Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
File:                     1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa (raw, json)
Hash identifier:          M/PEMhMFZX7ubQ2xxFmDMukYt/eFd8VqMwPZUTGSt68=
Subject key identifier:   27:95:D5:0D:0E:4B:0B:C9:C5:B9:5C:66:DE:FF:82:73:5B:81:2D:1C
Certificate issuer:       /CN=d9914204-e089-4759-b838-5325dc4683dd
Certificate serial:       010D0C9F43285848A830A38727C388D599C4FA80
Authority key identifier: 3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     54686
IP address blocks:        2602:f9b8::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a3:87:27:c3:88:d5:99:c4:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9914204-e089-4759-b838-5325dc4683dd
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=48ea14c9-583b-4d6c-ba09-fe3989eead00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ca:a2:b5:a2:be:09:d5:eb:3b:28:61:cd:b8:
                    b8:69:c9:1a:1c:af:61:74:76:b8:b3:58:df:5d:6a:
                    16:5d:60:0f:d1:2e:9f:9c:0d:10:f2:32:ec:33:36:
                    a4:94:af:82:fd:c2:d8:3b:9c:40:d2:e3:7b:ec:56:
                    71:94:ca:0a:9a:20:76:bd:4d:43:aa:6d:9f:ec:cc:
                    e8:9a:35:4f:96:5e:f1:36:ae:49:71:b5:02:d5:73:
                    d7:88:44:2c:ee:ef:dc:92:e4:98:fe:5d:6c:bf:45:
                    a7:72:21:d8:2f:fb:49:bf:e3:c2:fc:e0:74:a9:85:
                    8a:bd:7c:62:9e:eb:69:9d:16:5a:74:10:bf:e9:a9:
                    c9:9f:2e:bb:c7:7d:57:6a:cc:eb:64:96:dc:1b:2b:
                    84:f5:92:c2:b7:05:31:93:e3:4d:cb:a3:cb:2c:27:
                    37:75:59:f2:26:e5:87:d5:63:dc:48:ae:fc:16:5d:
                    ac:6c:2e:86:67:3b:bb:7e:46:7e:ec:b3:2b:b6:90:
                    87:e1:24:54:61:54:01:02:d7:9c:75:bb:8a:22:f3:
                    ae:8d:d6:ff:b2:39:a3:c9:fa:bc:77:18:9f:56:b6:
                    b5:83:b4:09:ea:87:7c:55:d7:a0:48:96:2f:31:32:
                    81:c6:06:ff:b7:fb:f6:da:10:ce:a8:cf:6c:3a:fa:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:95:D5:0D:0E:4B:0B:C9:C5:B9:5C:66:DE:FF:82:73:5B:81:2D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/1f66a98e-055e-3b39-a874-4c8dee2f61ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd/d9914204-e089-4759-b838-5325dc4683dd.crl

            X509v3 Authority Key Identifier:
                keyid:3C:1C:70:92:5F:C0:CC:04:8D:10:BB:B4:41:F2:2C:DA:78:2F:0A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9914204-e089-4759-b838-5325dc4683dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9b8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7f:d3:78:8f:7e:0b:4d:b7:b6:ab:be:78:13:b4:70:7d:10:
         68:50:fe:4a:7b:b6:65:d4:40:fd:f5:46:80:35:2e:6a:26:8c:
         2b:47:f4:e6:84:b7:2e:d5:82:8b:81:72:24:91:28:12:c1:8e:
         5b:b3:31:30:a7:df:da:30:bf:88:c0:98:6b:dc:42:e9:6c:40:
         6c:cd:74:d2:b7:4d:52:ff:17:38:45:4d:6f:25:6c:bc:6d:fc:
         64:40:f1:f2:0c:64:88:10:df:f5:5e:05:60:89:b8:81:75:46:
         a5:ca:66:cd:12:a8:6a:d6:cf:9f:7c:e9:60:16:e6:85:09:58:
         86:ce:54:5d:d7:2e:d3:73:d3:45:1c:0b:e7:c6:70:55:15:07:
         4f:fc:e7:b7:70:d4:77:0b:57:59:ff:89:71:e7:ef:2d:50:bb:
         bc:17:00:98:ef:ac:bf:95:3a:e5:85:51:02:d4:ee:8a:aa:cb:
         1b:42:16:fe:2b:a2:d0:57:ed:31:76:5c:33:a8:9a:d1:88:0f:
         42:78:32:94:4c:a1:b6:e2:d6:ac:ca:a3:5d:71:68:22:71:cd:
         f1:62:c0:3c:3c:88:32:25:0f:34:7e:d4:49:ef:9a:45:97:46:
         3b:85:e0:f5:82:20:59:ff:1e:9b:3b:0f:a0:f9:e9:0f:bf:b8:
         6a:8e:10:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----