:c8:ce:d6:5b:47:91:15:ab:6a:c6:34:93:7f:67:
         11:30:e8:04:b2:5e:8e:60:69:3c:76:68:d6:21:6c:da:9a:63:
         b7:2b:1b:98:5a:ba:ec:a4:1a:5b:8a:1f:fe:b9:ed:65:4f:e3:
         e2:00:ec:3f:a4:95:d2:a3:de:7b:3a:74:60:b0:3d:44:29:c4:
         a4:c3:a8:0f:cb:39:b4:16:f1:8b:91:28:ad:6d:30:23:7e:5d:
         60:1b:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----