Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/76c33562-b88a-3637-9adc-ee9bf978f9cf.roa
File:                     76c33562-b88a-3637-9adc-ee9bf978f9cf.roa (raw, json)
Hash identifier:          wuzyFXyA4TcD1sSjpJdkuLR3uoUAV0VxNS1RoyOggMU=
Subject key identifier:   E6:B4:49:CB:08:3C:5C:9C:8B:BC:A7:82:79:22:A8:48:57:52:1F:DA
Certificate issuer:       /CN=ed0197f7-c98c-40d8-becd-09a47e58415b
Certificate serial:       010D0C9F4328584593B4741AD00F80DAB7C0B9D4
Authority key identifier: FE:13:5D:ED:56:6A:39:98:14:4E:99:4C:72:77:4B:DF:EC:2D:52:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/76c33562-b88a-3637-9adc-ee9bf978f9cf.roa
Signing time:             Wed 17 Apr 2024 15:33:30 +0000
ROA not before:           Wed 17 Apr 2024 15:33:30 +0000
ROA not after:            Tue 16 Jul 2024 15:33:30 +0000
asID:                     65543
IP address blocks:        2620:10:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:b4:74:1a:d0:0f:80:da:b7:c0:b9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed0197f7-c98c-40d8-becd-09a47e58415b
        Validity
            Not Before: Apr 17 15:33:30 2024 GMT
            Not After : Jul 16 15:33:30 2024 GMT
        Subject: CN=846042d5-6781-4736-a53f-b4db07197f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:fe:88:7e:c7:8d:6f:da:77:16:a8:9a:84:
                    bb:c2:61:cd:ae:40:8d:46:c7:54:07:4d:eb:14:9e:
                    c3:04:29:94:fd:e4:a6:36:a1:b0:99:08:53:4e:4b:
                    37:98:62:c4:40:53:f7:9f:e3:b8:d3:76:dd:2a:f7:
                    1e:27:49:83:3f:9a:cf:53:84:54:1a:b2:87:79:93:
                    57:ce:91:fc:1e:68:48:73:be:68:d5:e9:d2:a0:9c:
                    2a:94:8f:a0:ff:bf:87:cc:00:3c:62:76:3e:6b:a2:
                    51:12:bc:17:2e:32:82:86:34:e3:0c:32:3c:65:d0:
                    fc:56:9f:77:3f:7c:ff:a6:2d:a2:d5:79:ad:76:60:
                    f8:99:2f:25:b3:05:49:f1:ad:15:d9:f0:f3:5c:d2:
                    4a:5c:1d:8f:22:81:29:29:6c:da:45:66:14:56:36:
                    6e:5a:f7:d5:02:67:70:7f:7a:86:34:97:95:36:70:
                    a4:93:d1:ef:51:da:fa:76:18:00:a2:88:67:2a:71:
                    61:37:0f:31:28:ff:31:ba:b2:8b:e5:18:50:63:20:
                    a8:31:cf:97:37:9c:92:64:d2:26:63:71:e4:0c:aa:
                    5f:20:a4:87:59:32:bf:ac:92:e8:93:f5:d2:db:47:
                    04:ae:08:19:1a:c7:85:d0:23:07:aa:e7:19:1e:f8:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B4:49:CB:08:3C:5C:9C:8B:BC:A7:82:79:22:A8:48:57:52:1F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/76c33562-b88a-3637-9adc-ee9bf978f9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/ed0197f7-c98c-40d8-becd-09a47e58415b.crl

            X509v3 Authority Key Identifier:
                keyid:FE:13:5D:ED:56:6A:39:98:14:4E:99:4C:72:77:4B:DF:EC:2D:52:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2f:33:e1:39:8d:0c:a8:a5:1f:54:9c:99:4e:b2:2e:b7:65:
         d2:34:8f:51:4c:81:f2:4f:49:80:b9:6e:bc:c9:d9:05:a0:80:
         4d:15:12:80:ce:eb:8f:e1:57:b7:37:3a:0c:4b:6a:f6:0f:9c:
         22:25:07:42:b0:bc:36:91:50:c6:74:47:00:a4:9a:c5:6d:9d:
         96:18:82:68:8d:e4:6a:b6:b8:8e:cd:68:0a:57:be:cc:e9:04:
         58:b4:65:99:20:b4:81:ae:6d:10:b7:10:f5:73:53:9f:9e:36:
         2e:25:00:18:d1:4b:cd:82:d4:ef:95:95:79:bb:e7:0d:03:2b:
         72:19:47:0c:32:a4:59:93:b8:ad:c8:86:00:6d:97:9a:e5:89:
         a9:27:c6:ca:49:7d:66:e7:4b:8c:24:0c:d5:eb:1d:a4:2b:e3:
         a1:91:5b:a3:0b:38:67:4b:64:47:a4:89:6e:1f:66:73:66:ae:
         ca:c1:96:08:b9:9f:d6:9d:ab:00:8d:8e:65:28:f6:20:3d:84:
         41:0a:3d:f3:37:e7:c1:e4:eb:7a:ab:11:7f:c8:9f:b1:a9:d7:
         f0:f0:f3:70:2d:76:f1:01:3f:52:67:16:c5:39:3b:e8:b9:c0:
         a0:35:60:dd:ec:8a:fa:ff:b8:13:61:46:dd:e5:56:6c:ca:f0:
         9a:68:a0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----