Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/526924a4-9abc-3bec-a601-dbf4552c7312.roa
File:                     526924a4-9abc-3bec-a601-dbf4552c7312.roa (raw, json)
Hash identifier:          K02HENQ6pXFy9NiMsXYehS8rTv/yF5ybWHxUcAQgKO0=
Subject key identifier:   00:69:D5:F1:7C:C4:54:E9:AC:2E:AB:D9:8A:71:75:0B:EE:BA:5C:BF
Certificate issuer:       /CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
Certificate serial:       010D0C9F432858483FA4FD357AEA9A4BBF2DBF80
Authority key identifier: EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/526924a4-9abc-3bec-a601-dbf4552c7312.roa
Signing time:             Wed 18 Dec 2024 15:15:15 +0000
ROA not before:           Wed 18 Dec 2024 15:15:15 +0000
ROA not after:            Tue 18 Mar 2025 14:15:15 +0000
asID:                     16909
IP address blocks:        2602:f78a:90::/48 maxlen: 48
                          2602:f78a:91::/48 maxlen: 48
                          2602:f78a:92::/48 maxlen: 48
                          2602:f78a:93::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:a4:fd:35:7a:ea:9a:4b:bf:2d:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
        Validity
            Not Before: Dec 18 15:15:15 2024 GMT
            Not After : Mar 18 14:15:15 2025 GMT
        Subject: CN=8bd44f47-8b46-46a4-b09d-bb6a039797f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8e:a3:ec:c9:ee:21:a1:42:a7:03:cb:ad:20:
                    e5:4d:f5:fb:df:9c:bb:76:6e:9a:de:a5:58:64:99:
                    0d:ae:24:3b:02:14:8c:31:1e:53:4c:45:74:86:f4:
                    20:b3:9f:4c:4a:23:d6:bf:80:f0:94:23:d8:cc:b3:
                    21:09:8a:77:6e:16:d5:ba:b4:26:34:e6:2b:fc:9d:
                    24:ff:f5:f9:79:e2:91:8a:9c:b8:09:1a:96:e1:a2:
                    38:02:b8:89:da:95:eb:88:41:53:eb:84:0e:7c:89:
                    e1:f8:8e:6e:be:e1:c6:e3:ba:44:9c:9e:f3:87:17:
                    54:01:1b:95:cf:5c:24:3b:77:e1:b7:32:c8:54:46:
                    58:cb:6e:86:99:ea:25:2c:b4:52:80:ce:b3:9e:77:
                    fa:49:62:b7:df:53:a4:b1:b9:b0:1c:bb:5b:1d:16:
                    f7:f1:54:87:90:37:c2:a9:77:10:5a:27:90:12:f6:
                    70:ca:0c:5c:69:f8:b0:02:88:b8:b3:30:e9:78:63:
                    97:5f:a2:87:c5:bb:9b:7a:c2:2b:87:b6:85:c7:a4:
                    69:eb:cf:92:f9:92:e5:d3:4b:fa:ac:c7:d1:a5:1a:
                    18:15:ef:52:8f:9d:4c:8e:e8:51:b3:3d:17:c5:09:
                    12:12:54:33:37:33:88:5a:70:65:64:8c:2f:5a:0e:
                    f3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:D5:F1:7C:C4:54:E9:AC:2E:AB:D9:8A:71:75:0B:EE:BA:5C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/526924a4-9abc-3bec-a601-dbf4552c7312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.crl

            X509v3 Authority Key Identifier:
                keyid:EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:90::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:6d:4f:d7:1c:c7:14:0f:48:d6:49:2e:a4:ae:ca:55:69:
         7d:df:37:99:8e:47:78:e8:ca:55:3c:94:c2:08:53:f1:cf:c2:
         e3:44:1c:04:1f:fc:d6:98:e2:a4:40:2c:c8:55:a1:cc:3c:5c:
         60:8b:30:02:02:fc:c7:52:86:b5:10:ce:fe:54:c6:34:aa:5d:
         c1:b9:4a:51:4e:08:fe:3b:60:4f:79:6c:5d:0b:b8:64:19:7a:
         1a:0d:27:b0:d7:81:2a:88:90:f5:f9:f5:0a:93:3b:56:50:3f:
         a0:bc:88:88:e9:72:fe:1b:72:a6:fa:ce:5b:73:b4:bc:f4:83:
         82:c3:27:2a:fc:30:d5:a7:7b:0e:f7:60:c0:d7:49:7b:30:a3:
         a4:0c:e6:5d:98:74:60:92:1f:2e:92:64:1f:bc:f4:55:22:72:
         78:00:a1:86:52:30:87:18:08:08:43:cc:e8:ea:67:83:58:40:
         d9:57:54:02:eb:15:13:38:5c:ef:f6:60:e1:4b:67:ea:af:d0:
         0f:51:2f:07:f0:e3:33:9f:42:ba:9c:bb:c3:da:8d:70:2f:d9:
         ab:d5:22:c4:cf:d6:d6:16:8d:7c:c8:e0:cf:3b:9b:7d:9a:93:
         05:57:42:30:5e:34:82:66:9f:55:62:73:ad:2a:44:b4:f3:b3:
         62:59:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----