Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/283131da-ff7d-3402-b91b-ea91a869893f.roa
File:                     283131da-ff7d-3402-b91b-ea91a869893f.roa (raw, json)
Hash identifier:          j9LFOocAqeeLQDMD68XuSwW54XpjVLi5qI5WF3IflzY=
Subject key identifier:   92:5B:3B:0D:86:E9:CF:C4:ED:69:82:D4:1C:74:BF:4D:E0:08:3C:74
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B656D9D27FB4E268A5000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/283131da-ff7d-3402-b91b-ea91a869893f.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396561
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:65:6d:9d:27:fb:4e:26:8a:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=18697734-5ad4-4d79-98d7-ecd5b5a18adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:67:8c:60:3a:9c:9b:2b:8b:96:f8:c7:34:
                    ae:c3:6e:63:2d:a8:1d:a5:ad:1a:c9:5e:5d:69:da:
                    95:81:f3:74:27:f3:ca:e1:c0:4f:07:8d:4b:9e:6d:
                    3a:9a:4a:e8:4a:cc:59:1d:ab:b7:61:88:84:56:11:
                    c0:fc:5b:17:28:02:49:8b:ce:81:4a:a5:04:ee:32:
                    d6:bf:75:b8:69:4a:36:55:f4:31:8d:5b:7d:b6:f2:
                    ed:8b:46:25:a0:6a:db:59:a2:9e:81:f8:23:9c:64:
                    14:ed:06:11:76:7e:36:b1:1e:e6:88:f7:49:aa:7d:
                    23:d5:70:1c:7f:7e:2f:43:8b:e7:a6:a4:bf:cc:22:
                    6b:67:eb:be:fd:df:4b:19:b4:69:74:f7:3d:ad:72:
                    b7:cd:40:09:1b:d8:48:47:a9:b9:9a:d4:02:75:ae:
                    8b:ca:9d:61:de:3c:12:eb:8e:0b:4a:d0:e6:ff:4b:
                    74:40:29:b0:7d:e9:bd:43:5a:fc:a0:e9:fa:2b:cc:
                    d4:a1:3b:a4:2d:e1:af:aa:69:6a:55:e7:db:dc:ed:
                    13:86:f2:9c:15:19:a7:c4:c9:0b:92:5c:83:f6:24:
                    0c:a5:63:60:17:41:20:f2:c6:63:31:85:41:21:dd:
                    3d:58:b8:d6:37:fa:2f:fe:d3:b9:18:f6:bb:d2:69:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:3B:0D:86:E9:CF:C4:ED:69:82:D4:1C:74:BF:4D:E0:08:3C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/283131da-ff7d-3402-b91b-ea91a869893f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:40:ac:29:97:21:e6:54:8b:0e:b4:43:ba:6b:35:3d:3e:bc:
         e8:86:b1:9a:c3:67:6b:03:10:a9:01:43:4b:63:48:b5:de:e7:
         37:86:85:21:c6:a3:ee:e7:34:51:3e:07:e2:d1:c2:e1:ed:48:
         d1:91:51:ed:b3:17:b1:56:f3:b5:35:64:56:6d:2c:05:c8:f6:
         a3:55:23:a1:d6:54:06:4e:99:9b:71:3a:2a:68:c4:bd:60:27:
         79:76:7b:46:8d:2a:7a:fe:b7:fc:3a:83:5f:8f:81:70:80:0c:
         2f:cb:d3:62:03:65:26:15:e0:56:56:dc:54:69:4a:16:03:73:
         2d:b5:56:2d:8e:e6:33:63:25:fc:ed:b6:73:6a:5a:99:e5:25:
         19:37:08:f2:03:43:5b:84:48:c3:06:b5:25:80:bf:cb:8d:6a:
         f4:48:00:43:13:57:43:83:04:fb:19:e7:52:6c:48:22:e0:d4:
         27:57:63:bf:30:e4:57:fb:55:a0:aa:5a:ce:35:33:25:ed:9a:
         09:5b:6f:ea:df:4c:f0:c0:19:98:38:4f:36:85:af:27:9b:ed:
         e3:c9:66:22:59:63:aa:8a:ba:a6:45:d0:a2:f7:e6:d9:f2:35:
         e9:99:6c:a0:bd:68:06:3c:73:7d:c3:98:85:36:3f:0c:87:9b:
         f7:fb:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----