Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa
File:                     83e053be-e67c-3e61-9877-60e586960fb9.roa (raw, json)
Hash identifier:          vmcHFdz/0/qRYSomqqSuPuXWfiypAIbd4sTGAm2xUBQ=
Subject key identifier:   E6:22:81:72:E5:3D:13:5C:7C:07:27:83:47:FD:DF:39:CF:A4:B4:22
Certificate issuer:       /CN=8b56caea-2136-4342-baff-6f31268d4cc4
Certificate serial:       010D0C9F43285848AF2B75883250A28CA5BCFA00
Authority key identifier: 5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     203125
IP address blocks:        2602:faaf:1::/48 maxlen: 48
                          2602:faaf:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:75:88:32:50:a2:8c:a5:bc:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=04eb0263-23fd-4aac-ad78-f1563bd1c60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:d3:e4:7b:cf:0c:55:ed:40:05:75:de:d8:
                    1e:8a:13:f9:ac:ee:76:3c:72:54:87:d4:1d:81:ad:
                    13:d9:84:92:b8:b4:15:73:fe:8f:fe:93:ca:bc:89:
                    69:bb:0b:b7:41:d8:d7:43:46:c1:10:73:21:df:73:
                    ab:a5:5d:98:3d:14:79:96:e5:b8:62:07:cb:55:a9:
                    72:79:77:74:c9:61:c6:49:de:6d:7b:60:e3:2e:dc:
                    16:05:e8:e8:4d:47:56:70:fb:62:f2:ad:54:17:35:
                    db:96:28:8e:5c:37:95:8f:e8:c9:28:1c:8a:da:50:
                    96:13:6a:71:ac:f6:bf:25:b5:6b:90:bc:28:96:95:
                    47:7e:c7:60:24:bc:62:0a:1d:74:3d:87:0f:8a:e1:
                    d6:ee:ee:d0:7e:3a:3c:20:f3:23:f1:92:18:31:a8:
                    eb:c6:e4:b6:32:f5:d6:e8:9d:66:48:70:c8:ad:d3:
                    11:ec:61:ca:e2:57:de:de:4d:67:b4:f1:21:c3:34:
                    79:b5:7c:a8:7a:07:cc:8b:ec:7b:bf:08:0d:7b:2c:
                    d8:f9:31:d5:c8:46:b8:00:8a:1b:60:85:11:4a:31:
                    ba:05:b2:65:75:a6:ed:0a:29:26:9f:05:46:11:e9:
                    61:4b:43:e2:45:46:6b:54:ee:dd:01:68:7f:0d:46:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:22:81:72:E5:3D:13:5C:7C:07:27:83:47:FD:DF:39:CF:A4:B4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/83e053be-e67c-3e61-9877-60e586960fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.crl

            X509v3 Authority Key Identifier:
                keyid:5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faaf:1::-2602:faaf:2:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:b7:c8:61:06:03:43:0f:0a:d4:06:8c:d0:ef:f7:bd:68:
         0f:bf:47:d4:b8:ac:ee:a3:f1:a1:47:ab:0c:98:16:cf:a9:f9:
         b9:c5:f1:28:03:71:1f:18:b3:53:f7:6a:ce:51:b9:6a:39:91:
         34:c5:c6:32:1e:7d:fc:80:bc:a6:dc:c1:39:44:f0:5b:c7:fd:
         c3:91:00:a3:f5:eb:f3:33:d0:50:93:91:48:60:30:61:80:42:
         cb:b5:b6:3f:6a:a4:14:d4:f3:cb:ac:36:a9:50:96:40:44:65:
         a5:cd:75:73:3c:0c:82:cc:92:ef:ef:4d:cc:75:59:c6:f4:96:
         80:30:19:7e:69:f6:11:d4:f1:b1:39:c8:57:2c:1e:22:83:79:
         84:e5:36:ec:1b:ac:65:9d:cf:c5:4a:2f:92:89:93:ad:b1:30:
         6d:0a:02:a9:3f:d5:00:ce:1c:3c:f5:6d:d3:67:9f:4f:51:3f:
         c8:64:8b:3a:80:04:a8:1b:61:21:2e:9a:f8:7f:9f:1d:0c:26:
         9a:ae:5e:19:e4:1d:90:09:bf:7c:4e:d7:ea:6a:18:4b:32:94:
         fc:18:9d:d9:12:90:f2:2c:92:cb:65:ec:f5:a4:6d:ab:66:8f:
         54:be:d4:66:9c:d4:92:b0:2f:48:5d:32:e8:13:f1:92:f3:1c:
         19:bf:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----