Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa
File:                     dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa (raw, json)
Hash identifier:          jmI9HM9gjqYnYsIaVdlEPDODiRjrBhma/uGdPy5T7qI=
Subject key identifier:   4D:8C:51:DB:CC:3F:9F:31:CA:60:93:1B:67:4E:2A:03:08:6E:89:BD
Certificate issuer:       /CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
Certificate serial:       010D0C9F43285848D6413074C953A075C4A87E80
Authority key identifier: E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     62467
IP address blocks:        2602:f83a::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:30:74:c9:53:a0:75:c4:a8:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17adcaa9-9cb4-4d9a-8104-fe64ebb3770b
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=34dd60fe-0f1d-4b57-99ac-e765b90e648e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:f3:b7:73:42:38:92:35:ba:e5:62:46:2b:
                    b1:fd:f9:e9:41:6a:47:7d:9c:7a:8f:20:03:2f:03:
                    72:b8:a8:d4:e0:39:fc:5c:60:2a:a0:82:bf:7e:88:
                    30:67:35:6c:35:d9:67:64:32:ae:f7:4c:3e:f6:4d:
                    e8:ee:9b:82:56:34:e4:c8:8b:46:27:bc:3d:2c:12:
                    ef:61:90:75:e9:4d:aa:e8:0e:1c:4e:14:f1:31:4f:
                    73:6f:cc:bc:b3:ed:3a:6d:e1:fa:b6:41:67:29:3f:
                    7b:f5:73:08:fd:a4:69:fe:4f:b4:70:9d:04:43:a0:
                    8c:fb:f0:e9:1c:61:dd:6d:fa:c0:d7:2a:a9:3a:4b:
                    dc:b6:d8:0f:d2:56:86:08:57:11:5c:d9:49:13:f7:
                    33:9b:79:d4:47:ed:3e:0b:1c:df:f7:4e:0b:be:bc:
                    26:67:6d:d7:2a:24:73:1d:d0:de:4d:29:db:16:31:
                    ab:83:57:a5:40:7a:40:33:07:74:5d:43:1f:8a:be:
                    59:98:37:40:4d:1b:d3:73:4d:46:eb:f4:60:df:61:
                    a4:89:9f:e0:79:d7:49:ef:30:44:10:16:02:ee:8b:
                    a0:b8:96:ee:b2:da:f0:c2:ab:50:84:eb:8d:8d:50:
                    ad:f4:29:6d:4a:de:44:3a:bc:ce:33:71:b8:a8:ef:
                    59:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8C:51:DB:CC:3F:9F:31:CA:60:93:1B:67:4E:2A:03:08:6E:89:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/dd2b1dbc-e7c3-366b-9370-7901a3e3f3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.crl

            X509v3 Authority Key Identifier:
                keyid:E4:E1:07:8A:A1:3D:17:D5:EA:71:D3:1D:80:18:CB:7B:33:95:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/17adcaa9-9cb4-4d9a-8104-fe64ebb3770b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83a::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:2c:82:1d:68:ff:6f:a4:a4:48:73:a1:db:da:b8:56:dc:
         8d:9d:a1:96:e1:9f:9e:07:6f:fa:0c:7e:db:3e:df:c1:c1:90:
         52:33:e7:f6:63:d0:0a:ec:ba:4b:9b:c6:18:2d:4d:2b:3f:a2:
         04:31:c2:a1:39:a7:5e:de:6f:7d:ee:9b:eb:9a:8a:5e:7c:33:
         c6:42:34:db:0d:c9:36:b7:d4:74:fa:bc:23:39:35:7d:44:19:
         c7:8c:4c:4e:2b:38:18:45:82:db:fc:03:e0:a8:58:cc:ea:a3:
         04:42:da:c4:3d:4a:58:45:db:85:8b:17:30:fa:d0:8e:98:97:
         94:be:e3:f9:bb:ab:19:9b:87:be:a9:e1:a8:01:50:d4:50:ca:
         cf:83:bf:a5:19:15:30:c7:6e:3b:f4:f7:4a:ca:de:7f:09:a2:
         aa:26:8e:c3:5b:81:e1:9e:3f:88:52:7d:8a:5a:be:52:1f:50:
         87:d3:6a:4b:c3:5d:fe:d8:4e:08:6c:f7:72:d1:8f:14:56:29:
         20:f2:fe:30:9d:d5:8b:02:8d:8c:1c:ef:9b:07:5e:22:10:06:
         66:b5:d8:7e:d0:c5:cf:23:9b:ce:5c:d3:81:d1:32:74:13:48:
         04:b3:a5:aa:0a:02:d6:88:bc:7b:39:57:a5:f0:40:58:3a:6a:
         01:a0:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----