Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa
File:                     68be3c50-4093-3e0b-aa1b-e8f06f849002.roa (raw, json)
Hash identifier:          K4Ob8cmr+ekMOJ+LD4XslmoWghNuyPvwS4j6uJiNSzc=
Subject key identifier:   61:D1:7E:F5:A4:68:8E:A1:22:89:6D:8F:92:49:37:B9:AB:06:6B:2A
Certificate issuer:       /CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
Certificate serial:       010D0C9F4328584900216513AD2BCDF6E1D53400
Authority key identifier: 72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     6649
IP address blocks:        2606:5240:bacb::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:65:13:ad:2b:cd:f6:e1:d5:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5553566f-cbda-48fe-ba4a-9ce4cb36a6c5
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=a18a1428-e1ae-4fe8-a706-2706d74350c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:89:f7:70:e2:6c:ff:bc:47:22:32:25:1c:65:
                    0d:37:85:4c:2c:e1:87:e6:4b:a9:41:d1:8a:01:76:
                    dd:d1:1d:9c:1b:a2:65:aa:af:8e:a4:1e:f0:9a:11:
                    d6:af:2e:f0:17:92:e9:26:51:88:94:df:d7:05:9f:
                    81:e2:a0:ce:aa:44:99:d0:7e:9f:53:32:2a:7e:86:
                    70:b5:cf:ed:48:87:a4:56:a7:a6:53:ce:15:ef:34:
                    ad:40:4f:f8:1c:3f:ed:6a:71:3c:12:a9:da:7d:4b:
                    09:51:02:6d:d9:18:6a:07:6b:35:ad:dc:de:84:b7:
                    91:ed:fb:2b:03:72:0b:49:3e:33:f8:60:77:7c:78:
                    9b:68:5b:62:b8:3d:3a:2f:22:89:77:52:0f:d7:68:
                    1c:bd:cb:ba:7e:96:4e:c7:cc:6f:14:4c:04:7c:5a:
                    e6:70:9d:d6:8c:47:8c:f1:9e:17:09:f0:7f:3e:c2:
                    31:3a:73:9b:88:6b:dd:86:66:45:55:22:23:1d:27:
                    5a:7e:03:63:a7:e6:09:f1:24:a2:68:22:76:c4:7c:
                    49:0f:3b:0c:74:54:cc:07:b1:1e:89:10:32:85:15:
                    0b:fb:15:b2:6e:50:00:8d:7c:4a:e6:54:3f:1c:aa:
                    8f:07:e0:15:49:94:14:29:af:9d:a7:81:03:45:e5:
                    ae:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D1:7E:F5:A4:68:8E:A1:22:89:6D:8F:92:49:37:B9:AB:06:6B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/68be3c50-4093-3e0b-aa1b-e8f06f849002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.crl

            X509v3 Authority Key Identifier:
                keyid:72:9E:02:D1:42:AA:4B:6A:97:7E:8C:D8:BB:26:FE:0F:5F:41:94:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5553566f-cbda-48fe-ba4a-9ce4cb36a6c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5240:bacb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:bc:5f:f5:f6:a2:bc:12:20:64:6e:57:0f:3a:9e:21:c7:
         1d:d6:76:b2:4e:36:57:27:96:7a:a8:08:d5:22:e1:dd:45:20:
         13:3c:df:26:31:1b:f1:3a:a7:6c:1e:27:44:80:73:db:92:43:
         d5:a2:00:20:bb:c3:88:65:fb:48:33:e8:25:d3:87:7e:ca:0b:
         e2:45:37:6f:80:17:fc:e0:a9:27:91:f7:e7:6a:96:52:19:4c:
         a8:be:ac:40:36:47:09:50:1a:8a:4b:4b:fc:d1:6e:11:3e:83:
         5d:91:8f:fb:c4:bb:ea:7f:ff:04:c5:b3:75:37:ff:b4:67:54:
         18:07:97:0c:a9:2e:5a:5e:e6:44:6a:05:0c:f5:6a:65:48:7d:
         f0:77:8a:f1:a0:17:d0:16:cc:11:fb:10:40:a2:40:03:d4:b8:
         ba:d6:fe:2e:aa:48:da:cc:58:06:33:b9:ba:3a:92:3a:4a:ce:
         13:a2:db:46:48:47:6c:52:a1:e9:3f:4d:03:e7:34:de:86:0a:
         91:4f:6f:e8:77:ab:8e:13:db:49:c0:2b:17:8a:b8:66:81:75:
         5a:c9:f5:1a:6b:7c:ac:6f:d8:84:25:10:ed:46:c6:81:91:8f:
         a3:33:bc:7b:29:f7:4e:8d:04:34:91:82:ff:29:54:19:05:cb:
         45:25:8d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----