Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/0bce3fe2-ed3b-3524-b5a1-29e7d7cce5f0.roa
File:                     0bce3fe2-ed3b-3524-b5a1-29e7d7cce5f0.roa (raw, json)
Hash identifier:          4V2TgiNEXXTSAkGMeifMq/PBSfJdNR1dsXQJjs47uhc=
Subject key identifier:   7B:73:63:2B:63:5C:F4:5F:22:37:3B:B0:F2:D5:DE:0E:DB:82:46:F3
Certificate issuer:       /CN=4980f97d-060c-4860-8029-ca0d97082203
Certificate serial:       010D0C9F43285848530AED4032F6CDF69B667200
Authority key identifier: 1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/0bce3fe2-ed3b-3524-b5a1-29e7d7cce5f0.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     151188
IP address blocks:        2602:faad:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ed:40:32:f6:cd:f6:9b:66:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4980f97d-060c-4860-8029-ca0d97082203
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=7edfefdb-3be2-4240-998c-abdaab0a98e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:90:9f:6c:d5:26:c2:c2:8e:f7:2d:42:ca:
                    86:f5:ed:5f:fe:93:91:65:2c:bc:7a:e9:b1:92:71:
                    5d:d1:08:34:7b:e1:2f:36:fe:c6:2d:29:ad:c6:68:
                    85:dc:0b:87:4a:54:71:ea:02:f8:0c:d8:17:85:ee:
                    de:ca:c6:e1:f1:a8:2a:99:ab:d1:07:0a:2b:75:89:
                    83:31:22:ef:50:27:a3:4a:db:48:75:b0:9a:18:07:
                    62:a1:0d:16:5b:96:3b:45:20:a5:7a:06:7b:45:73:
                    54:0e:98:7d:34:1c:22:b9:43:aa:37:a0:f6:cc:b7:
                    fc:de:f6:9a:c4:18:cc:e7:7d:6d:09:7b:7b:39:35:
                    9b:ab:b0:63:9d:5c:a2:bb:0c:ff:c9:2e:6a:92:ac:
                    6f:91:b5:2a:93:7a:8e:d7:a0:0e:dd:53:50:8b:8f:
                    9a:39:64:d5:76:67:d2:13:12:29:97:8c:b8:d3:10:
                    71:95:ce:cf:35:cd:ae:4c:60:ee:e3:cc:02:af:98:
                    40:2c:d2:d4:4f:1b:a5:6f:e9:77:db:e2:4d:7c:cc:
                    b7:44:9d:d9:f0:7e:28:99:92:4d:8e:b0:0e:c9:77:
                    32:a7:6d:52:cb:98:7b:25:f8:0a:53:27:dc:36:d0:
                    1b:27:fc:3e:ab:72:4b:47:b4:36:05:6e:1a:bf:bf:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:73:63:2B:63:5C:F4:5F:22:37:3B:B0:F2:D5:DE:0E:DB:82:46:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/0bce3fe2-ed3b-3524-b5a1-29e7d7cce5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203/4980f97d-060c-4860-8029-ca0d97082203.crl

            X509v3 Authority Key Identifier:
                keyid:1C:00:84:12:A2:2E:8A:18:2A:12:7A:B8:BE:2E:86:BD:2A:EC:BF:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4980f97d-060c-4860-8029-ca0d97082203.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faad:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:02:bd:0c:a2:1e:d3:7c:41:d1:b3:89:3a:a2:6c:b5:c3:7b:
         ce:87:76:95:8b:3c:7b:d4:50:be:7e:07:b0:62:07:cd:1d:8e:
         9e:c3:98:12:80:1f:a8:ba:3f:4c:1d:33:52:23:9b:f4:4b:ef:
         83:75:b4:a5:50:7c:f3:6c:84:9f:82:d1:a8:40:c7:85:15:cf:
         ad:91:14:0b:5c:68:57:22:d9:e0:ff:99:8d:a4:e9:6d:7f:c4:
         90:e7:d8:51:f6:6e:5e:06:85:b7:43:64:29:82:31:f5:82:b1:
         24:d2:9f:9f:1e:8a:14:03:94:2a:7f:b1:9f:47:e1:95:7f:e7:
         74:3a:dd:11:0d:71:6b:c9:8f:d2:87:d8:67:26:77:a5:eb:19:
         55:d4:42:08:be:ba:db:8a:05:95:71:c5:ad:ca:fe:8d:32:52:
         23:02:73:bd:e7:b7:f3:e1:1c:e6:57:8b:ca:3b:fd:85:c6:7e:
         36:f5:ab:ab:63:88:70:25:bb:32:d9:ab:17:72:4a:e1:5c:98:
         27:e5:71:25:78:58:42:94:ab:7c:c5:f3:46:dc:e9:2c:9d:5b:
         64:98:1c:1a:66:b1:06:d1:ef:06:d9:e3:c0:ec:de:d5:4c:65:
         af:da:c9:73:db:2c:35:c5:19:b6:0c:ee:e2:04:0c:89:1c:e0:
         94:48:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----