Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef8898b1-f531-39ac-89de-009ebbd45491.roa
File:                     ef8898b1-f531-39ac-89de-009ebbd45491.roa (raw, json)
Hash identifier:          fYzJ1G1BFpzKwQn9Y7rzv1UDj6YuZhoUIWsnX4Sxs4g=
Subject key identifier:   8F:D1:26:D1:B0:8F:77:E1:89:A0:D5:C4:7E:D2:31:3E:C9:D7:A9:B6
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848037AD5C9EB26B0D36AEDD200
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef8898b1-f531-39ac-89de-009ebbd45491.roa
Signing time:             Wed 27 Nov 2024 02:00:39 +0000
ROA not before:           Wed 27 Nov 2024 02:00:39 +0000
ROA not after:            Tue 25 Feb 2025 02:00:39 +0000
asID:                     20115
IP address blocks:        2600:6c08:19::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:03:7a:d5:c9:eb:26:b0:d3:6a:ed:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Nov 27 02:00:39 2024 GMT
            Not After : Feb 25 02:00:39 2025 GMT
        Subject: CN=d4e71dd3-d5b4-4c2a-93e3-cbac8fd1d6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:d9:07:89:f7:27:f3:5c:87:a1:f1:ec:d6:
                    02:15:b2:b9:76:74:e6:e0:13:5d:49:02:b3:af:aa:
                    f2:10:b5:12:35:83:66:91:47:8a:4e:43:dc:df:54:
                    d4:7c:d6:49:24:9e:7b:35:cd:9a:a1:e8:ac:1a:f3:
                    99:5a:6b:d6:6f:c0:7c:f2:9a:67:35:3b:41:ad:53:
                    85:e8:d4:ac:83:5b:fe:85:1e:96:66:b5:f4:ca:05:
                    c8:3a:fd:9b:5f:ce:62:47:1d:59:9f:9d:92:cd:5c:
                    6a:f8:93:d0:25:14:7e:88:d0:e7:c8:08:9a:22:57:
                    6c:65:bd:0c:9b:40:bf:30:d4:c3:4a:39:33:ba:bb:
                    85:0d:61:ce:03:32:19:fb:b7:4a:fb:ac:f4:fc:4d:
                    d3:a5:a9:cf:a3:14:90:6f:1e:cf:d2:3e:8a:d6:3b:
                    11:c8:19:43:7d:fc:5e:84:11:54:59:f2:9f:b7:58:
                    8f:06:2a:da:80:be:2f:66:c8:0d:89:30:81:18:d9:
                    1d:d3:61:58:b9:76:a5:27:27:9b:ce:00:9b:e5:8e:
                    0a:91:2a:27:1b:ed:ab:d6:99:1a:10:f9:04:c7:6d:
                    ba:78:ae:d8:30:a6:24:e3:c9:a4:c7:55:53:93:7b:
                    0d:58:d6:5d:1e:0b:51:c7:f8:8f:e4:9d:50:33:4e:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:26:D1:B0:8F:77:E1:89:A0:D5:C4:7E:D2:31:3E:C9:D7:A9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ef8898b1-f531-39ac-89de-009ebbd45491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:6c08:19::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:65:54:ea:81:18:9f:e9:b2:75:98:57:61:f0:8d:d5:0e:cb:
         84:27:a9:37:a9:97:99:72:dc:05:92:cc:02:db:d2:8e:36:74:
         5d:2f:ad:e6:2d:1a:52:a0:a1:d8:87:2a:3e:8f:78:54:51:37:
         98:50:b6:6e:36:7e:f8:a3:c2:02:b2:ea:7a:aa:da:9c:27:cb:
         de:85:29:ae:e7:e5:7f:76:0e:77:9b:2f:a2:95:87:12:57:f6:
         41:60:07:1c:e8:88:3b:63:40:c7:98:16:b5:4e:b6:8b:30:6d:
         bc:76:af:fc:c8:04:33:51:7e:4a:74:fb:19:d2:36:21:e5:19:
         09:73:3f:58:2b:89:d9:51:88:27:06:8c:66:62:c4:04:1c:09:
         bf:53:eb:fe:a8:03:56:2f:25:57:6f:e7:4c:3b:fd:63:6b:b2:
         80:d2:9d:d7:ea:35:8a:9b:31:4d:26:a0:7b:c5:2c:ae:c2:d8:
         32:73:c3:95:50:f2:63:59:3c:85:9e:0d:57:06:3d:3e:87:eb:
         4d:c6:6b:2f:c7:8e:79:90:58:04:c4:c4:17:c4:ec:33:00:6c:
         de:99:d2:6a:bd:4c:bc:18:15:7b:bf:e5:14:c2:10:79:27:f3:
         13:90:22:41:ea:5d:19:a6:cd:25:5d:de:da:bb:ac:3c:a0:84:
         b9:92:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----