Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
File:                     408e958e-b60e-30d3-bca9-4596afecccc4.roa (raw, json)
Hash identifier:          fK9tyH/Ymzc6SmsBAXDyOOQ0tsog7Kxrhg4frvmEZdY=
Subject key identifier:   E0:F1:CB:C6:4D:4E:29:2B:0B:DB:6E:A0:32:9B:D5:F4:40:54:32:A4
Certificate issuer:       /CN=478a0a21-d101-464c-8706-25bb157545c8
Certificate serial:       010D0C9F43285848977085EEF7566A5176665F50
Authority key identifier: 35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     401457
IP address blocks:        2602:f7bb::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:85:ee:f7:56:6a:51:76:66:5f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478a0a21-d101-464c-8706-25bb157545c8
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=cb05fb68-9205-4f95-a33a-c8e9dfe7ca11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:06:fa:4c:6a:72:8d:1a:f5:7f:05:9a:c0:
                    10:b5:5e:8e:3f:46:b8:34:5d:cf:df:c2:74:4e:c2:
                    c4:ba:a2:4d:3e:f4:e4:c2:17:72:88:b2:ae:c2:68:
                    35:80:65:4a:9b:15:ab:26:b3:16:b4:05:11:c8:97:
                    91:6e:d6:d5:ca:c4:c3:15:c9:db:81:27:e8:e4:e2:
                    a9:e4:fd:a8:5d:b8:d0:6f:69:47:47:24:e0:a2:be:
                    9b:68:ed:04:21:8d:a6:5f:87:34:a2:c3:0c:9a:e0:
                    59:9e:4a:32:a4:50:e5:0c:45:50:30:29:14:77:f5:
                    0c:7f:7c:42:7a:8d:5d:d6:68:28:e4:82:ae:9e:a7:
                    97:4d:7c:b0:db:5f:09:6a:58:ba:8b:38:3d:90:9f:
                    ac:62:e9:75:80:a2:c1:b2:46:af:d7:1e:8a:f0:93:
                    a5:76:fa:a2:37:6a:94:66:fa:eb:43:e9:ac:96:fe:
                    15:e5:22:7c:16:b9:07:71:46:58:99:54:de:fd:e2:
                    96:ad:ad:55:8a:07:82:f9:bf:dc:5d:39:93:2a:07:
                    3b:f4:a6:22:0f:de:a2:fa:ee:fb:00:fc:34:17:3e:
                    db:a3:d7:16:74:6a:95:30:80:60:e8:08:2a:33:ae:
                    03:ee:c5:79:36:04:9b:63:6e:cd:34:01:95:32:8a:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:CB:C6:4D:4E:29:2B:0B:DB:6E:A0:32:9B:D5:F4:40:54:32:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/408e958e-b60e-30d3-bca9-4596afecccc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8/478a0a21-d101-464c-8706-25bb157545c8.crl

            X509v3 Authority Key Identifier:
                keyid:35:C5:CB:3E:AB:C4:73:85:A1:AB:AC:E3:21:61:D3:37:3E:08:E9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/478a0a21-d101-464c-8706-25bb157545c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7bb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:9b:f9:c0:37:e1:06:7f:9e:a0:75:d4:28:0b:b7:07:87:
         08:99:74:3c:2d:ad:fa:93:28:2c:32:be:61:ce:b6:c3:5e:24:
         54:40:28:1f:1e:a8:9a:d7:b4:b4:fc:c6:b8:6e:da:f4:5c:f7:
         4d:36:d5:17:12:ad:2f:fe:2b:30:30:7f:4c:9e:d3:12:b6:1a:
         33:65:77:58:69:ad:ed:de:0a:9f:99:63:8a:25:ca:75:77:82:
         d7:4a:9e:3f:93:79:b2:21:d0:8f:99:64:7d:4f:fa:f6:ff:10:
         d0:85:7b:c2:69:e0:a6:4e:d5:49:e0:38:e9:69:8a:d9:df:6e:
         54:13:68:9d:e6:d5:8d:d4:28:7f:8f:6b:23:43:85:47:51:d4:
         d2:dd:fd:69:ff:67:91:69:32:b7:b5:a8:cb:3a:09:e0:71:ea:
         b4:42:c8:0e:84:be:57:74:94:bd:8a:ee:ef:93:c4:9f:46:df:
         40:9f:a4:89:a6:da:78:eb:54:33:5a:1a:9f:79:2b:15:0d:a1:
         79:2e:a4:57:bb:cd:78:ff:54:eb:f3:b2:a9:9e:46:f8:7a:4a:
         33:f9:e7:66:58:9b:72:df:29:bb:95:a0:90:51:2e:75:bd:47:
         c8:01:fe:61:ac:e4:60:90:6b:ff:88:a2:ee:30:48:d5:62:01:
         24:76:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----