Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
File:                     5987ee65-bf63-3846-a21b-41263b681a6b.roa (raw, json)
Hash identifier:          ZapnWOFVkdTqxkfZ584//WIptyDbz1T08Y9E1sN/In4=
Subject key identifier:   EA:70:69:C5:F9:F3:B4:77:58:BA:D6:DA:89:E7:0B:94:17:1D:2F:6F
Certificate issuer:       /CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
Certificate serial:       010D0C9F43285848D21143F23B4F52358AB84700
Authority key identifier: 53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     19518
IP address blocks:        2602:2e5:666::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:43:f2:3b:4f:52:35:8a:b8:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=d5fc7c26-0274-460f-b166-76d85b2f356d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:9d:6f:64:1a:f6:47:76:ac:62:ff:0e:ec:
                    c2:f3:00:15:7c:7f:4b:d8:03:d6:85:72:f6:2e:1f:
                    23:9b:ef:90:4a:ae:c5:a1:d9:30:7a:d5:e0:b5:c8:
                    3d:44:69:81:55:28:94:3d:5e:cb:9c:ce:d6:bf:b4:
                    90:d6:df:a7:8c:24:22:ff:2f:d2:ef:93:2c:32:ae:
                    ba:c5:f6:26:92:af:f4:47:d9:54:97:e2:5b:3a:e2:
                    70:c2:2b:9f:bd:3e:79:8a:94:2e:fc:aa:5f:2a:22:
                    10:1c:d7:ce:70:50:6c:07:db:f2:3e:c1:1f:ba:d1:
                    3d:b0:f8:33:b6:3f:d4:1e:be:da:b5:61:78:93:7b:
                    d4:4f:c0:84:3d:0e:58:28:95:e5:b9:eb:5a:1c:ab:
                    85:47:28:31:ec:f3:47:2b:f9:04:12:00:9d:de:a4:
                    7f:5c:c1:b9:4f:95:5b:da:01:71:2a:e3:ef:a8:4e:
                    e8:20:4c:00:ea:9c:42:85:90:cb:e1:83:ea:ba:ea:
                    b6:eb:90:c5:e7:ae:26:71:84:31:04:72:38:80:b7:
                    60:b9:bc:84:98:07:db:e9:6b:62:34:bc:db:7b:37:
                    71:a4:d1:b7:9f:8d:50:e6:91:6d:a4:8a:45:58:b0:
                    1d:9f:d2:98:ce:60:f7:b0:c9:32:83:1a:f0:f8:ac:
                    3c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:70:69:C5:F9:F3:B4:77:58:BA:D6:DA:89:E7:0B:94:17:1D:2F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/5987ee65-bf63-3846-a21b-41263b681a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.crl

            X509v3 Authority Key Identifier:
                keyid:53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e5:666::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:df:0c:fd:fc:1b:e8:d0:6e:a6:9e:e4:82:12:41:bc:b8:
         36:19:7f:50:cf:f3:80:81:25:aa:40:79:5f:11:b2:3e:31:2c:
         47:13:46:03:b8:25:2f:47:75:ce:26:b3:34:e5:55:53:a1:79:
         9a:7f:d9:f3:f2:06:6a:bd:c8:d6:81:c0:9f:5d:13:f2:ec:4f:
         5e:f5:c8:ff:bd:f7:6c:f5:4d:59:8a:6a:e4:cf:53:a9:27:bc:
         99:08:44:80:86:59:00:16:5d:e6:e0:9b:95:7c:7a:fa:00:b7:
         ff:2b:e1:41:60:32:23:b4:d9:3f:34:cd:c0:10:aa:6a:31:45:
         64:1e:68:a7:99:b6:0a:dc:b6:43:46:d8:14:99:a2:1c:47:68:
         e3:76:39:00:ae:de:f8:45:a8:9d:f1:62:5e:7e:4d:3a:8d:09:
         10:fc:e1:6b:9f:ed:a8:5a:00:e4:39:c4:77:14:1f:22:fc:67:
         d0:8b:ba:d6:e8:1a:ea:8a:85:b5:ef:b4:f3:4e:f9:48:56:13:
         fc:ce:40:dc:29:da:c5:19:58:27:43:ef:2c:0f:d6:f5:4f:21:
         b8:6b:1c:30:20:27:17:5d:44:4f:d3:8a:ba:61:0a:96:31:b1:
         35:a2:97:81:c8:78:7b:39:72:02:4c:20:e2:70:2c:6c:da:9e:
         e0:15:55:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----