Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69b215d3-22fe-3a6f-a08f-6c6d2efde281.roa
File:                     69b215d3-22fe-3a6f-a08f-6c6d2efde281.roa (raw, json)
Hash identifier:          WGDyaTu/V1osW7n7OsJyTbvpQX2k8AMXxQockACljVM=
Subject key identifier:   A2:06:26:3F:14:F4:23:00:9D:C9:C6:30:71:3C:6D:DE:D6:92:81:F1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6DFDDB05E07A67B0EFC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69b215d3-22fe-3a6f-a08f-6c6d2efde281.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     36621
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6d:fd:db:05:e0:7a:67:b0:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=9c854a8f-353f-48de-aaf0-b6011ac84f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b6:f2:c7:cf:4e:ff:77:07:7e:f6:8e:cb:27:
                    89:ee:82:12:8f:bd:f4:49:1a:50:e5:40:04:81:d6:
                    f4:c4:c2:77:ae:f6:88:ba:06:73:d5:c9:fa:5f:32:
                    f5:bc:c4:15:3a:a6:5b:a7:2f:34:29:77:fa:58:be:
                    80:fa:74:f1:d2:1d:75:1a:13:22:74:84:0d:c9:32:
                    59:4a:83:59:84:5a:7a:56:7e:c0:cc:3a:02:48:80:
                    fc:79:e8:05:31:06:b8:ca:11:c2:79:47:fd:ef:0a:
                    2a:97:57:86:dc:b5:30:1d:d4:16:d5:7b:5d:cf:2a:
                    c3:9c:d7:32:fd:71:97:18:55:e8:df:4f:e0:c4:d9:
                    1f:50:cb:2d:eb:81:11:20:7b:43:ed:32:4c:1e:23:
                    54:c6:be:1a:24:c9:d0:c2:f0:34:72:25:74:d9:7f:
                    dd:27:ab:67:46:76:bd:43:5a:99:23:c2:7b:55:3c:
                    92:c1:10:ab:cf:08:c6:7a:03:25:30:1b:83:09:e8:
                    23:da:88:83:6b:39:3a:07:9e:fb:52:7d:66:b7:6e:
                    64:36:fd:7b:69:e1:99:06:5b:77:3c:0c:f3:71:e2:
                    69:40:23:d7:48:04:27:d2:df:70:9b:e6:a2:3a:4b:
                    4b:e5:81:78:82:88:83:ae:ae:98:3e:00:23:2a:ef:
                    31:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:06:26:3F:14:F4:23:00:9D:C9:C6:30:71:3C:6D:DE:D6:92:81:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/69b215d3-22fe-3a6f-a08f-6c6d2efde281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a5:58:90:bc:1f:95:55:3a:05:14:03:e0:8c:1f:04:91:bb:
         af:07:71:64:65:c2:86:45:39:f8:a9:74:97:1c:48:94:eb:f0:
         55:a3:41:d2:db:25:8d:e6:95:f6:ec:c5:0c:56:e8:03:68:b2:
         7c:32:d1:3d:3d:dc:61:5b:b3:c5:d2:72:54:29:0a:69:89:91:
         fe:c3:0c:22:5b:d9:e7:ee:93:1f:36:ab:c3:18:62:cd:0d:23:
         f0:5a:8a:ff:df:8e:8c:04:e8:95:73:d9:d1:a9:2b:70:0a:52:
         02:c7:4b:b1:44:c2:6c:ad:51:79:5f:03:9b:85:19:0e:05:22:
         9d:29:ee:0d:76:0a:83:52:48:f3:91:87:c8:e5:29:1d:0a:44:
         c0:c5:91:8b:c1:39:86:2a:51:bd:a0:7b:49:17:a7:7e:3e:6e:
         a4:7d:78:85:3e:fb:58:f5:31:ad:fd:bd:9e:3f:d5:9c:68:ce:
         30:fa:d2:d9:ca:02:ba:1b:d5:48:56:1f:06:6b:7c:be:57:c8:
         e5:ac:e6:57:30:a7:00:11:bb:e0:8e:b6:06:39:4f:b7:de:30:
         98:20:29:6a:84:7a:71:cd:a5:6b:b6:df:49:58:2b:9b:08:52:
         cc:a0:0b:8f:9d:28:e4:05:38:a9:33:45:66:9e:c0:17:d6:c5:
         c3:30:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----