Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa
File:                     90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa (raw, json)
Hash identifier:          4Pgvbw9rPv3U9OxNhszwkrcLVEIIVukMGSgAk36Wv1g=
Subject key identifier:   DA:A0:77:D0:AD:F9:B4:0D:0D:97:A7:E6:BB:8B:46:C7:72:EA:14:A2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B692610254EBCDF4E2BE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     19836
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:69:26:10:25:4e:bc:df:4e:2b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=10722e72-24c0-4964-b0b0-1313c412488c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:05:86:9c:75:a6:a0:fa:d3:29:05:e3:82:
                    9a:99:56:8c:7f:9e:d2:8e:7d:24:d8:1c:d9:b8:0a:
                    7e:51:55:b5:16:7a:28:3e:27:49:60:31:41:39:4c:
                    2f:d1:65:5c:71:5f:83:f0:42:4a:20:20:d4:b9:31:
                    15:ff:dd:4f:28:48:77:6f:ec:3a:1a:5d:4d:be:4d:
                    ee:76:32:7c:0c:34:1e:a5:81:a8:02:f7:a9:cc:02:
                    ad:96:23:10:37:d8:74:0f:c5:47:1e:45:d6:77:ca:
                    f2:27:a0:ab:0e:93:e7:89:ac:f5:a5:4b:d0:b7:65:
                    41:8e:71:eb:53:32:87:ae:3e:e6:57:77:f3:e9:a5:
                    f5:b5:c3:38:53:8b:db:33:b4:ac:e9:b7:b8:ec:b0:
                    b0:6e:0e:21:3a:08:d2:77:df:d3:a8:c3:5d:75:2a:
                    5b:37:1a:77:eb:79:20:50:d6:37:a5:69:76:06:45:
                    76:1a:b1:87:78:6d:3b:c4:ab:a2:e3:5b:f8:4a:77:
                    78:e1:cd:95:85:90:b0:3e:fa:3e:f4:c8:95:73:ed:
                    e2:03:92:1f:16:9e:ca:a6:71:62:bb:c8:66:a9:73:
                    5b:62:d3:36:36:bd:7e:b1:97:9e:13:a0:65:3d:cb:
                    80:d9:8e:6f:37:1c:ef:d2:de:2b:ec:70:03:da:02:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A0:77:D0:AD:F9:B4:0D:0D:97:A7:E6:BB:8B:46:C7:72:EA:14:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90bfe5eb-cef6-37df-b74b-c4e38a4fb904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:24:64:08:66:01:56:6c:7b:b1:59:3b:cc:44:eb:f5:54:
         5d:76:23:23:9d:cf:07:49:8b:d3:2f:fb:29:4f:03:c8:bc:8e:
         1a:b7:21:29:1e:41:81:fd:8c:8d:a9:4b:2b:da:e3:c1:09:67:
         6a:ee:e8:c1:c3:9d:ee:f8:64:2b:25:5a:a4:e4:0b:4a:46:10:
         24:f0:1b:92:2c:5f:f6:65:01:4c:31:2c:60:bf:79:23:5c:f1:
         9d:41:f4:2f:1b:bc:1d:75:2e:3f:4e:0a:e9:21:db:ea:98:72:
         b3:76:c5:c9:ad:04:1b:7c:c3:d5:57:20:a9:8f:d4:d3:b4:23:
         35:fe:1b:b9:c9:90:2f:6f:da:a9:fa:f9:12:c7:c4:a1:ed:05:
         03:7f:92:56:e6:ae:10:36:bc:26:a6:d1:9d:24:77:5c:04:14:
         d3:b2:8a:11:13:46:26:5a:cd:35:f3:62:aa:65:5d:ca:42:5e:
         04:9e:43:c2:aa:e3:22:d9:98:ea:1a:bc:38:a1:41:e6:77:a2:
         d6:b2:f5:8a:ac:41:b4:38:81:d1:d6:0e:1b:74:ac:7a:5d:49:
         51:5e:f0:92:1f:c4:b1:87:61:42:3a:b3:85:74:4b:c8:66:89:
         8e:35:51:df:56:38:69:d7:09:4e:7a:64:83:ca:d1:c4:0a:e0:
         f7:9e:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----