Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa
File:                     2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa (raw, json)
Hash identifier:          D2aipmwieTs5V/ACinpMlZsg4dhxieEG9Zn7pR0CKGc=
Subject key identifier:   8D:5D:B2:38:D3:A4:8C:0E:42:BC:E2:E8:F6:50:AE:81:F1:A6:6B:A6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD40F708EFFD21CD77AF8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     397211
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d4:0f:70:8e:ff:d2:1c:d7:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=efcd1aca-1f41-45ab-9b2d-c9ac2d083a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:6b:06:2d:75:5a:a9:c8:8b:2d:91:48:ad:
                    4a:53:ca:2d:54:c1:6c:5b:0a:d1:74:78:07:ea:a3:
                    bf:e5:05:44:0a:c1:17:e0:b8:af:c8:08:a4:c6:e8:
                    23:77:64:34:78:3e:31:58:6f:0e:09:6d:c9:3d:3f:
                    d9:01:a5:76:6c:8a:a5:92:e6:3f:55:37:5c:ca:b1:
                    f8:1d:1e:54:bb:50:73:e5:a2:fd:f9:70:c3:34:e6:
                    cc:eb:04:f0:09:c6:e1:2c:85:96:0e:4e:f5:16:12:
                    fc:fb:f1:04:9a:e8:fa:b8:de:92:96:f1:3b:1b:6c:
                    0e:22:66:c0:bf:5e:15:2c:51:5a:71:7c:fa:f9:7f:
                    79:ca:1b:16:55:bb:82:5b:c2:63:62:b8:3c:e3:9c:
                    8e:fd:63:2c:d2:5a:46:7b:59:45:1b:84:94:54:5b:
                    e3:89:86:7f:c4:90:0d:46:d4:92:95:44:fd:5a:11:
                    18:18:16:47:bb:8e:5a:8e:fe:d4:3f:72:17:58:13:
                    24:a6:4d:7a:a5:99:b6:51:62:27:fd:00:1f:5d:18:
                    eb:35:41:fb:eb:94:55:2c:ad:6a:5e:24:2e:b3:95:
                    4c:2e:27:46:d4:0d:86:43:b5:1b:45:69:9f:33:e7:
                    89:16:8d:b3:af:99:e4:05:4b:67:a4:b6:b1:9d:37:
                    d6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5D:B2:38:D3:A4:8C:0E:42:BC:E2:E8:F6:50:AE:81:F1:A6:6B:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ab4a4aa-8676-3198-b0fd-78a51471db2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:09:05:d5:b4:b7:ac:9a:a0:ad:1a:2e:af:00:52:c4:74:
         f0:ea:57:46:95:b1:76:49:75:24:e2:54:4f:96:46:f3:c4:2e:
         37:5d:2b:12:47:05:3c:2b:07:1e:9a:9a:8e:92:8e:87:d5:74:
         a3:b8:ae:24:4b:0d:8b:38:5e:fa:de:fe:b3:0b:68:4b:07:35:
         47:64:29:35:0d:55:75:cc:1e:25:33:d6:05:61:c2:15:83:9b:
         1e:bb:3a:1c:8f:30:e2:68:f3:7b:56:d6:8d:61:02:af:87:70:
         69:73:ae:36:0c:99:f4:9c:30:f2:94:ad:9f:98:48:81:39:e3:
         4a:7d:fd:c6:87:91:9b:a7:bb:57:6a:78:b2:45:18:03:62:c9:
         ac:ad:ce:31:dd:a3:b2:9b:0c:00:62:4e:15:69:d9:44:84:a4:
         61:ed:49:fe:47:ef:29:d0:9a:7b:8c:83:4c:5f:41:72:44:39:
         79:47:44:52:0d:58:d2:a9:2e:0b:7e:c6:9c:3c:d7:07:a6:78:
         3b:5d:6e:10:9f:a3:3c:63:08:9f:8e:32:67:8c:21:09:c7:8e:
         bc:cb:55:c4:90:0e:70:cf:06:91:93:c3:ab:f7:b7:69:b5:af:
         1f:49:1b:4e:a6:01:48:17:e3:f3:f5:03:d0:26:75:bd:1b:22:
         bb:11:d8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----