Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa
File:                     dd4384b9-7004-3141-991f-5c544be37016.roa (raw, json)
Hash identifier:          pFjUDqcxgDX4hzBOhtHgSzgIzU0972ZcT4a6Ab4L5Oo=
Subject key identifier:   F1:34:D4:64:73:15:20:C7:13:DC:76:F1:38:6B:88:3D:95:89:CC:96
Certificate issuer:       /CN=29196f81-c26e-4690-8bb8-bab4d6541632
Certificate serial:       010D0C9F43285848EC969D2386F20347E0542000
Authority key identifier: FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     62563
IP address blocks:        2607:a140:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:9d:23:86:f2:03:47:e0:54:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29196f81-c26e-4690-8bb8-bab4d6541632
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=0b17f0fd-051b-4cf6-8381-913f1ffef2e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:51:31:45:0c:13:d0:2f:7b:a7:eb:fc:86:
                    3d:ee:ce:0b:00:3e:9e:2d:5b:04:6b:c3:83:d9:e1:
                    35:50:f7:b2:4b:35:80:a3:c3:62:3a:5d:bc:71:8c:
                    96:d6:32:b8:2f:a7:8c:64:76:f8:4f:3c:7b:e9:75:
                    c1:73:da:7f:cb:76:92:c7:4f:85:42:87:67:2a:56:
                    6b:18:06:f3:13:de:10:73:51:07:a7:27:91:dd:ba:
                    c7:4f:b8:fd:28:ee:b8:79:b3:8d:ae:be:4f:33:00:
                    a5:4d:a7:6e:2e:72:a0:37:af:cd:8d:3d:c0:2c:4c:
                    a4:9e:c8:fd:3e:70:b2:c3:9d:91:92:23:ab:39:5a:
                    71:91:2c:47:e3:73:31:2d:3f:f5:57:1c:af:fd:26:
                    c5:38:66:6b:d0:f8:ed:36:6c:f5:56:cc:88:77:90:
                    7a:01:13:f5:5b:64:76:70:70:1e:ad:0a:a0:61:db:
                    f0:60:74:1e:5c:15:67:d9:56:1a:0d:e7:e9:9d:b0:
                    25:83:cd:47:82:9b:eb:56:5a:e2:82:e1:6e:a6:b0:
                    8f:24:4f:71:ad:02:8f:37:04:e7:b9:50:35:d5:4c:
                    24:97:34:fb:8b:10:24:0b:48:5b:67:d5:59:20:ce:
                    20:df:9c:49:73:52:0d:d7:e3:0d:5e:2a:55:40:c7:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:D4:64:73:15:20:C7:13:DC:76:F1:38:6B:88:3D:95:89:CC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/dd4384b9-7004-3141-991f-5c544be37016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632/29196f81-c26e-4690-8bb8-bab4d6541632.crl

            X509v3 Authority Key Identifier:
                keyid:FB:CD:77:4B:37:47:63:90:F0:EB:D0:91:80:91:64:65:A4:EE:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29196f81-c26e-4690-8bb8-bab4d6541632.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a140:a00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e9:24:de:b8:e9:94:de:17:a3:65:01:6d:e8:d6:6f:46:e3:ca:
         b7:23:55:aa:da:85:0b:ce:1c:53:15:05:7b:f3:25:dd:e1:81:
         fd:a5:80:84:56:87:c3:da:01:ce:13:0b:ad:e0:af:52:fc:c3:
         f2:4c:f3:08:f7:e9:ff:4e:70:36:b2:25:c0:e8:07:2a:f6:f3:
         68:4e:59:c2:bd:84:88:e4:bc:29:e9:8f:5e:fa:2f:30:14:cf:
         4e:90:8a:78:7c:73:00:07:29:79:0c:1a:e9:3b:de:c9:cd:b6:
         01:da:ba:10:f7:46:06:bb:ad:9c:48:08:ad:b1:e9:82:59:cf:
         54:26:7d:ee:20:3d:88:99:73:59:5c:95:75:35:85:98:57:f8:
         fe:cf:b4:45:7f:26:6b:3f:54:92:ef:e4:34:c2:5c:40:77:77:
         87:ad:de:a9:31:58:bc:94:b7:2a:cf:bc:b2:90:7c:39:9f:22:
         3b:7d:09:92:97:9e:0a:5f:c1:61:f5:03:0d:75:1b:84:48:da:
         c8:70:13:6a:59:50:82:0b:36:e7:e3:2d:57:5e:45:55:7d:c7:
         a0:91:1e:3c:31:02:56:eb:ad:b7:cf:0e:f4:2a:9a:62:bf:51:
         b3:b7:f2:9d:9a:07:9f:e8:df:ae:9d:13:73:dd:43:01:1b:0c:
         fd:75:9f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----