Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa
File:                     e732970c-5f85-3c04-aa0d-413895fa0d9f.roa (raw, json)
Hash identifier:          4jWNYkWqqkO3bbcWbX2IOjh34kDQejDFA3EZIfcCjx8=
Subject key identifier:   62:2F:E0:31:0A:91:8D:F7:80:EF:04:10:A8:F3:61:88:D8:FC:B5:D6
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848E2D11845A97ABF26ED03D6C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     0
IP address blocks:        2001:504:13:4::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:18:45:a9:7a:bf:26:ed:03:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8e02e5ae-a55e-41e1-b070-2baac0338454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:26:dc:97:a0:68:3e:c9:37:1d:73:e8:26:
                    4d:df:3c:62:37:aa:77:25:73:e9:57:df:3b:ef:3e:
                    94:5e:ab:0b:56:a8:4d:92:6b:3b:04:27:f0:a1:ab:
                    78:51:a7:87:45:8c:66:ae:48:77:17:34:4b:77:6d:
                    f4:8b:44:02:a7:e0:01:06:e8:61:c0:86:3e:c3:54:
                    14:df:31:12:22:f6:ab:16:b8:07:13:b9:2a:5a:57:
                    74:b1:c4:c8:ee:b6:63:16:31:c6:18:ba:56:bd:80:
                    ed:de:14:cc:e0:a8:81:0a:7e:b8:9d:80:bb:db:98:
                    fb:38:d0:29:34:1e:0e:34:02:8f:d3:75:d2:b7:6c:
                    2b:db:8c:74:5f:ed:68:b0:ab:cb:2e:eb:9a:61:40:
                    0a:42:aa:bb:40:5b:bc:79:d3:46:eb:c2:43:2b:d0:
                    90:60:97:70:55:57:a6:3b:cc:11:e9:a0:f5:07:e1:
                    61:4c:64:8f:a2:25:9f:41:3d:8d:39:ba:bd:4f:4f:
                    a6:0a:7b:10:1b:fe:e8:37:e5:73:cb:34:66:53:0c:
                    bd:8b:c2:4b:97:6f:60:8b:45:95:bd:e4:b1:df:3e:
                    48:31:02:1a:a3:a1:b5:d1:65:bc:b0:ab:6c:ba:6b:
                    6e:52:f8:09:24:f2:d2:d9:b7:fc:0a:3e:8d:86:91:
                    54:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2F:E0:31:0A:91:8D:F7:80:EF:04:10:A8:F3:61:88:D8:FC:B5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e732970c-5f85-3c04-aa0d-413895fa0d9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:13:4::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:57:5e:a2:06:6b:46:16:bb:53:36:e0:0e:92:a6:6c:2b:fe:
         c7:0d:ac:22:03:26:15:e7:9a:b7:6a:6a:22:05:cd:17:06:78:
         8a:ce:55:d0:e6:71:bf:0d:e6:71:87:eb:f7:5c:e4:e3:34:f7:
         94:69:a6:5c:f1:88:6e:bd:a0:c9:2e:3f:ba:23:3d:8a:a6:de:
         ae:2e:85:e2:d5:ce:15:74:df:0c:cb:01:7e:64:35:c4:ca:a2:
         54:4d:eb:ed:99:6f:32:2b:eb:79:f9:0d:4e:08:20:f1:65:73:
         ef:84:d0:51:5d:a4:af:b4:1e:cb:48:1c:2f:64:19:f0:44:46:
         4b:c1:88:b5:d5:32:08:cf:be:3a:b0:7a:b1:85:2d:9f:51:00:
         9e:48:11:46:79:94:16:1d:02:ec:1e:0a:31:13:3a:1b:08:3d:
         67:ec:8b:50:c1:58:a4:01:5e:78:1a:5d:fb:7e:b1:f6:65:8d:
         17:c4:e4:03:20:dc:48:36:05:08:48:26:c5:f3:e3:f4:12:cf:
         2d:b4:8c:82:28:a3:87:29:d3:de:2e:85:a3:80:d2:08:e5:a3:
         5b:db:74:07:54:d7:cd:59:4f:97:e1:c4:b3:5b:90:20:e0:77:
         e4:bd:56:f4:d2:c1:37:e9:3e:6b:e6:85:a8:7a:1b:23:62:7e:
         98:18:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----