Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa
File:                     2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa (raw, json)
Hash identifier:          NJ0uYzjrhkoCK96fT/Z45MgNgfXUTOs0/GmtZhkkV80=
Subject key identifier:   43:70:97:67:7B:53:52:DF:36:10:44:EB:D4:FA:16:93:7C:FA:0A:A5
Certificate issuer:       /CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
Certificate serial:       010D0C9F43285849393E77E33495B499F08FD000
Authority key identifier: 5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     393227
IP address blocks:        2604:7300::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:77:e3:34:95:b4:99:f0:8f:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eb81838-6cf7-4c1f-bf73-eeec087e471a
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=9f422a90-11d2-4e9d-8a66-8225c793a718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b6:e3:16:2b:0b:40:3d:d3:42:a6:ed:8b:fa:
                    70:4d:fe:f2:40:77:85:4e:5a:9d:7b:29:d6:bc:81:
                    ce:a0:57:9c:40:c1:31:07:ae:06:1b:5b:0a:bf:58:
                    62:fe:29:2c:ad:b1:1f:6c:ac:9d:47:3c:b4:1f:64:
                    e2:aa:4a:61:5b:82:b0:97:58:c7:c1:8a:4c:b7:77:
                    b1:5f:65:93:8d:d5:e8:15:91:86:09:f6:4c:a0:29:
                    00:c2:12:72:b3:9d:ea:0b:bd:4e:0c:74:0c:b1:72:
                    d7:d3:37:97:17:b3:d2:86:c6:67:2a:20:42:db:d3:
                    5e:a2:03:2c:a6:a4:13:c8:f7:06:3b:16:f2:b4:53:
                    91:3f:17:26:39:b3:52:65:3e:36:ab:92:51:c6:fc:
                    98:2d:95:ec:ed:e4:dc:0c:b1:b7:77:3b:67:2d:35:
                    dc:7d:a0:93:b5:6e:90:fe:31:28:37:a5:3c:96:6a:
                    80:9e:6d:bb:72:99:f9:f5:6e:0d:86:31:5f:0f:2f:
                    24:87:1d:fd:f4:67:86:4d:f2:8a:29:84:2c:48:ad:
                    0e:52:58:50:5f:d9:5b:65:f8:5e:2f:3f:ae:8c:59:
                    c5:09:b9:34:2f:e7:f0:f0:00:0c:56:b6:39:7a:d9:
                    e7:d2:d3:3a:f4:3d:e9:4e:3d:5a:29:e5:51:ef:94:
                    f6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:70:97:67:7B:53:52:DF:36:10:44:EB:D4:FA:16:93:7C:FA:0A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/2b92b5d5-5abd-3570-b64b-2214956ec6ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a/5eb81838-6cf7-4c1f-bf73-eeec087e471a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:78:96:26:CA:98:F9:F4:59:0D:D1:D9:DA:BA:10:1C:3F:FE:B7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5eb81838-6cf7-4c1f-bf73-eeec087e471a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7300::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c0:11:09:98:85:0a:b1:e5:6b:21:0c:ce:4e:b1:c3:1f:11:
         77:7e:18:a9:b9:4b:ca:02:18:58:52:9c:c6:68:82:c3:e9:65:
         02:2d:f7:74:64:57:c8:e0:a1:ca:f5:b2:64:4c:66:e0:ca:85:
         b4:ff:19:4f:e2:4a:b3:a4:11:34:e0:a6:c7:df:c4:6d:32:db:
         80:22:41:fe:20:9b:25:74:c6:39:71:c9:96:4a:07:36:a7:5c:
         28:63:59:f7:e6:b5:a1:89:23:35:8e:b3:35:d3:6f:10:6e:ee:
         c0:7b:cd:8e:49:ed:a9:1f:44:6b:20:b8:77:82:a6:11:1d:1f:
         f4:43:56:0a:15:aa:18:7e:a2:df:31:f5:d1:b1:60:0c:03:de:
         fe:91:7b:80:c7:04:55:d8:fd:3d:36:1e:20:ca:30:e6:e1:d2:
         f4:54:b4:17:01:46:53:c7:f9:bf:ff:3f:e6:5a:b7:f0:6d:c4:
         e2:c3:83:a6:7c:f9:22:fb:78:83:8c:6c:5f:86:4e:b4:8d:6e:
         76:d0:6b:05:5e:83:04:b0:15:cc:60:02:11:96:6c:61:9d:09:
         55:13:f8:7b:ea:1d:b0:41:0f:c4:9f:b8:1b:48:c5:60:be:ec:
         39:4e:ef:25:0d:e4:5e:1c:f6:1b:5a:f0:eb:91:97:96:78:97:
         e5:81:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----