Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c0a77540-7ff3-310f-9b1d-d96f133668b1.roa
File:                     c0a77540-7ff3-310f-9b1d-d96f133668b1.roa (raw, json)
Hash identifier:          9HIxVZlSgGQzrLKMA9DZ6yx/mHiJuaGRw9gbKqwHtHk=
Subject key identifier:   DD:6A:45:CB:00:AA:8A:52:2B:C5:E7:FE:68:53:8F:68:E2:54:D9:F4
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F43285849287E69F1BFB3FA722A2EFD00
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c0a77540-7ff3-310f-9b1d-d96f133668b1.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     38047
IP address blocks:        2602:f83b:3301::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:69:f1:bf:b3:fa:72:2a:2e:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=ab840226-a09b-4c6e-9f4e-5ebb810f9430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:da:b7:f5:6e:46:9d:62:4d:df:ae:11:a2:
                    2d:77:77:77:1d:3c:cf:d6:b3:23:f8:87:a3:18:6a:
                    bc:05:55:76:ec:20:bb:44:71:bd:b8:00:49:9c:fd:
                    d0:2c:60:5e:c0:d0:0d:00:06:87:ac:8f:38:8c:35:
                    85:4b:4f:f6:82:af:13:2d:42:58:a4:06:40:2e:4b:
                    0a:cf:e9:66:12:ac:ca:88:2d:f2:93:e5:4f:48:18:
                    00:98:d0:f8:59:77:a5:e5:64:e1:ba:5b:1e:31:5f:
                    e7:39:32:66:b0:5b:3b:4b:a2:81:d9:c5:3a:bd:0a:
                    35:25:04:1e:25:1d:0e:55:86:9c:e2:07:ed:44:ec:
                    64:32:c3:ff:76:d6:6d:1a:d8:0d:0d:11:38:9c:3e:
                    fa:05:62:44:b1:f5:e6:4a:5b:0c:f8:74:1d:3b:b4:
                    67:4f:6e:8f:a6:ce:e5:26:71:fd:37:4c:f0:8c:25:
                    d3:68:67:e1:f2:a9:a3:75:c9:a4:b3:76:3a:3a:82:
                    72:2e:16:2b:2f:1b:57:f9:21:86:dc:0f:cf:06:ed:
                    79:00:ec:45:f7:f2:60:cf:de:cd:23:7a:6a:bd:89:
                    e7:f0:f4:78:20:3b:cf:c1:d6:59:61:92:7f:b1:e6:
                    3a:5a:a0:2c:fe:1a:f5:61:31:6f:63:d7:9f:67:30:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6A:45:CB:00:AA:8A:52:2B:C5:E7:FE:68:53:8F:68:E2:54:D9:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c0a77540-7ff3-310f-9b1d-d96f133668b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:3301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:4c:6e:21:37:4d:8c:12:71:8b:75:b6:fb:b0:4e:bc:58:
         b3:8e:cf:31:ed:8d:9b:38:3d:e6:08:c1:17:1d:81:6b:89:14:
         4a:cd:92:5d:00:67:88:71:ae:23:64:66:64:c2:03:60:a3:ee:
         64:69:9f:20:18:30:7b:0a:a9:c0:da:56:a5:15:fd:e5:e2:36:
         3f:8c:e3:09:20:d8:20:7a:b2:88:2e:37:d6:5e:d4:8b:7e:3d:
         b4:c8:a4:c9:fa:37:b1:ed:a9:81:71:d2:7a:bd:97:4e:b3:8a:
         56:03:f0:e8:82:81:ae:5e:75:3c:6b:7f:d7:ec:e1:0c:ef:d7:
         d2:7d:d1:a4:b3:01:03:bf:f5:c0:e2:9e:04:b3:c3:03:a8:06:
         04:12:3b:8f:51:9f:8a:73:04:e0:29:9f:5c:b4:1d:30:f7:d1:
         6f:6a:34:25:6a:67:e2:f6:b0:34:dc:3e:21:c6:8e:ce:d2:bd:
         17:b0:c5:f6:92:73:9a:cd:3d:ed:d4:86:3f:11:e2:1f:20:2f:
         35:f7:2f:8c:02:12:e2:cc:51:49:5a:47:23:60:a2:d0:2c:c0:
         f7:12:d6:57:b3:25:3d:bc:20:b7:9d:bf:70:f4:2a:a3:cb:ec:
         ee:99:48:23:0d:20:77:b2:0a:84:d3:41:c1:f3:63:fb:00:24:
         18:05:23:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----