Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8ca25fbb-85b2-323d-badf-3afdf14760e0.roa
File:                     8ca25fbb-85b2-323d-badf-3afdf14760e0.roa (raw, json)
Hash identifier:          GKG+5sBBXZnM75iLn8eGGTZJ3J6cQvVVGruprwWJj1A=
Subject key identifier:   95:3A:00:5B:2A:CA:75:80:7A:BB:5E:94:B4:02:1D:40:03:D1:78:6B
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F43285848E202E30F23F0C91EB9C5B040
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8ca25fbb-85b2-323d-badf-3afdf14760e0.roa
Signing time:             Fri 14 Feb 2025 19:05:23 +0000
ROA not before:           Fri 14 Feb 2025 19:05:23 +0000
ROA not after:            Thu 15 May 2025 18:05:23 +0000
asID:                     152586
IP address blocks:        2606:fc40:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:02:e3:0f:23:f0:c9:1e:b9:c5:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Feb 14 19:05:23 2025 GMT
            Not After : May 15 18:05:23 2025 GMT
        Subject: CN=406c131b-7ec9-4347-93b5-2f32f206b809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:60:b2:1c:5c:d0:27:5b:1e:40:02:c8:90:
                    61:2c:00:ea:0e:96:73:49:1b:9b:df:62:d4:15:8e:
                    ca:e1:d0:24:11:01:5a:6f:54:6e:c8:34:5a:f7:0f:
                    d4:05:19:f8:62:67:ab:44:45:1d:57:01:78:5b:a3:
                    a0:f9:7f:32:86:e2:78:70:d2:62:49:dc:19:69:84:
                    02:ae:46:87:25:57:73:6e:96:5f:ac:26:ae:0b:f5:
                    37:30:95:56:06:73:a2:1f:f0:06:32:d8:70:ae:b6:
                    1e:a9:cd:05:a9:54:8c:8a:85:32:21:e5:a8:11:f3:
                    c5:8f:87:f3:3f:da:b7:d9:b6:28:48:5b:24:0b:a4:
                    f0:cc:24:19:2d:e7:b0:1b:31:2b:a5:61:22:f3:fb:
                    12:41:25:d1:30:ee:c9:8b:77:23:9c:ae:17:c9:b2:
                    c0:b2:3f:01:6a:98:9f:c8:66:81:49:d6:75:c0:24:
                    a3:2d:09:6e:5f:34:26:25:0f:36:ad:98:70:fb:36:
                    96:bd:b7:8a:16:d5:9e:5a:b4:ec:b7:05:87:0f:31:
                    2c:82:ec:e8:f5:d9:ca:f9:b5:63:ef:61:27:59:6c:
                    3d:e7:1e:f0:12:0a:74:7b:8e:db:14:bf:16:41:5b:
                    a1:43:ed:a0:8c:13:f3:8e:45:3e:4f:ac:a9:ee:b6:
                    20:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3A:00:5B:2A:CA:75:80:7A:BB:5E:94:B4:02:1D:40:03:D1:78:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/8ca25fbb-85b2-323d-badf-3afdf14760e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:fc40:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:ac:e2:83:68:2d:23:1c:c9:3f:1d:de:1d:56:55:9d:d9:da:
         5a:2a:6c:a6:75:ad:a3:47:d5:77:a1:27:54:a5:19:66:ab:d3:
         d5:50:5d:ac:7a:b6:02:48:9d:04:91:df:dc:d4:72:e9:7f:75:
         61:39:cc:de:b1:be:11:ad:4f:4f:25:eb:c6:6b:37:d3:69:46:
         1d:8f:d2:81:fb:02:e7:6a:48:2a:8e:de:93:44:1f:25:a8:df:
         42:1e:b2:3c:75:dd:05:61:a5:e6:7a:f4:c3:64:ba:68:86:c8:
         f9:bf:f2:06:49:25:9c:04:45:34:c7:69:93:e0:a7:b0:a6:91:
         82:8d:cc:ab:94:49:8e:3e:7d:15:eb:58:d4:96:05:a0:81:a0:
         81:e8:51:37:ce:6b:12:dc:63:53:21:bf:a4:78:ca:38:1b:8a:
         a8:01:8c:d8:d4:3f:78:85:74:3d:6f:65:42:ad:84:8a:92:41:
         52:af:fb:7a:7c:0c:53:d9:f7:0a:ed:fc:46:fd:10:b9:b9:85:
         bc:64:cb:ba:6d:da:0a:e5:5b:69:a9:7e:9d:1e:17:39:f7:85:
         ae:2a:04:b4:9e:99:33:e5:58:6c:4a:1f:10:99:aa:29:9e:32:
         94:20:14:b1:3e:b7:97:26:7e:e2:f8:d0:01:7a:9f:ee:b2:00:
         41:6b:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----