Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/7e388385-5673-3ee0-96e9-2be7f534ca05.roa
File:                     7e388385-5673-3ee0-96e9-2be7f534ca05.roa (raw, json)
Hash identifier:          VhNB41a1A2JAvGBXCgIp1U5DqDsdeYAI3NxR8Efq7Xg=
Subject key identifier:   DB:5B:D6:48:41:08:8F:95:E2:9F:7A:75:18:2A:BB:91:6C:EA:9B:8D
Certificate issuer:       /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial:       010D0C9F43285848A6CB6A73400ADC0EAFBDF800
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/7e388385-5673-3ee0-96e9-2be7f534ca05.roa
Signing time:             Fri 24 Jan 2025 14:00:52 +0000
ROA not before:           Fri 24 Jan 2025 14:00:52 +0000
ROA not after:            Thu 24 Apr 2025 13:00:52 +0000
asID:                     29802
IP address blocks:        2602:f972:10::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a6:cb:6a:73:40:0a:dc:0e:af:bd:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
        Validity
            Not Before: Jan 24 14:00:52 2025 GMT
            Not After : Apr 24 13:00:52 2025 GMT
        Subject: CN=8bf9ba7b-8071-45ae-b2fa-e7d026f0d96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:70:ca:c7:3b:29:2f:1d:35:62:21:b5:da:
                    38:16:59:44:35:fb:02:14:6e:c6:d2:09:64:da:6d:
                    98:cb:c2:b4:e5:d8:42:00:cc:b0:4d:8e:d6:88:25:
                    d6:1e:36:ce:01:cb:80:64:94:a1:34:52:3b:e9:89:
                    2d:c0:3a:e3:41:50:c0:6c:6b:0a:1a:ef:d0:77:4d:
                    eb:f1:db:75:92:70:91:a2:76:5b:74:27:b6:7b:53:
                    a5:75:9c:66:01:db:2d:85:28:e0:65:6a:52:6f:ce:
                    26:ff:04:b2:f8:86:9e:eb:c9:2e:79:c0:81:52:1e:
                    d0:06:f2:28:6e:b3:6c:b4:a8:38:cd:84:e5:78:2c:
                    31:91:ad:6a:73:5d:f9:ef:e5:0f:31:9f:3d:b0:68:
                    99:c4:8e:72:1b:71:de:50:09:61:ac:69:e0:17:02:
                    c7:fb:f8:da:4f:86:bc:89:44:de:12:aa:5d:6c:1c:
                    77:97:33:53:f5:6d:4f:ae:2d:42:92:51:fa:63:f8:
                    d6:9a:48:f8:83:18:dc:8f:f8:f4:40:08:20:4a:56:
                    f3:a9:e5:f9:a3:08:59:5a:59:45:53:82:f5:e4:9b:
                    7a:dc:91:8a:d5:74:7f:0f:a3:21:27:7d:b9:cf:f4:
                    d6:b2:bf:90:f1:7b:a3:10:ba:ab:2c:a9:5b:28:55:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5B:D6:48:41:08:8F:95:E2:9F:7A:75:18:2A:BB:91:6C:EA:9B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/7e388385-5673-3ee0-96e9-2be7f534ca05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl

            X509v3 Authority Key Identifier:
                keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f972:10::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:1c:ef:ca:2a:89:5d:70:6e:e7:d3:05:98:37:c7:c3:c5:db:
         3d:13:99:68:83:ae:ae:1a:51:21:04:de:95:f8:e5:4f:3f:7a:
         21:74:f3:db:71:27:80:35:e6:0e:cb:29:1a:cf:d2:49:3c:8c:
         46:ee:c6:bc:65:34:7c:f3:51:8e:68:2e:94:81:cf:b8:40:98:
         54:4f:58:5b:d3:c7:3b:ef:eb:d2:5c:7b:5d:c9:23:c6:31:3a:
         69:61:05:eb:90:19:88:d1:ba:aa:d8:29:b7:b4:59:b0:ec:62:
         31:60:f9:d2:f7:22:b9:4d:14:70:28:e0:80:17:cf:33:d6:76:
         85:20:d0:cf:a5:b6:d4:ff:d2:bc:3e:cd:b5:03:a8:55:bc:a5:
         99:7d:f5:44:a4:d7:77:1c:20:fb:a7:0b:72:3f:8e:f7:c0:ed:
         08:6b:8f:a8:90:3b:b5:48:f1:f0:01:ca:7e:99:c3:02:bb:32:
         f6:98:03:8a:7e:d1:57:15:36:f3:54:1f:ce:6b:c2:c2:94:c3:
         a1:b6:ec:45:dd:07:24:ee:7e:5f:f9:fa:9b:d6:e8:b4:a8:fe:
         aa:27:27:ad:15:e2:9f:0c:39:02:66:37:05:77:f6:0a:a6:a1:
         25:02:2a:90:13:7d:4e:97:ee:81:67:57:12:d0:8b:e9:1f:08:
         72:56:d9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----