Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5c8a2dcf-e819-35e4-a871-1fa444322574.roa
File:                     5c8a2dcf-e819-35e4-a871-1fa444322574.roa (raw, json)
Hash identifier:          lzzqmCesLqbU8xn5ayObmK/+VMEY3Lb362IpbYrHw2g=
Subject key identifier:   AB:07:56:9D:A3:01:CB:94:B9:A0:67:5A:9C:4B:5F:50:98:5F:18:89
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285848F65BEA48047ED7108E9E4140
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5c8a2dcf-e819-35e4-a871-1fa444322574.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     60781
IP address blocks:        2607:f5b5:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:ea:48:04:7e:d7:10:8e:9e:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=a2ec0ee0-5cc6-4176-b005-3b28ced4924b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:81:b6:a9:a5:fe:f6:7f:59:8d:c5:aa:6c:
                    11:1a:40:c3:a9:fa:1c:d5:08:8e:b6:87:0b:91:d0:
                    00:d4:1e:c3:ad:be:9c:87:dd:ce:4b:9f:09:aa:58:
                    79:01:90:36:21:6c:71:b8:83:7d:9f:87:42:6e:c1:
                    7d:e2:4c:3e:3d:10:1f:aa:3e:c0:8a:9e:7d:66:4b:
                    4f:dc:c8:e9:e6:35:73:23:36:b9:74:d9:2f:1a:29:
                    a8:10:2c:ce:cc:9e:86:ec:42:71:8c:e9:55:94:56:
                    cc:17:d7:38:ff:3e:72:ac:ae:2a:52:c6:74:5e:27:
                    9a:9a:44:1c:cb:db:f2:29:62:e5:7f:53:a4:46:48:
                    6d:4f:93:e6:f5:39:3f:eb:42:6e:57:95:05:d5:a0:
                    c1:77:97:e9:33:11:3d:61:8f:77:41:3c:cc:06:24:
                    e8:14:a1:f0:d9:69:3e:df:71:0f:a4:bf:39:0c:a2:
                    b0:e4:52:7a:94:c6:bc:18:42:70:cf:3f:08:c0:38:
                    91:bd:af:e2:43:20:bc:e1:7a:ed:85:d6:f2:02:58:
                    f1:cf:d7:c0:87:a9:83:4c:be:08:d0:07:e1:e7:2e:
                    20:b7:b4:5b:85:34:c1:ba:3d:34:2e:41:bf:ca:eb:
                    3a:cb:be:08:24:97:79:04:47:9d:af:ff:08:bb:0d:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:56:9D:A3:01:CB:94:B9:A0:67:5A:9C:4B:5F:50:98:5F:18:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5c8a2dcf-e819-35e4-a871-1fa444322574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f5b5:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:40:d2:a1:ca:bf:cd:6a:98:8c:90:e7:e9:b2:3f:20:91:83:
         8d:82:4c:25:60:fc:83:ce:6c:fd:84:ff:55:b1:93:c5:21:26:
         83:eb:a0:5c:52:ac:44:19:f3:b2:11:7b:b4:64:b0:95:8a:bb:
         07:ec:a1:05:ff:67:26:34:da:6c:6f:0e:3e:e2:3a:8b:e8:4d:
         2c:f6:93:0e:e3:43:b5:66:23:21:3a:ad:9c:81:d6:cf:75:1d:
         7b:e7:27:06:4b:12:ce:d8:fb:38:00:2e:74:95:63:bc:eb:7e:
         01:07:b3:8b:ad:5d:54:7c:7f:8f:76:66:00:92:9e:89:38:0f:
         4d:b6:d2:0a:2c:e8:1d:f5:d4:8a:7e:6c:5f:39:16:95:5d:2a:
         3c:a1:d1:1d:11:60:4c:b4:1f:d6:48:b7:02:24:d6:03:e8:37:
         be:b5:de:f1:82:b5:02:be:73:1c:d5:a3:a2:fe:f9:25:b7:72:
         4f:69:fe:1d:81:ab:f3:60:4b:8f:fb:80:15:b1:bd:df:a5:fa:
         d7:4d:78:8a:15:3d:9f:51:5b:c9:75:47:47:03:80:b5:b6:4c:
         b2:87:81:42:62:b2:93:93:b6:88:fa:52:27:c3:3e:a7:86:1c:
         a8:fa:f2:7d:15:80:cb:dd:97:a9:13:51:81:e8:4f:cd:97:56:
         91:9f:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----