Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa
File:                     f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa (raw, json)
Hash identifier:          zQ3UXNVN13Ffd6qp3ejRD8v4jvw86OKfvZjK3HxeOIc=
Subject key identifier:   8E:32:BB:FA:2F:73:17:29:9F:4C:91:04:25:E4:07:86:F8:C8:1C:C2
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F432858485B6AF2DA3201B75E93726780
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     400214
IP address blocks:        2606:9c40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:f2:da:32:01:b7:5e:93:72:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=c63b46a9-7d40-4794-9167-2ed9a1e8f7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:a5:be:8d:fd:79:27:ed:00:d3:a1:c1:53:
                    e2:35:0c:48:ad:56:3a:e0:74:0b:21:52:7a:41:35:
                    aa:2d:66:b6:9b:1d:81:a7:e5:ce:92:95:2b:43:99:
                    ac:ec:20:61:14:38:bd:23:26:2e:fd:be:94:74:8f:
                    68:d4:d6:83:36:43:41:93:12:f0:75:df:71:41:d4:
                    18:79:7c:b4:1d:28:f9:e7:31:e1:bb:e5:f4:ed:28:
                    f2:72:50:62:4f:e4:9c:7b:e5:26:d4:5f:3b:41:48:
                    e5:cb:93:f3:ed:d0:f5:52:e3:b2:98:75:4f:ad:d4:
                    e5:36:ef:b8:42:eb:c5:3e:fa:ed:f5:33:f7:32:a5:
                    bc:06:cf:22:b0:99:1b:44:6c:a8:92:d2:4f:eb:ef:
                    24:a3:ea:e8:ae:18:ff:b6:df:fa:53:9a:77:c7:41:
                    8e:47:0c:8b:4a:43:ff:c5:30:ea:8b:2f:b4:a3:48:
                    cf:54:e3:29:a7:89:80:e0:d3:e5:57:d8:55:62:c6:
                    11:47:e9:88:22:9a:d5:28:29:fa:97:d0:ca:b2:a2:
                    49:5e:78:95:84:16:ee:04:73:a1:92:ea:b7:7d:34:
                    c1:41:95:86:11:aa:e0:09:96:6f:32:76:0b:25:92:
                    63:4d:5c:24:f9:07:05:08:c5:18:a8:22:6f:97:e3:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:BB:FA:2F:73:17:29:9F:4C:91:04:25:E4:07:86:F8:C8:1C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/f5e2d1f0-6b5c-3f85-b264-42f4b792d76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:5e:05:7e:62:bf:6f:c5:12:93:9f:0b:6d:e5:b4:bb:0a:fb:
         b5:5e:6d:5a:5f:1c:8b:3a:b2:bd:5b:27:dc:de:c6:a7:e2:c5:
         07:86:d8:1f:b2:64:cc:79:c9:2b:7e:07:8d:a1:f0:c2:3b:ed:
         61:dc:5e:c4:e0:55:cc:45:20:ff:8d:d5:d6:c7:9c:77:be:2a:
         76:5e:b8:ff:82:72:7d:ba:65:c1:3e:20:79:86:04:0e:be:cd:
         09:32:e8:65:a5:73:44:4a:7c:11:f7:39:bc:41:08:11:34:9c:
         3f:b8:f8:24:55:1f:b4:15:73:0a:18:df:59:69:df:b7:bc:f7:
         26:2f:6e:10:ac:ad:30:8d:64:2e:fa:75:4d:8d:bf:a7:49:bd:
         fe:2e:70:2a:57:a3:80:60:8f:92:64:52:ec:57:75:7a:7a:62:
         5a:8a:49:40:6f:d7:f6:52:26:8e:8f:28:af:40:0c:4c:df:3b:
         01:b5:47:22:a8:92:5c:37:e6:24:11:07:6c:39:52:7b:f2:82:
         6d:a5:b9:b4:24:b0:91:7e:60:48:e3:61:b5:bc:ff:c7:5b:fe:
         b7:2d:69:2b:3e:7a:a5:45:46:10:38:e7:18:7d:d8:e6:f5:24:
         40:b4:a6:83:bd:cd:c4:30:c2:b1:aa:9d:6f:87:1d:65:4d:e4:
         c2:33:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----