Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa
File:                     1cc65f5b-a492-3ed0-b146-e29593a49d69.roa (raw, json)
Hash identifier:          CvbwIAxeu4Ax6Amk6lmC5iaj4bG8ilJA84l4pwqyMyE=
Subject key identifier:   30:F6:C9:33:18:71:F7:30:73:AC:94:79:6A:50:2A:FC:DD:9B:3E:90
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584834555A537CD826E2633AB180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     46491
IP address blocks:        2001:470:391::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:5a:53:7c:d8:26:e2:63:3a:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=d8b2480f-549f-4d2d-8772-dba172c4ec22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:64:90:dc:04:c2:52:86:da:73:d0:c4:ed:
                    53:c9:fb:49:43:7c:29:62:99:3c:d4:35:69:ab:b3:
                    fb:47:d3:6f:c4:26:bb:8e:bf:52:ec:fd:94:86:c6:
                    36:b9:8a:91:76:cd:43:02:41:ae:fe:5e:7f:55:ef:
                    39:86:67:40:07:55:a7:88:83:21:90:48:3c:48:90:
                    bf:27:79:3c:c9:5c:ea:97:c2:cb:1e:f2:ea:b5:fc:
                    f7:69:9c:a5:53:b8:7c:05:be:fa:0f:23:11:40:71:
                    48:cf:d5:9e:f7:e9:44:1f:f3:47:e6:0d:a6:7e:bf:
                    b7:b1:45:b5:77:a4:1d:dc:8d:9c:3f:b9:d0:01:d6:
                    f0:c6:87:21:5f:db:81:27:46:1a:b0:63:1a:b6:86:
                    03:be:54:97:34:84:2b:fc:22:06:35:f5:14:b9:d1:
                    11:94:3c:23:3a:62:12:f0:76:49:f7:94:c0:85:67:
                    06:8b:05:c1:96:00:f0:f6:82:e1:03:80:0c:c9:3d:
                    34:3a:76:74:18:79:2e:63:b3:27:5e:b8:d0:cb:e5:
                    d5:86:36:b6:3b:e2:b1:42:fc:b4:06:b7:b8:35:da:
                    9e:e7:62:4f:5b:1f:d8:9f:f2:97:48:9b:01:67:d6:
                    b0:da:f0:9b:7e:68:83:6d:ac:33:23:e8:d5:61:be:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:C9:33:18:71:F7:30:73:AC:94:79:6A:50:2A:FC:DD:9B:3E:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1cc65f5b-a492-3ed0-b146-e29593a49d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:391::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:55:39:cb:a9:a4:99:a4:32:56:fa:8d:84:fc:90:2a:c0:12:
         42:d6:08:94:f0:4e:e0:d6:c7:f8:27:d2:e0:d0:7c:c9:d4:0b:
         f1:83:f2:1e:fb:0e:ad:83:03:67:2d:6a:b7:fc:13:43:75:7e:
         26:20:7d:6d:db:b4:9d:84:e6:58:31:96:52:70:d1:a3:56:b6:
         fa:c3:b5:3b:b5:95:3b:e3:45:4f:c9:b8:af:9e:81:55:7e:1a:
         2b:bc:0b:05:04:4a:24:8d:2e:62:41:1f:67:1f:4c:25:ea:36:
         6d:69:9b:43:3f:d5:9c:28:0b:7f:99:0b:e3:10:08:5d:6e:9b:
         f9:3b:2f:55:12:13:89:fb:69:26:34:46:5b:40:46:cd:63:22:
         c0:82:c8:40:9b:83:73:0c:fb:76:19:e4:57:f9:a1:a4:88:26:
         b0:1a:f9:e2:61:30:f9:24:4c:fb:59:1f:1f:b7:4d:3f:0b:8c:
         76:f4:6f:7c:be:5c:00:3b:5f:4c:37:49:2d:7d:18:b8:d8:f8:
         d8:e5:c6:93:f0:41:8d:e4:f3:42:46:63:ac:07:8d:3e:f6:f1:
         5f:40:2b:0d:a4:3f:22:9e:f8:29:e0:5e:3f:4b:05:7a:d8:82:
         eb:f3:e5:a4:54:70:2b:65:aa:53:9e:35:8f:d4:39:83:10:55:
         80:8d:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----