Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/41dab902-9aa6-306d-8609-b693de4e63de.roa
File:                     41dab902-9aa6-306d-8609-b693de4e63de.roa (raw, json)
Hash identifier:          LbtCSiI063MhxvuNBzwUSW0iAKLnMuyYOY0OCca4kI4=
Subject key identifier:   76:E0:7D:1E:C2:C2:4F:5A:14:EC:C9:27:25:6A:E8:C7:35:4D:5A:0A
Certificate issuer:       /CN=e45b2423-bd81-480e-93e3-8cc66e601340
Certificate serial:       010D0C9F43285847B73E3B4F5FE247E0C89E9FF0
Authority key identifier: A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/41dab902-9aa6-306d-8609-b693de4e63de.roa
Signing time:             Wed 30 Oct 2024 18:38:16 +0000
ROA not before:           Wed 30 Oct 2024 18:38:16 +0000
ROA not after:            Tue 28 Jan 2025 19:38:16 +0000
asID:                     399970
IP address blocks:        2602:fc3b:3000::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:3e:3b:4f:5f:e2:47:e0:c8:9e:9f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45b2423-bd81-480e-93e3-8cc66e601340
        Validity
            Not Before: Oct 30 18:38:16 2024 GMT
            Not After : Jan 28 19:38:16 2025 GMT
        Subject: CN=1aa19da1-4db8-4c5b-bc7d-df617dad25ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:92:a8:92:a4:d0:48:0c:02:f7:7d:6f:30:
                    32:5e:53:55:67:9f:35:eb:b0:c2:a0:df:9f:92:84:
                    e2:a7:bf:37:79:d6:13:5d:33:4e:2b:a3:31:d8:b4:
                    6d:f1:a3:4f:e7:f3:a4:7e:be:60:23:7e:14:1d:6f:
                    cf:17:5f:7c:b8:47:11:ce:9d:4d:18:29:65:1e:57:
                    5e:c1:36:c4:06:3f:18:8f:af:77:28:a0:f1:43:89:
                    f6:83:1d:cd:fc:fe:d9:5d:30:a4:0b:12:8e:88:67:
                    ec:58:71:7d:c8:d6:71:a9:a0:ee:2d:71:ae:64:7a:
                    89:dd:26:61:bd:41:3a:82:dd:12:1b:dc:67:a7:18:
                    01:d2:48:ea:12:f7:ba:4c:d6:38:08:6b:43:5c:4f:
                    84:da:0a:78:83:78:7f:5f:db:21:3f:b9:78:10:ef:
                    c9:a0:cc:1f:b5:ae:4e:ec:22:2a:51:c6:ba:7e:9c:
                    74:a0:a1:d5:20:eb:b5:27:20:ce:83:18:06:44:b7:
                    b4:07:70:25:db:55:9e:b1:8e:6d:2e:48:af:d7:0f:
                    6e:b2:39:65:25:c8:92:16:1b:48:7d:f4:ee:5c:51:
                    86:8a:32:64:84:0b:83:b1:b3:a9:dc:70:99:bb:b3:
                    b6:bf:79:fe:1b:83:df:05:c2:94:ae:c1:ef:f8:f5:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E0:7D:1E:C2:C2:4F:5A:14:EC:C9:27:25:6A:E8:C7:35:4D:5A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/41dab902-9aa6-306d-8609-b693de4e63de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340/e45b2423-bd81-480e-93e3-8cc66e601340.crl

            X509v3 Authority Key Identifier:
                keyid:A0:90:AC:4B:5C:E6:B9:28:EB:28:02:80:A0:B8:02:3D:D7:26:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e45b2423-bd81-480e-93e3-8cc66e601340.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:01:77:a3:ef:ac:ea:6d:68:2e:c9:3e:90:79:91:84:35:f9:
         b6:be:4f:bf:a5:64:56:de:c9:e2:12:6f:06:41:30:77:ed:98:
         af:07:9b:d4:d7:5d:4b:12:8e:06:e6:77:01:3b:04:39:f3:02:
         ae:b3:5b:07:74:81:65:43:c9:61:f2:17:43:4f:20:55:52:87:
         63:1f:5c:ac:44:03:25:8a:8d:c0:7c:aa:30:a5:f9:04:f7:b0:
         45:3b:40:89:b1:3c:cc:8e:6e:88:dc:cc:a2:a8:a9:d3:04:b4:
         c4:54:46:58:98:2f:c3:09:1e:ea:3f:41:93:8f:ee:19:a2:7c:
         02:34:bc:eb:1c:10:df:7c:9a:bc:58:d1:fa:38:3b:63:bc:95:
         4f:09:fb:e1:eb:c6:a8:3b:d2:76:3b:7d:8b:71:20:67:0b:50:
         87:8e:0f:e3:71:33:7d:fc:58:b0:61:e6:f8:5c:78:12:8f:45:
         12:bb:ee:9f:22:1b:e5:63:f1:d7:f7:af:e7:cc:81:33:b5:a6:
         cd:e3:7b:24:8a:b2:5f:18:99:14:b9:8b:a0:2d:9d:74:ce:1d:
         f2:2e:f9:07:a6:6d:4b:e2:35:c9:de:af:f0:f1:b7:43:2d:10:
         5a:d8:96:2d:e1:3c:cc:b4:16:6e:4f:11:5d:03:ab:0e:df:a3:
         a8:2a:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----