Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f476232-4a24-3878-856d-3b95bd11039c.roa
File:                     0f476232-4a24-3878-856d-3b95bd11039c.roa (raw, json)
Hash identifier:          3bToUSq4YYCMKCrLjRAlyG6ifKWzpQXzg97ga5esTRs=
Subject key identifier:   CE:F6:EF:51:AC:BB:E7:EB:27:CD:8D:F1:C1:00:F3:6B:AE:CE:A1:4C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6990E27D9A2BD4EB3500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f476232-4a24-3878-856d-3b95bd11039c.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396604
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:69:90:e2:7d:9a:2b:d4:eb:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=13e83da9-f6ca-4ded-b389-4e1a563021f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:a7:6d:10:49:85:b7:09:46:a8:b7:4d:51:
                    06:a4:83:0a:77:75:af:25:97:94:35:60:f2:14:42:
                    eb:02:8b:89:64:3e:7a:9e:f1:6c:de:55:58:41:1b:
                    b9:bb:90:8f:dd:55:26:94:53:78:0d:8a:c0:6f:c6:
                    2d:5a:82:2f:58:66:c6:09:7b:93:68:26:42:c8:96:
                    25:7a:1f:9e:e3:e2:c2:3f:44:1f:b7:d1:a1:09:5f:
                    bb:cc:6e:c1:f6:6c:a7:dc:d7:6a:94:52:49:79:44:
                    60:8e:7f:84:ce:45:c3:46:91:f8:18:11:26:86:7a:
                    07:0d:2e:fd:a5:0c:90:5a:d0:ff:29:bf:f5:4a:2c:
                    87:57:3a:77:52:69:d7:cb:cd:97:3a:ad:b8:55:e4:
                    07:e6:3a:3e:47:65:29:fa:2b:e5:ff:61:e6:89:c5:
                    03:42:fa:9d:eb:7b:90:3d:4c:25:cc:14:94:64:84:
                    db:15:b7:19:56:a5:e7:21:73:9d:e2:30:af:99:81:
                    3c:1b:c5:4f:76:d7:a9:c9:09:37:57:97:9e:ab:20:
                    81:55:4d:9d:b9:12:10:e8:37:e8:12:10:66:d3:12:
                    dd:e1:aa:c6:e6:2b:4f:20:7c:ec:47:f8:10:07:39:
                    ab:a1:02:49:0f:cd:77:5c:c4:50:d5:f0:e9:1c:51:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:EF:51:AC:BB:E7:EB:27:CD:8D:F1:C1:00:F3:6B:AE:CE:A1:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0f476232-4a24-3878-856d-3b95bd11039c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ee:59:fb:f3:ba:e4:31:10:d2:41:e2:43:cf:63:2a:0d:4b:
         0a:7d:de:d0:49:5d:43:97:ef:67:60:3e:bb:a4:27:73:66:ed:
         41:26:22:62:52:3a:0f:c2:d4:b7:0f:62:a5:ce:67:25:13:27:
         6d:f1:09:44:be:9d:db:23:9f:9e:a5:b4:37:1a:94:1a:47:5f:
         3f:8a:b2:fc:b1:0b:61:16:ec:e9:34:35:6f:3a:19:ff:c3:90:
         ad:41:54:f4:0d:31:7b:37:66:ed:32:f7:c1:57:29:cd:ee:15:
         d1:e1:c6:86:35:66:bc:7e:0f:67:58:4f:22:d3:64:d1:ad:eb:
         74:e6:c7:78:07:2e:a6:69:12:72:bf:a7:dd:f1:c7:93:b4:4b:
         55:08:f0:ec:7d:5c:20:b7:5a:6d:a3:a6:45:e6:3a:dc:65:59:
         1f:b1:f2:d0:55:0b:82:10:84:0c:41:65:05:6d:f8:09:19:0b:
         a9:98:2d:79:08:08:24:5b:0b:68:69:dd:9d:14:c3:36:59:0e:
         a9:e5:05:9d:6a:56:b2:fe:c6:93:4a:9e:fd:76:25:8f:2d:3f:
         b4:f3:36:87:cc:dc:8e:9b:ed:14:df:c5:8e:81:52:31:f7:6d:
         d5:7c:25:aa:f9:ba:2f:9b:74:d6:f8:9e:b5:b5:35:b1:93:0d:
         e4:93:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----