Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa
File:                     22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa (raw, json)
Hash identifier:          XTw8GNa2Bw8r00JtsbK1nMlEQY1gOcTENyLc9NRFe3c=
Subject key identifier:   4D:16:BC:8F:E4:84:F6:35:CE:75:01:AC:71:95:D4:C4:12:C9:57:24
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285848E006592DB1AB6D7A62C83B80
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     62517
IP address blocks:        2602:f83b:1688::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:59:2d:b1:ab:6d:7a:62:c8:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=6b221ffa-c133-434d-8562-3e5317c3b9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:9d:f5:fa:4e:90:d8:d0:9c:3a:f2:f2:c7:
                    6b:b0:59:9f:6f:5c:6b:f7:41:13:9c:f2:6f:9c:a8:
                    66:1e:1b:04:9e:bd:02:8e:f2:37:9e:c8:6e:61:28:
                    29:e1:1a:04:b9:a6:b1:0f:5c:6c:84:d5:75:ac:86:
                    dd:19:bd:6c:f4:01:f9:a1:a9:9e:8d:0e:62:d3:84:
                    4b:ce:8d:f0:a4:97:54:20:83:a3:4d:56:23:9e:d2:
                    bd:dd:80:24:0b:3a:70:9d:5a:1e:0d:bf:ec:5a:70:
                    d3:71:71:ac:2b:35:24:b5:c2:d3:0d:01:b6:4e:af:
                    f7:f2:43:74:5d:c1:b6:a6:47:11:1c:07:75:f8:a1:
                    a8:64:fb:3b:66:c6:29:87:3a:e8:59:28:e9:44:79:
                    5c:c0:bc:56:f7:7b:ab:fe:1d:e3:af:f8:55:a2:9f:
                    05:65:40:1a:70:20:56:06:17:68:5f:11:66:2b:9b:
                    69:a6:5c:0e:4c:b4:cf:41:f5:11:73:78:72:75:b1:
                    66:f4:a5:da:e2:bc:86:21:c8:12:b1:66:8f:21:21:
                    a9:88:d9:7c:09:01:02:03:db:33:e0:75:90:ff:22:
                    a2:08:69:44:63:61:c7:b8:33:f4:87:69:9f:3f:01:
                    01:7a:09:7c:c1:ad:20:60:76:39:c2:40:91:6a:19:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:16:BC:8F:E4:84:F6:35:CE:75:01:AC:71:95:D4:C4:12:C9:57:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/22ab000e-c5e2-33df-8bb6-3ec288e36c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:1688::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:f3:90:99:b1:7d:be:c7:92:51:3d:b9:cb:2d:49:c0:76:
         fc:72:e3:93:02:88:01:3f:e0:55:28:09:e2:e3:c8:c2:1b:19:
         33:a8:f6:8d:26:09:83:59:a4:c0:d3:08:01:28:45:2b:a8:3a:
         61:d5:d1:f8:a2:5a:52:25:55:61:c4:07:75:5e:b3:4d:d9:14:
         8f:76:5c:5b:6f:c4:99:02:5e:fc:b4:af:e2:d6:8e:ad:4d:63:
         92:87:b9:9a:1f:06:e8:53:ec:36:62:57:02:1c:86:ce:15:aa:
         23:13:4f:e4:53:fa:0f:a2:a2:6c:aa:12:9d:35:e2:ad:4a:ce:
         25:2f:84:da:c5:09:89:95:58:c5:ba:4f:80:83:a9:1d:68:04:
         9b:d8:de:b8:ba:48:d2:cd:f9:a2:07:5f:20:78:48:59:e1:ee:
         25:28:5e:2a:43:56:ef:bf:9f:d2:37:62:69:e0:60:d7:c2:bd:
         ac:cf:22:25:c7:12:e2:ac:0e:8c:71:af:02:58:1d:72:f0:06:
         dd:db:44:d8:ba:0b:90:62:e2:9b:90:17:78:6d:36:9b:d4:45:
         b0:57:20:6d:fe:48:e9:c8:af:74:a8:67:db:cc:4f:11:2f:47:
         63:d8:1f:49:94:0a:c7:83:c6:2a:48:d9:93:7a:bf:aa:cd:d4:
         ef:79:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----