Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89c2505-254f-3c7d-a2b7-13badc0adfcc.roa
File:                     d89c2505-254f-3c7d-a2b7-13badc0adfcc.roa (raw, json)
Hash identifier:          4EB9sLTW29NeD2Es6zW3E/qJxCx/0TNq06s6xq8NNf8=
Subject key identifier:   93:B0:E3:91:CC:D3:F6:55:87:C1:34:60:40:81:96:33:F9:10:6A:D2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848ADC626A8F50E5E8C2605A380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89c2505-254f-3c7d-a2b7-13badc0adfcc.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     55836
IP address blocks:        2600:140f:400::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:26:a8:f5:0e:5e:8c:26:05:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=5c7ba653-f013-4144-803d-14369f276590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d6:f8:0a:9d:ae:fc:28:2f:78:cd:e7:c2:a6:
                    37:68:08:4b:15:03:db:a8:81:e1:32:66:51:e6:9a:
                    a8:34:2e:5f:6e:68:97:03:36:8d:1a:64:51:70:ce:
                    25:b7:47:d1:61:52:de:89:ba:e7:d8:a9:e7:09:35:
                    63:02:4a:bc:80:e5:78:29:85:8f:34:73:8d:68:7e:
                    96:0c:66:d0:7a:60:1e:a4:d2:e9:48:de:ad:16:96:
                    1e:e3:b8:0c:30:b0:41:a9:6d:c0:ce:ce:69:7c:9c:
                    e3:09:64:d1:07:ee:50:05:01:75:83:2c:e2:ae:49:
                    6c:6e:52:f8:48:ec:99:71:de:75:6a:3c:b7:e8:82:
                    10:51:41:de:60:da:b3:c1:5c:14:55:9a:79:a0:24:
                    27:ff:6e:da:d3:08:05:7c:20:2b:ff:18:3d:a0:1c:
                    13:db:04:7c:58:6d:bf:04:a2:b9:7f:f5:a4:16:d0:
                    0f:0e:8d:32:dd:8d:47:19:83:68:58:a0:1f:ed:78:
                    ed:83:7f:57:9f:3b:b3:6d:08:12:2f:14:04:bb:5f:
                    dc:19:9f:ca:0d:97:94:8a:76:18:ad:47:7d:cb:e6:
                    6d:72:36:de:b0:8f:9c:76:77:95:3d:c1:1d:81:8d:
                    e8:9e:6f:0f:57:76:29:f9:0b:74:82:a8:49:eb:62:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:E3:91:CC:D3:F6:55:87:C1:34:60:40:81:96:33:F9:10:6A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d89c2505-254f-3c7d-a2b7-13badc0adfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:140f:400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a6:32:d8:c3:55:83:53:7f:09:74:69:cd:64:c0:f5:36:24:
         99:28:c6:55:37:fd:df:d8:bb:95:a3:6e:b9:b6:60:30:65:26:
         bd:c8:6d:bc:98:a5:40:54:59:8a:94:30:1c:b4:db:85:a2:f1:
         82:0e:6e:bc:cd:5e:7f:3d:79:a1:9e:75:b1:11:e8:aa:01:d2:
         4b:86:00:d0:dd:22:c3:4c:9b:17:8d:4c:57:d6:4f:45:7f:ea:
         e2:c2:a9:2b:c3:2e:d9:59:cc:4f:fb:05:46:8d:fa:0d:bb:dd:
         a8:33:87:42:d5:ed:5a:05:79:e2:b1:ea:5c:4d:7c:39:1f:f7:
         63:2a:3c:eb:e9:0f:b9:34:21:b5:97:56:9a:46:cb:ed:8e:55:
         47:14:e6:2d:7e:fb:64:fc:02:f9:e7:4a:37:24:e8:ed:aa:07:
         0b:d7:1b:a1:9a:7f:28:d6:7d:65:7b:c9:68:69:3c:0f:61:d7:
         52:ef:9d:44:ff:fa:72:07:00:44:3e:3d:65:99:d9:b0:4d:30:
         6f:68:03:86:8f:2d:9a:b1:14:26:88:f4:a2:27:2e:49:4c:4e:
         7a:f5:e7:02:d0:17:fb:08:1b:14:0b:80:f2:e3:41:da:38:05:
         4e:85:9b:a2:61:2c:d7:50:cd:eb:7e:8e:a3:3f:f1:d8:4c:ae:
         6a:29:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----