Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a14fb65f-37cb-3374-a579-914407428f05.roa
File:                     a14fb65f-37cb-3374-a579-914407428f05.roa (raw, json)
Hash identifier:          T7e5H6G+dtw2Z/V7lu2BPTtqGPZo2uGRMB0e+mZqPA8=
Subject key identifier:   60:BD:82:8E:55:A5:41:07:C5:6F:76:CF:9B:03:D7:85:B4:E5:EE:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858489FD09DD2950AA1602A9D1E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a14fb65f-37cb-3374-a579-914407428f05.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     20940
IP address blocks:        2600:141c:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9d:d2:95:0a:a1:60:2a:9d:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=405a6e36-e335-4acf-b5ee-1c7f7bf7850f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:59:f5:13:ec:1b:58:b4:6c:ed:cb:ff:98:
                    ca:d1:be:75:22:6d:10:ce:98:99:47:5c:2a:87:11:
                    dd:6d:fa:9a:0b:73:22:21:d3:c2:08:6b:0a:57:dc:
                    2a:fd:58:d6:aa:95:36:3d:52:44:1d:3d:9b:e9:91:
                    2a:6e:c6:e8:0e:49:e1:e5:94:34:19:68:7e:59:e6:
                    a8:6d:ff:12:10:f2:6b:d3:68:5e:1d:4c:7c:67:f7:
                    6c:3c:b1:ff:b1:db:e9:60:5f:9f:35:c3:96:7f:44:
                    40:c7:0d:75:76:c6:f1:81:f2:27:42:c9:4c:79:9d:
                    65:10:d4:17:4a:c7:c3:68:1c:e6:0c:d0:a0:a6:5a:
                    1d:4c:0c:55:59:88:5c:fa:1d:d8:5e:0d:28:ae:bc:
                    0f:8a:32:48:db:f8:30:5a:55:db:9d:ac:53:0c:7f:
                    aa:ba:c5:2e:b7:44:e8:6b:9f:ae:4a:62:71:b2:bf:
                    3b:43:98:0a:fb:22:71:21:b8:b2:0d:8f:db:48:11:
                    91:77:1a:6e:d2:7c:19:10:b6:6d:57:78:1e:f3:5b:
                    32:bd:de:f7:f1:a7:d8:e3:30:cd:df:25:de:4c:00:
                    11:d1:de:b9:46:94:98:1f:9d:d0:2b:b7:f2:09:3a:
                    08:0a:22:79:3f:9f:b4:7f:d7:fa:ed:9f:1d:38:cc:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BD:82:8E:55:A5:41:07:C5:6F:76:CF:9B:03:D7:85:B4:E5:EE:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a14fb65f-37cb-3374-a579-914407428f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:141c:9800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2e:10:f9:b7:b5:c8:2c:66:68:ff:2b:ff:f1:0a:3b:c0:d9:
         dc:11:e5:f7:ce:9b:f3:ee:de:ed:2c:13:e2:b5:3f:a2:e7:ef:
         8f:93:cb:82:cc:01:9c:2f:9f:92:e9:17:2d:49:a9:c0:e2:af:
         2c:6f:d6:dc:da:aa:61:34:fc:6c:cb:c8:7c:bf:3e:50:07:8e:
         17:69:ae:6c:8e:62:9d:1e:5a:40:2d:d2:8f:ad:22:7c:34:52:
         84:4a:cf:c0:e8:f6:f0:e9:a1:c6:f6:4c:d8:55:14:ea:01:80:
         1d:61:32:dc:17:32:15:16:77:8a:12:e2:0b:3c:04:5c:df:41:
         da:ed:d4:00:36:0c:52:42:3d:bd:57:14:bb:37:f0:a5:45:87:
         67:7b:74:9d:1f:86:60:a1:f5:3e:fd:aa:df:2f:23:d0:66:f1:
         de:b2:38:df:f2:4e:e0:2d:47:9f:54:5b:a7:58:35:a5:ae:51:
         2e:dd:f7:f4:9c:f3:b5:15:84:7b:b4:15:a7:3e:1b:22:41:11:
         58:7a:59:78:bd:cf:ba:c3:ea:db:d2:22:1f:ce:f7:ac:34:91:
         c2:45:6c:fe:2b:44:be:00:b9:cb:c7:72:b8:5f:50:a9:f6:64:
         63:7c:a6:e7:23:31:a4:fd:3b:5b:a6:50:26:10:7d:49:10:5e:
         42:98:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----