Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/c3497eb0-d496-38ae-bdab-99444242c6eb.roa
File:                     c3497eb0-d496-38ae-bdab-99444242c6eb.roa (raw, json)
Hash identifier:          S5qyqMn50LnESR1SbHd4Q1sszC7nUs3UBX9kmLz29XM=
Subject key identifier:   EE:69:F8:EC:D1:D2:F5:74:49:EC:A8:57:4C:9F:04:88:F4:31:3E:92
Certificate issuer:       /CN=f2742fee-57dd-438b-8ef0-812e02deeeba
Certificate serial:       010D0C9F4328584908817A497CAB1DCBB4E89340
Authority key identifier: 9D:D4:45:B7:78:0F:22:B8:CF:9C:83:C6:51:D7:D3:76:EB:6B:7A:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/c3497eb0-d496-38ae-bdab-99444242c6eb.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     40583
IP address blocks:        2606:d840::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:7a:49:7c:ab:1d:cb:b4:e8:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2742fee-57dd-438b-8ef0-812e02deeeba
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=1690d995-32af-4393-9085-6fd3bcaee63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:1e:2a:ef:1b:e1:00:1f:3e:32:74:40:7b:
                    35:34:fc:60:46:9f:75:07:6e:94:35:8f:33:e8:53:
                    89:69:74:62:3a:61:0f:a9:2d:b8:0e:05:6a:be:46:
                    00:3a:ed:af:03:ca:c7:93:ae:26:db:58:05:3a:5d:
                    73:cc:1c:6b:b9:b0:04:63:cb:0f:85:be:d0:92:9c:
                    a0:d3:5e:9a:7d:4d:96:55:6a:d0:29:cc:46:35:9f:
                    94:89:e2:67:f9:24:db:da:16:f4:92:c5:85:ea:9c:
                    79:34:0f:48:2e:19:d8:db:3e:e8:39:81:34:07:c3:
                    fb:9c:89:d9:73:f9:1b:ce:56:eb:4f:e4:2a:fc:61:
                    b0:96:a0:9f:fb:e2:c1:2a:24:7a:65:75:7d:da:42:
                    ac:01:29:56:46:1b:98:68:81:a9:d5:4a:e4:9b:ef:
                    8a:9b:55:5a:45:e5:2a:12:24:c2:32:19:a2:0e:a5:
                    30:38:b1:c2:48:32:15:63:a4:81:f8:7b:c8:62:13:
                    a7:0d:a6:a9:23:26:48:ce:0e:80:52:51:f8:1f:41:
                    b3:43:10:70:c9:1c:62:fc:31:7f:d0:87:e4:99:89:
                    a6:2d:c3:62:d7:81:9a:55:b5:ad:b8:8c:6b:12:c9:
                    0c:b7:70:d5:e8:3a:a0:c1:31:69:0f:92:b6:b4:b8:
                    40:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:F8:EC:D1:D2:F5:74:49:EC:A8:57:4C:9F:04:88:F4:31:3E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/c3497eb0-d496-38ae-bdab-99444242c6eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/f2742fee-57dd-438b-8ef0-812e02deeeba.crl

            X509v3 Authority Key Identifier:
                keyid:9D:D4:45:B7:78:0F:22:B8:CF:9C:83:C6:51:D7:D3:76:EB:6B:7A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:74:45:67:e8:d7:d2:47:0a:f2:31:5f:13:c4:f0:40:2a:aa:
         f5:75:58:8b:9d:28:cd:64:07:db:e4:cf:4e:4c:df:f1:b2:02:
         6c:6d:38:e2:ae:9c:75:56:1b:b3:cb:ad:a4:11:e8:55:90:10:
         ba:fc:45:14:35:e2:3f:de:f5:4b:57:33:00:50:5a:fd:25:44:
         44:20:f0:00:24:49:12:a4:d6:bf:cf:a1:b1:1c:38:24:62:0e:
         54:32:cf:a2:e9:5f:c0:47:b0:0b:55:80:d7:c9:69:1c:a5:a7:
         30:8e:2a:a2:ec:f6:ed:24:10:c0:f3:28:e4:ad:41:a7:d6:d5:
         fb:5a:4c:06:88:3d:7a:3c:34:31:25:1f:51:41:04:bd:e6:59:
         87:98:6f:48:27:9f:ee:aa:6e:bc:76:d7:f9:cd:4d:88:a5:d9:
         d8:eb:e9:d9:7d:16:ba:6f:72:9f:43:82:2f:12:cb:4d:fd:66:
         7c:82:5c:50:2d:c3:93:ff:74:ad:29:fb:e9:f5:4d:1b:a3:13:
         de:c2:18:41:c6:2d:aa:4b:2b:29:90:3a:be:08:78:5b:13:98:
         e4:af:85:47:73:a9:0e:c9:08:96:99:64:f8:42:aa:29:b3:af:
         64:2a:1a:02:06:dd:1d:2e:4d:3e:9e:78:7e:0c:65:14:80:d8:
         24:b4:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----