Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa
File:                     acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa (raw, json)
Hash identifier:          7eYl8ul22qkinm/W3LGQey1svmPOcc6ctOgLzSKOmfQ=
Subject key identifier:   DF:C0:11:A7:97:85:D9:51:64:2E:E5:28:EC:B7:B1:AA:AF:69:A9:F2
Certificate issuer:       /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
Certificate serial:       010D0C9F43285848C41B7F65B0B98B8EBCD8AD00
Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa
Signing time:             Tue 04 Feb 2025 02:00:40 +0000
ROA not before:           Tue 04 Feb 2025 02:00:40 +0000
ROA not after:            Mon 05 May 2025 01:00:40 +0000
asID:                     394002
IP address blocks:        2604:7340::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:1b:7f:65:b0:b9:8b:8e:bc:d8:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8
        Validity
            Not Before: Feb  4 02:00:40 2025 GMT
            Not After : May  5 01:00:40 2025 GMT
        Subject: CN=98317fdb-d468-49d2-aecd-be7814722d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:93:a4:48:75:01:b6:11:7d:b1:e6:66:2e:
                    d6:61:50:64:88:18:7a:81:5a:77:4f:3e:08:00:a9:
                    11:82:c9:f8:7f:1f:62:f2:b6:fb:93:7a:ea:9a:05:
                    ba:c7:5d:1f:39:25:0e:dd:0f:65:37:a0:1c:25:0e:
                    0d:f7:b3:c0:23:93:34:c7:c8:69:b1:c8:08:fc:05:
                    5b:56:d9:18:61:4d:b0:7c:93:ff:76:fb:c1:99:07:
                    54:e5:b4:39:9a:11:31:eb:61:9d:e6:7a:3a:10:e8:
                    39:43:18:33:b5:f5:04:3f:0d:95:26:14:17:62:56:
                    92:d4:b1:ba:8f:86:ed:f4:25:d0:95:6d:c2:80:49:
                    97:c4:33:9f:33:d6:8e:54:97:91:be:59:33:b7:8d:
                    dd:6c:c2:5c:99:34:9d:d6:51:23:dd:01:a2:e2:9c:
                    3d:a7:0e:97:99:2e:c6:2f:ce:fc:d2:da:92:fc:bf:
                    93:32:4d:6e:ad:72:cb:22:a2:a9:1b:79:49:ee:9c:
                    0e:e3:51:bf:d9:80:35:0a:be:82:35:a5:a1:ef:a3:
                    df:f5:1e:06:8c:d2:2e:2d:65:25:bb:0d:0b:4f:25:
                    3f:cf:2f:5d:75:71:55:dc:4e:68:86:b0:64:e2:b5:
                    f0:09:fe:ee:7b:3d:a6:ed:4e:a5:57:0b:c3:93:80:
                    5e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C0:11:A7:97:85:D9:51:64:2E:E5:28:EC:B7:B1:AA:AF:69:A9:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/acc95f0f-c9b2-36f1-9fd1-d28a6cb928ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl

            X509v3 Authority Key Identifier:
                keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:35:51:d2:8c:04:32:5a:65:62:73:eb:3a:54:0f:9d:d8:fc:
         ea:09:09:c9:e7:ab:c8:b7:9a:d9:f6:7c:fd:88:9a:6a:61:de:
         bd:f7:83:ba:38:77:d7:2a:bf:54:9e:25:32:7f:b1:fe:63:9b:
         d6:99:ba:69:1a:e9:51:f9:d3:f8:df:35:7f:75:9d:3f:f1:c3:
         93:9b:87:4c:c2:d7:89:c8:62:19:e2:5c:a0:6f:d9:a2:5c:77:
         82:ae:cc:64:d6:ae:91:66:ea:49:b8:81:1f:8b:f6:4f:a7:9c:
         10:30:f4:cf:df:d2:f6:f3:b1:82:74:95:49:15:1b:a6:55:a9:
         4d:7b:95:aa:d0:bf:ee:84:e2:23:f4:55:a7:11:0b:ce:53:0a:
         5e:b9:e6:15:70:e5:eb:ff:4f:63:17:c9:e4:00:5f:eb:b8:97:
         be:4b:c4:fc:9c:30:c3:4c:a7:72:cd:84:95:f3:75:1d:a0:e0:
         fa:97:7d:e2:df:de:43:4c:60:6c:28:f1:60:bc:ad:be:e2:55:
         dd:38:1b:3a:de:a7:31:75:9a:4d:7b:8e:25:5b:40:cb:9c:78:
         83:e6:f7:0f:63:d9:48:63:7a:da:0f:8a:b1:2b:6b:fd:65:94:
         0e:ec:f7:6e:6e:fc:95:d4:db:19:f8:06:99:de:59:d3:3c:89:
         92:20:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----