Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/c814760d-8a21-3e0b-b395-35e005ca71cc.roa
File:                     c814760d-8a21-3e0b-b395-35e005ca71cc.roa (raw, json)
Hash identifier:          /Efq1t84lx0vX1ftRj343fzblfy/+vbs5QQdJihoYsk=
Subject key identifier:   B8:0D:8F:96:9F:94:3B:27:C8:91:28:D4:86:04:43:05:63:50:8D:3F
Certificate issuer:       /CN=ed0197f7-c98c-40d8-becd-09a47e58415b
Certificate serial:       010D0C9F4328584593B50D27319501B9DB8A1000
Authority key identifier: FE:13:5D:ED:56:6A:39:98:14:4E:99:4C:72:77:4B:DF:EC:2D:52:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/c814760d-8a21-3e0b-b395-35e005ca71cc.roa
Signing time:             Wed 17 Apr 2024 15:34:42 +0000
ROA not before:           Wed 17 Apr 2024 15:34:42 +0000
ROA not after:            Tue 16 Jul 2024 15:34:42 +0000
asID:                     64496
IP address blocks:        2620:63:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:b5:0d:27:31:95:01:b9:db:8a:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed0197f7-c98c-40d8-becd-09a47e58415b
        Validity
            Not Before: Apr 17 15:34:42 2024 GMT
            Not After : Jul 16 15:34:42 2024 GMT
        Subject: CN=b777451e-3946-42f5-ab54-424bbd223d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:d5:15:f3:f1:d2:c0:bd:bc:8c:43:17:4a:
                    53:b8:86:40:db:4f:c6:7c:c7:8d:51:ad:0e:fb:47:
                    05:1b:1c:f2:c0:52:47:a0:52:0b:53:5e:e2:4e:04:
                    ae:58:29:a2:6d:69:e4:78:4d:68:3c:45:e1:01:bf:
                    67:e1:6b:a7:f9:a4:c4:49:e6:b7:c6:ab:78:78:4a:
                    0d:e7:ad:6b:a8:56:3e:af:8d:aa:11:3b:1a:c7:56:
                    b0:ad:5c:19:e8:0a:61:45:76:50:90:4b:99:61:34:
                    38:b7:bc:fd:90:0d:6a:81:64:6d:f2:93:29:ee:21:
                    5d:90:78:94:02:19:1c:bb:c7:af:29:f5:22:cf:6a:
                    f3:4f:f4:51:28:3c:84:8c:a3:c1:f2:f1:b1:97:cd:
                    e1:ba:dd:0d:30:be:ac:21:f6:c3:e4:b5:9d:c4:c3:
                    d8:c4:d0:96:63:73:c9:ce:b9:c6:70:dd:ee:b2:49:
                    73:e3:be:f7:78:5b:50:60:9e:2b:20:fb:2d:f3:b8:
                    d1:63:0f:c2:64:58:ec:60:f1:b8:00:4a:50:a2:52:
                    6d:0e:3b:71:a5:36:06:ef:1c:31:58:88:08:6c:f8:
                    f7:78:db:63:77:69:92:d1:16:38:44:87:cc:62:c6:
                    68:10:86:f0:24:ab:93:73:b7:ca:a3:96:52:12:bc:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0D:8F:96:9F:94:3B:27:C8:91:28:D4:86:04:43:05:63:50:8D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/c814760d-8a21-3e0b-b395-35e005ca71cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b/ed0197f7-c98c-40d8-becd-09a47e58415b.crl

            X509v3 Authority Key Identifier:
                keyid:FE:13:5D:ED:56:6A:39:98:14:4E:99:4C:72:77:4B:DF:EC:2D:52:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ed0197f7-c98c-40d8-becd-09a47e58415b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:63:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f1:26:7c:c7:b5:b2:f3:88:f4:fb:75:b4:f2:5e:5c:81:04:
         18:da:28:34:da:a5:ab:b2:e6:a7:c3:49:5a:ec:d4:cf:16:e1:
         49:cb:05:9b:86:5e:26:a3:e2:d5:35:7b:98:ee:8f:2f:92:80:
         ff:22:dd:13:6a:2f:54:b0:84:b9:6a:93:35:0a:a8:1e:b0:3d:
         48:63:c6:e0:9b:f5:89:d7:14:1f:48:33:bf:54:55:c7:f9:81:
         f9:08:48:42:a8:94:b3:94:a2:4b:3d:3c:1e:9d:6c:28:b8:5f:
         14:48:4d:e6:91:ab:18:f6:a6:ca:46:c3:5b:94:e4:9d:b7:d5:
         48:9e:2b:38:13:ef:20:7b:e4:dc:48:07:9e:0a:5d:d3:ac:32:
         0c:d7:0c:7d:1e:b4:92:d7:36:56:7a:a7:8e:21:dd:bd:91:84:
         e4:e2:c2:49:6c:c5:50:bf:75:6f:3e:25:80:62:d4:58:1d:28:
         23:ef:e8:4a:2f:ac:ad:56:94:99:c8:09:97:d0:8d:d5:5c:02:
         83:a0:10:4e:72:19:87:38:34:cb:b7:79:22:f2:09:f0:95:42:
         05:48:47:c4:a7:ac:9c:02:ef:8b:ed:f3:97:4e:08:9f:ca:cd:
         4a:33:6f:45:ba:5a:53:dc:58:48:1d:24:df:f8:46:a8:3d:de:
         17:3f:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----