Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/fcef0744-fad6-31ad-8a7b-86b0c9fa40a1.roa
File:                     fcef0744-fad6-31ad-8a7b-86b0c9fa40a1.roa (raw, json)
Hash identifier:          4ltUtwA5e5+VatV5lulNiDDwc06pFmI8HXEudjIVWk4=
Subject key identifier:   AA:EE:10:51:A2:F1:FF:56:3D:74:16:B1:64:5D:64:55:57:D0:E1:6F
Certificate issuer:       /CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
Certificate serial:       010D0C9F432858480EC8A487FE51A82BD0037C00
Authority key identifier: 3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/fcef0744-fad6-31ad-8a7b-86b0c9fa40a1.roa
Signing time:             Sun 01 Dec 2024 03:12:28 +0000
ROA not before:           Sun 01 Dec 2024 03:12:28 +0000
ROA not after:            Sat 01 Mar 2025 03:12:28 +0000
asID:                     47778
IP address blocks:        2602:2a3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:c8:a4:87:fe:51:a8:2b:d0:03:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747306d8-f469-4e78-a1fc-d958dfc4f31b
        Validity
            Not Before: Dec  1 03:12:28 2024 GMT
            Not After : Mar  1 03:12:28 2025 GMT
        Subject: CN=36a22675-3eee-4696-b1d5-18362f4d15f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:d6:61:af:56:92:d7:d1:52:69:ab:05:87:
                    a5:fd:72:e0:ce:e8:a2:e8:14:b8:0e:e0:53:5f:11:
                    79:c6:22:96:4f:04:0c:d6:ae:58:88:f5:fb:66:fd:
                    e7:e7:f0:6a:e4:fc:53:e2:a3:cc:fc:76:e3:c6:ff:
                    24:08:7e:fd:dc:f8:cf:23:ce:04:c6:75:f8:87:6c:
                    b1:5f:45:af:4a:af:a0:6b:1d:03:26:f5:c4:d4:26:
                    aa:17:84:b7:e1:af:92:2d:a5:f7:b5:65:f2:fd:44:
                    e1:05:9e:55:00:34:da:02:06:78:f8:f5:8b:e5:ab:
                    6d:48:e3:02:16:e0:78:b2:53:d2:a8:66:05:8d:50:
                    2a:58:7f:cd:4a:29:90:e4:2d:cd:da:1d:38:7c:a6:
                    cf:c0:30:ec:8b:44:b5:aa:10:96:d8:26:6d:09:a9:
                    12:3b:bc:3f:94:b1:e3:8e:d8:6c:e4:ce:dc:45:35:
                    ec:5d:f9:91:56:06:a5:4a:fd:fe:a8:db:eb:d7:8c:
                    63:fb:63:f1:63:76:09:3f:40:44:9e:21:90:d1:6c:
                    e1:72:1e:e7:ff:93:6a:a2:59:3d:e9:40:8b:76:aa:
                    87:45:71:55:d2:55:fb:d6:27:20:d2:b2:9a:31:07:
                    c7:3c:bc:15:c7:a9:57:1f:cf:00:66:7a:13:b4:89:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:10:51:A2:F1:FF:56:3D:74:16:B1:64:5D:64:55:57:D0:E1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/fcef0744-fad6-31ad-8a7b-86b0c9fa40a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b/747306d8-f469-4e78-a1fc-d958dfc4f31b.crl

            X509v3 Authority Key Identifier:
                keyid:3A:6B:C4:F3:A8:7E:D4:46:1E:35:DC:C5:58:63:4A:AE:8A:B6:94:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/747306d8-f469-4e78-a1fc-d958dfc4f31b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e8:66:1a:4e:26:27:06:90:d0:1a:e2:de:83:60:b8:15:91:
         8d:6c:e5:e5:f5:9c:ca:df:bb:12:62:44:dc:59:94:14:31:22:
         4b:ac:31:10:41:52:d4:9c:c4:83:f3:e6:bd:24:42:fa:39:1b:
         c5:6f:32:5d:f7:de:2a:57:d5:fc:00:75:79:43:16:f5:37:16:
         22:13:3a:f3:de:6a:ed:f3:a8:fa:06:18:b4:07:cd:1a:6f:be:
         19:6c:d8:fd:4b:d6:46:9c:fa:f1:f4:bb:e9:8a:a3:30:25:28:
         2a:89:cf:78:0b:ae:9b:e4:78:22:d6:30:86:c6:28:48:7d:68:
         28:42:91:fb:f5:60:7d:c1:90:4d:0b:1d:8e:bc:a4:68:26:32:
         96:87:7e:7f:1b:e0:f2:20:4c:21:e7:18:cb:22:c2:f1:65:96:
         8e:aa:78:64:06:cb:9f:a9:7e:67:c5:45:d4:e7:25:24:84:cc:
         89:b4:61:f5:55:ab:a0:38:a8:ec:5a:58:22:93:63:d5:27:6b:
         43:f8:10:cd:dd:ad:9e:91:ac:b4:b1:ea:1c:93:12:54:27:d1:
         8d:b7:b3:bb:c5:17:13:70:7c:a7:2c:19:09:3a:b7:14:26:94:
         e2:a3:ae:3d:3a:ed:da:0b:45:32:12:76:7c:56:fe:c8:c1:78:
         87:1c:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----