Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701167fd-e346-398a-9c90-b1eb27b06de0.roa
File:                     701167fd-e346-398a-9c90-b1eb27b06de0.roa (raw, json)
Hash identifier:          yZos7AH11YU11AELxg7UkZ8elHgfgSMbZLsfGXllBFc=
Subject key identifier:   16:3A:3B:EC:E4:A4:A5:76:DC:BA:EC:55:3B:30:81:DE:73:5D:4E:15
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AD97BE5DA19EC3DE74E80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701167fd-e346-398a-9c90-b1eb27b06de0.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c83::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:d9:7b:e5:da:19:ec:3d:e7:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=3e2a7afc-e9c9-48fe-ad8d-0429984f8607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:00:90:15:ac:07:8c:6c:e2:d5:bd:a6:f0:
                    06:85:af:0c:5b:7d:e5:c4:93:14:9a:7d:7b:c8:f3:
                    38:8b:b7:64:d8:f0:26:0f:bd:51:dc:d5:97:9a:0e:
                    d6:78:f1:38:6c:83:c0:1a:eb:99:67:e1:49:3d:60:
                    9b:b0:00:ab:b6:6c:3c:dd:a3:b5:a4:56:f5:de:73:
                    70:7e:a7:19:dc:c9:a6:d3:92:e4:2a:2d:b8:a2:bc:
                    fd:2e:ec:31:90:28:b5:4b:13:6a:04:9e:e2:37:b2:
                    90:a4:68:19:bb:69:de:2b:51:10:5a:1d:07:1d:99:
                    7f:50:de:6e:e0:8c:a2:bc:a8:ce:f0:2d:29:15:c0:
                    e4:a3:ac:53:35:21:00:bd:5d:73:b8:52:c5:15:56:
                    03:00:1a:e1:ba:d9:16:8a:0a:9a:15:97:36:80:4c:
                    68:3b:cf:e0:e0:e0:e1:80:ab:b3:7b:31:b0:8f:3e:
                    b5:93:5f:e3:a7:19:18:ed:55:b3:3c:72:a7:74:53:
                    f2:73:8d:74:dd:ab:f5:fc:14:d2:c3:c9:6b:ab:b8:
                    73:60:f1:b7:33:61:76:74:73:f9:2d:ea:e7:06:0b:
                    ee:49:7d:9b:fb:f4:34:fd:0b:2a:7d:b7:0c:02:51:
                    dd:3f:5e:8e:71:98:de:dd:65:6a:06:e0:5f:e7:78:
                    e5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:3B:EC:E4:A4:A5:76:DC:BA:EC:55:3B:30:81:DE:73:5D:4E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/701167fd-e346-398a-9c90-b1eb27b06de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c83::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:a7:a8:2e:79:68:e3:b0:17:fc:18:a4:5d:2b:34:f2:4e:
         35:cc:ee:6d:f7:c7:84:1a:93:1a:aa:60:e1:cc:18:9f:15:47:
         09:80:d8:8e:16:85:e3:60:b0:11:7c:b7:78:e6:2f:51:8d:47:
         41:20:ac:96:49:67:60:11:dd:34:8f:fe:1e:7f:1c:96:bf:2a:
         3b:df:26:4f:f9:6c:ce:50:06:a5:2d:2d:53:de:bc:ab:94:a7:
         c3:36:4e:e9:ab:8c:1f:e6:05:f5:74:fe:e0:d0:b8:00:c1:ee:
         82:5c:aa:20:5d:dd:59:98:03:ac:7b:f2:ca:dd:a1:7e:c6:24:
         73:5c:99:8e:14:27:1c:41:42:34:05:05:23:4c:de:e0:76:14:
         f6:d9:d2:58:79:f1:82:d6:48:94:4b:64:87:2c:64:0c:4a:1b:
         98:b4:90:64:84:68:c3:63:41:62:79:05:86:45:7e:ff:e7:b6:
         9e:48:58:ea:2a:25:b5:90:e5:ea:2b:c2:c1:4f:ab:6e:14:35:
         1a:25:e5:33:1d:24:ba:f5:be:71:98:4c:bc:e0:75:50:b1:97:
         be:f3:3e:bb:00:c1:de:61:d1:ff:53:15:09:18:19:81:94:1b:
         90:2f:df:3d:07:e1:b2:54:ea:21:3a:29:64:5b:ac:b4:92:40:
         7a:37:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----