Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa
File:                     6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa (raw, json)
Hash identifier:          g7nKZJpcMxxbTHUIVF6EOYSMtN/2/iPGeR9Cwv8N/8g=
Subject key identifier:   01:8D:A0:7D:4C:1E:9D:89:36:BA:9B:4A:CC:DE:F2:B6:9D:F6:7B:6E
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A315D1D96DAB2D29517CE300
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa
Signing time:             Thu 23 Jan 2025 06:07:37 +0000
ROA not before:           Thu 23 Jan 2025 06:07:37 +0000
ROA not after:            Wed 23 Apr 2025 05:07:37 +0000
asID:                     19165
IP address blocks:        2604:5500:f800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:15:d1:d9:6d:ab:2d:29:51:7c:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 23 06:07:37 2025 GMT
            Not After : Apr 23 05:07:37 2025 GMT
        Subject: CN=578c39c3-f965-47a8-94a1-c54a19f7c069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8d:7c:ed:eb:6f:03:0a:ed:81:8c:e9:52:89:
                    b9:63:39:7c:1c:b6:e0:86:f6:87:5e:ce:16:f7:56:
                    cd:4c:78:86:44:81:e7:a7:b0:96:fc:c9:c5:bf:89:
                    20:d4:2b:72:87:70:f4:02:38:66:be:ea:dd:9b:1a:
                    4e:b7:d1:17:85:86:ac:d2:9c:08:9b:31:3e:70:d4:
                    57:67:c8:3a:da:e8:c8:15:44:19:d2:36:08:bb:06:
                    16:13:1f:a5:8c:a5:d9:24:32:83:df:88:47:6c:ce:
                    c0:74:d9:92:36:4c:76:08:e7:ac:7c:85:c2:8f:db:
                    68:3d:f6:5c:b0:46:96:9a:21:a8:4c:b8:9a:39:c7:
                    4c:d0:10:b0:40:16:3b:1a:ea:c3:c1:ce:54:17:f0:
                    c1:f1:f7:7c:3a:c3:d6:d7:13:d3:eb:9d:1e:dc:5c:
                    32:fb:d1:21:90:02:c8:cf:e2:15:11:16:66:ae:e5:
                    10:6b:4c:a0:8f:1f:ec:2f:11:29:96:4c:23:cc:c4:
                    ea:fc:78:c2:9b:2c:ba:91:1a:d3:3a:72:e7:d7:27:
                    fb:3c:60:a4:95:0e:56:25:db:b8:22:7c:00:c8:b2:
                    39:d4:1f:ce:4b:da:87:3e:c5:fa:c9:e6:b9:d3:ec:
                    a2:47:09:d5:d1:fe:58:a9:69:e5:b8:64:62:2a:29:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8D:A0:7D:4C:1E:9D:89:36:BA:9B:4A:CC:DE:F2:B6:9D:F6:7B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/6e637ec9-d861-37b6-8069-9d4d4bf1b80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:5500:f800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d2:51:4a:0f:d5:d2:72:b6:c3:b3:18:fa:c1:3b:8c:aa:74:
         b4:a9:d2:4a:ac:46:a8:7a:53:4b:ad:1b:e8:54:5d:80:d9:ec:
         fe:77:7f:ec:cb:08:4b:70:25:e5:df:f6:20:85:16:a5:b9:a4:
         9b:dd:03:63:42:1d:37:93:59:9b:10:23:b8:ad:03:ef:09:da:
         65:6d:e6:dd:01:f7:c0:88:fc:8c:c7:a4:74:6a:6b:5a:7c:a7:
         e8:e4:49:50:85:7d:f5:7a:d6:4d:18:94:04:92:73:52:9f:6a:
         3f:43:93:16:17:d9:0d:fb:7a:61:70:88:0a:ec:5b:85:81:21:
         6b:a4:65:df:36:c5:35:e3:d1:bd:f9:62:48:53:c0:72:c5:89:
         1b:71:51:87:3f:81:33:72:fa:5b:cb:2c:83:5c:d6:6f:89:14:
         90:fa:b4:04:2f:2b:ab:e5:c3:29:13:54:e8:df:1f:c2:f0:da:
         56:6e:c5:75:6a:fd:72:ea:07:da:1f:15:53:81:fc:0b:04:9d:
         1b:ab:fb:4f:cd:52:c5:57:69:2d:19:9b:9b:7e:fa:46:b7:6a:
         14:17:47:31:47:2b:af:37:59:6f:ad:a4:1e:39:22:73:9e:5b:
         fe:b8:3b:e7:e8:d9:25:be:95:dd:e0:e3:71:a0:86:a9:b2:07:
         4d:ad:fe:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----