Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/976b052a-26cd-38db-a5dc-2ff58e9634b2.roa
File:                     976b052a-26cd-38db-a5dc-2ff58e9634b2.roa (raw, json)
Hash identifier:          XrpzBvPEYmXcbfidWQODxFmKZ+NzmbbZFn0oh7Mk6t0=
Subject key identifier:   D2:85:85:B3:F1:E0:4C:0E:5C:9B:32:FE:0F:25:83:19:61:2B:A7:F8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6A72EF2923B5A16BC980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/976b052a-26cd-38db-a5dc-2ff58e9634b2.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     397212
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6a:72:ef:29:23:b5:a1:6b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=b607d0b6-0009-4b9d-bc98-4e9082316874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:b9:53:da:f3:43:8a:3f:7f:d5:a2:19:eb:
                    71:c9:2a:51:e2:6b:ed:df:ac:8d:6f:99:4a:b8:fd:
                    41:ba:4a:4a:b7:63:89:a1:90:bf:9b:3e:95:8d:5a:
                    35:ae:ae:1c:c5:fe:67:9e:1e:ab:d9:2a:e9:60:e5:
                    8f:a0:46:90:33:14:04:99:bb:e0:e3:84:45:ea:89:
                    df:e1:7e:2a:00:15:40:a8:c2:79:6d:84:94:4b:49:
                    da:10:ec:0d:c1:01:80:1d:9e:02:1b:37:e2:12:07:
                    25:52:e3:bc:e9:f7:76:b0:e8:bb:65:2b:d4:10:c7:
                    34:1a:d4:dc:12:04:64:7c:ca:14:e0:68:2a:18:a8:
                    74:ce:ed:38:3a:f7:13:aa:dd:8e:f6:f0:f3:b6:b6:
                    80:f9:d9:a5:3c:de:34:69:52:dc:1e:c2:71:2c:48:
                    85:41:e8:22:ef:c9:a3:5a:dd:2f:a8:f0:26:0e:7f:
                    fe:2f:7f:39:c8:3f:c6:42:4c:03:d7:12:9a:89:47:
                    ed:e8:10:a0:23:da:73:9b:ca:29:b9:e6:90:8f:ab:
                    76:66:66:ea:e9:f8:a0:d9:cb:d8:d1:cd:ea:fe:cf:
                    6b:8d:c5:64:74:30:5f:f0:a8:f1:41:93:9e:2a:bc:
                    c3:02:18:40:2e:09:9c:00:b5:2e:7c:89:f4:bd:aa:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:85:85:B3:F1:E0:4C:0E:5C:9B:32:FE:0F:25:83:19:61:2B:A7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/976b052a-26cd-38db-a5dc-2ff58e9634b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:81:34:82:cf:a8:8f:f8:11:6a:bf:fe:4a:0e:80:92:eb:71:
         25:87:5e:4e:d0:2c:14:f8:b9:a2:63:98:b9:eb:09:21:46:dd:
         70:29:e5:09:ed:8e:e4:39:fb:ec:5e:8b:4c:32:59:59:b4:a7:
         51:8e:54:67:47:b3:5e:b1:ee:ac:4e:30:ca:f3:0a:0a:ac:46:
         2b:9b:bc:05:d0:04:2a:62:86:a8:7d:9f:1a:85:91:d8:0f:1c:
         25:1c:65:a6:2c:b5:c9:85:cf:24:62:76:d6:eb:df:07:06:9f:
         12:65:ac:50:21:fb:1d:37:31:79:7c:8c:15:4f:22:4c:da:49:
         3b:f1:c2:71:ff:f5:16:2e:d5:74:2b:51:38:70:ce:d7:7f:f9:
         b3:91:02:67:c5:09:56:32:2b:c7:a0:a3:d5:7c:47:b3:4d:8f:
         e1:62:5e:ae:31:b0:2e:52:fd:ce:75:f7:85:84:74:87:55:88:
         bb:78:06:a9:55:ac:d9:31:74:c0:7a:32:bc:e8:32:f3:36:06:
         e1:a9:cb:a2:83:49:ec:e7:32:87:ad:d4:1c:17:bb:6f:11:96:
         80:44:85:c2:78:9f:6a:60:03:ff:58:b2:f8:dd:03:99:2a:a0:
         10:54:40:10:e6:e2:b7:95:b0:c9:42:73:3a:5e:90:61:ec:b1:
         30:6b:86:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----