Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa
File:                     bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa (raw, json)
Hash identifier:          DxNi4omKuq4eKieDk+9Ufg8aWuhhKaXapzbFt1hfpdo=
Subject key identifier:   D7:55:D7:EE:BF:0B:40:29:19:01:76:F6:96:39:C0:37:FA:74:3D:B6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848B7377CC988DD0246EBC63500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa
Signing time:             Thu 30 Jan 2025 11:11:37 +0000
ROA not before:           Thu 30 Jan 2025 11:11:37 +0000
ROA not after:            Wed 30 Apr 2025 10:11:37 +0000
asID:                     30036
IP address blocks:        2604:2e88:8000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:7c:c9:88:dd:02:46:eb:c6:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 30 11:11:37 2025 GMT
            Not After : Apr 30 10:11:37 2025 GMT
        Subject: CN=4980b3ef-a67d-4d8b-b7d7-d89c8c4fa3de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1d:28:26:f8:af:d9:17:67:93:d1:9c:b0:06:
                    5d:cd:56:3d:62:b6:3d:55:57:e1:31:31:7a:73:17:
                    a0:b7:de:dd:11:ff:aa:c2:b4:2e:f4:af:ab:87:fc:
                    c0:fb:16:e8:fd:b1:a4:c7:fb:20:df:ff:d7:93:e9:
                    d1:3e:23:8d:bf:8b:9b:61:0b:7b:76:b0:4c:c9:25:
                    37:d9:74:e9:a8:2d:54:27:18:d7:ac:a7:d4:b9:eb:
                    35:1f:12:20:31:f7:80:24:1b:50:c0:f3:b2:b4:cf:
                    17:e7:cd:0d:a4:70:4f:55:04:bf:51:97:ed:e6:9d:
                    86:a8:28:dd:b5:04:fa:7e:20:a4:97:a1:5a:a8:ac:
                    bc:ec:77:50:77:d6:c4:5b:63:ad:01:e3:db:fd:21:
                    32:f4:90:1b:4e:d9:41:2f:90:f0:f5:04:82:a1:8a:
                    9a:4b:8b:1f:a9:28:ab:a5:59:cd:f9:0a:5c:4f:a1:
                    58:39:09:67:e7:ef:e1:2f:82:37:41:81:2b:e4:32:
                    16:84:d2:59:ea:da:9e:81:32:7a:28:b9:83:48:c0:
                    ac:37:4c:eb:f9:2b:33:bc:2e:83:62:ce:af:32:20:
                    83:11:26:c6:f3:64:e3:2c:d9:e2:a8:ea:c9:42:79:
                    8c:0d:48:f5:8f:eb:f5:15:ad:a6:9e:31:3d:52:80:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:55:D7:EE:BF:0B:40:29:19:01:76:F6:96:39:C0:37:FA:74:3D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bf600fd6-981b-3baa-a0ae-30f271c6bb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e88:8000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:1d:68:af:4f:ad:ec:fe:c0:98:62:77:4d:64:05:fb:34:
         4c:3c:a6:dd:02:17:04:7d:cf:a3:0a:15:25:16:f9:4f:96:dd:
         40:f6:b5:ce:ea:8f:42:5b:ff:99:b3:50:ff:c8:d6:24:a1:f3:
         b9:b8:64:e2:64:c9:51:c4:45:99:19:1a:44:89:fb:01:4e:f1:
         af:7f:7d:53:62:41:e5:13:00:eb:26:8e:73:d9:ef:a8:67:71:
         c4:9b:dd:d6:4b:f8:8b:cd:2b:82:19:44:eb:8d:02:32:67:0f:
         d1:a2:cc:05:f0:84:a3:83:3b:e7:38:40:1f:d9:79:c2:b7:9d:
         0f:d3:52:79:84:24:20:24:ea:0e:f3:d9:16:86:24:9c:bf:13:
         66:2d:b5:9f:71:a1:82:d0:80:ab:fc:04:6f:a9:d8:5b:28:3d:
         84:b9:f1:01:90:9f:ba:a3:02:01:52:33:f3:d8:b1:50:16:c5:
         e1:71:e0:25:27:35:62:64:39:ed:7b:74:fc:df:3e:d9:59:a3:
         bd:48:97:93:4f:93:23:c1:06:e9:e5:9a:e6:61:de:39:11:8f:
         ca:e5:51:c3:07:be:74:59:5d:7b:3a:cf:d8:70:f5:1e:77:0a:
         c1:a6:d0:5f:b7:54:b2:39:44:50:c5:ae:f3:03:7d:4e:9e:c7:
         94:8e:8f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----