Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a172f-b6e3-3bbf-a070-b9648ffd679b.roa
File:                     510a172f-b6e3-3bbf-a070-b9648ffd679b.roa (raw, json)
Hash identifier:          zXfedu7Zn00T/pRko4qVrYjB0dYkYVPeiKvrVv7FcRo=
Subject key identifier:   C4:F6:5A:F6:52:CC:51:9A:AE:60:45:F6:38:A7:7D:AE:8E:F3:71:4B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848A99664BF4762306A2F9CE840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a172f-b6e3-3bbf-a070-b9648ffd679b.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        2600:1488:6240::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:64:bf:47:62:30:6a:2f:9c:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=6a5c56fc-a0a0-4441-b966-2f93b38281ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:f1:f6:29:2b:c0:a1:4d:b6:ec:e3:01:7c:
                    a1:29:3a:35:39:f9:9a:28:38:68:75:fb:f7:74:cc:
                    4a:3e:12:d7:8e:8a:d9:45:14:38:0c:0f:6b:53:84:
                    04:a3:51:e6:b0:e3:84:bf:ca:e3:5d:7a:ec:e6:97:
                    ec:fb:af:3e:96:55:60:e7:56:be:6a:52:0f:bd:5c:
                    9a:6b:80:91:3b:bf:52:9a:d9:a4:c3:6a:8b:31:26:
                    85:c7:46:a4:83:ae:41:f7:af:b8:85:f1:7d:18:fd:
                    01:21:f8:62:97:2f:9a:58:2b:0b:af:e8:a3:75:c8:
                    9b:3e:af:8a:63:11:56:70:cd:99:57:5a:8b:19:86:
                    21:79:6e:93:f7:23:68:5e:5d:f6:ea:79:cd:60:3a:
                    0b:5a:b0:1d:e0:31:e5:9b:70:ce:b4:8f:8c:32:b9:
                    e6:62:82:69:e1:91:b4:4b:6b:bf:97:18:1c:3f:88:
                    cf:ed:ce:6e:d2:15:d0:ac:a4:3e:f4:3a:9f:87:ea:
                    e6:64:ac:96:c3:5c:30:af:43:68:c1:93:aa:67:e6:
                    30:5e:f8:c2:1d:1a:f9:cd:13:7d:4d:3d:60:6c:28:
                    13:23:3f:f8:b2:23:b1:e7:17:ec:57:f7:94:ac:a3:
                    fe:1d:cc:5f:8d:54:27:bb:bf:16:50:4e:fe:c1:ec:
                    ee:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F6:5A:F6:52:CC:51:9A:AE:60:45:F6:38:A7:7D:AE:8E:F3:71:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/510a172f-b6e3-3bbf-a070-b9648ffd679b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1488:6240::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c3:f7:f5:b6:4c:93:f2:37:80:be:57:32:78:39:65:93:ff:
         ba:0b:ee:97:c0:fa:52:f2:55:44:29:ef:5f:e3:12:00:9d:bb:
         2b:d0:55:b5:3f:32:3c:2d:e7:1e:d0:04:3e:2c:30:4c:7f:52:
         f1:91:a1:ed:54:9a:45:7e:a8:34:1e:ee:c5:13:1c:36:83:2f:
         03:1b:12:52:f5:1f:f8:c7:f4:58:f7:07:f6:e9:0d:1a:29:73:
         a6:f9:5f:3d:c6:47:27:a0:87:5a:55:19:f4:e1:d8:e8:0f:f9:
         03:ea:9c:ff:39:8f:1f:91:a0:fd:ed:31:59:54:61:47:54:24:
         88:7f:e5:c2:0b:2b:63:b8:4e:d7:cd:97:df:cd:24:3b:7e:f6:
         04:52:90:79:a0:a1:e0:6f:ba:95:c9:ca:ee:09:65:dd:bf:96:
         69:6e:1e:8c:0f:aa:49:83:57:a6:2f:90:fd:b0:93:37:ea:0a:
         f3:c2:7e:16:b8:c4:07:b3:43:84:26:06:b6:52:d6:64:cc:52:
         05:68:8d:81:63:4d:e6:44:a5:e3:bf:18:40:8d:f3:f1:85:16:
         70:ac:f6:17:ba:fb:55:0e:03:c4:ba:73:5a:59:6c:58:8d:cc:
         35:fc:a0:3a:ee:0b:dd:af:76:bb:60:cc:bc:46:5d:28:0f:47:
         87:41:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----