Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/462c47a3-9cba-306f-bb61-46c2322b5348.roa
File:                     462c47a3-9cba-306f-bb61-46c2322b5348.roa (raw, json)
Hash identifier:          iKtd7/DovUYuO1y8uLHjTvEYL8UUL4ly9H7UWsOPBIY=
Subject key identifier:   3C:AF:1B:77:74:05:A4:11:D5:C6:D5:BB:66:75:70:FD:23:81:9E:F4
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F43285848E37329C45F6037C650043500
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/462c47a3-9cba-306f-bb61-46c2322b5348.roa
Signing time:             Sat 15 Feb 2025 07:27:25 +0000
ROA not before:           Sat 15 Feb 2025 07:27:25 +0000
ROA not after:            Fri 16 May 2025 06:27:25 +0000
asID:                     63150
IP address blocks:        2602:f988:96::/48 maxlen: 48
                          2602:f988:97::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e3:73:29:c4:5f:60:37:c6:50:04:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Feb 15 07:27:25 2025 GMT
            Not After : May 16 06:27:25 2025 GMT
        Subject: CN=fb50498e-3755-449f-a945-d802235c58e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:1f:88:33:74:a0:76:68:ac:29:f9:a8:28:
                    f5:d8:69:63:65:5a:4e:de:55:16:f9:00:72:66:a2:
                    a9:e2:fd:3f:ae:71:da:4d:87:dd:af:bc:3d:b7:f1:
                    2d:9d:c2:9f:50:23:a9:19:0d:59:34:1d:38:90:2f:
                    10:7e:ce:ca:49:20:e5:7b:5b:db:5e:4c:84:15:2a:
                    c8:a6:62:1b:f6:85:ea:16:46:79:f6:d3:4c:e1:39:
                    9f:33:71:44:9c:31:e0:4f:5d:77:46:58:dd:a5:e1:
                    2b:5e:ac:d7:d4:e9:14:af:db:7d:01:18:e3:57:92:
                    58:da:ad:98:0d:d6:e8:38:e6:8d:eb:4f:1f:50:2d:
                    cb:63:9b:5f:32:6d:a7:d7:06:48:90:4b:21:89:65:
                    f3:80:58:66:52:e5:f5:d6:2a:ea:43:31:80:f9:9b:
                    44:99:15:5b:90:03:6d:53:41:cd:90:1f:56:39:a1:
                    11:88:35:a4:a2:ec:a5:27:94:2a:6f:4c:77:1c:20:
                    77:b0:78:6e:3b:47:ee:39:45:de:fe:d5:8a:18:75:
                    1c:d5:72:51:1c:b1:c0:c7:da:de:d6:ca:f6:8c:c5:
                    cf:7c:21:90:82:02:89:42:56:1d:89:dc:11:42:4b:
                    82:4d:ca:7d:33:f2:16:a4:04:56:3f:b2:5e:2b:72:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AF:1B:77:74:05:A4:11:D5:C6:D5:BB:66:75:70:FD:23:81:9E:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/462c47a3-9cba-306f-bb61-46c2322b5348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:96::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:57:57:00:68:6e:4b:ab:9d:2e:a3:a0:38:39:2f:3d:41:
         d4:78:77:8e:a3:02:e4:80:7b:90:71:0e:b9:a3:9e:5f:08:4b:
         8c:41:c8:2d:a6:7e:88:76:34:7b:07:e2:e0:90:62:46:18:91:
         be:64:e9:06:a8:51:35:b9:0f:49:74:0c:9f:95:4e:a2:23:50:
         41:7c:72:b5:53:b5:4d:67:9d:03:5c:17:65:59:b5:be:79:49:
         c9:d1:e4:1a:db:07:5e:2d:66:be:70:f0:ed:9e:97:da:14:89:
         1a:08:80:ca:08:7a:a6:04:ef:f0:e9:94:d6:91:27:56:c8:e7:
         79:b6:61:bb:e1:e0:13:18:63:94:3b:e6:da:a4:52:f2:ad:72:
         44:30:48:e8:e9:af:ca:69:a2:95:42:ef:a4:b7:19:9d:87:76:
         70:02:09:a0:51:fc:8e:f5:cc:28:d3:ba:93:10:74:57:88:5a:
         b4:36:2e:ea:bd:8d:a6:fa:f9:be:75:4d:b7:b1:af:5c:14:b0:
         e2:e3:61:5b:02:08:08:34:6f:28:80:76:19:d9:3a:08:5f:ee:
         55:9e:08:67:1a:99:09:06:84:47:22:5e:cd:e6:7f:5e:3d:44:
         0d:e7:89:98:39:72:ba:0d:4b:c8:24:03:b5:3f:b2:f2:6e:e9:
         51:bc:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----