Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c9bdb34-0577-3221-9f3c-057721ca61ec.roa
File:                     9c9bdb34-0577-3221-9f3c-057721ca61ec.roa (raw, json)
Hash identifier:          bqzmv1Q4IoTs3uQTxinH9M5tYuV9Z6Fc1LfZmJQqCyg=
Subject key identifier:   48:5A:63:20:B8:D6:13:6D:EA:DB:F4:2C:E9:F2:D7:8C:BE:CF:56:13
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858488280A51FC7F346ADBDAEF780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c9bdb34-0577-3221-9f3c-057721ca61ec.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     397193
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:a5:1f:c7:f3:46:ad:bd:ae:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=18c072f7-1e46-4d2f-b353-145b4d5ea2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:61:b1:b1:63:72:23:a9:ba:29:75:44:c1:19:
                    26:50:f9:6d:7f:b6:65:17:ae:c6:aa:36:9f:3a:01:
                    68:9b:a5:50:be:7e:54:c8:0a:4e:31:14:5b:7d:65:
                    98:87:42:6f:fa:c5:4a:03:fc:de:db:67:2d:11:31:
                    dc:db:fd:1f:0c:04:63:c9:a3:0c:cb:cb:f8:d3:8a:
                    ec:fe:12:db:56:c3:c9:34:2e:57:57:34:ab:f4:6a:
                    97:26:3e:60:51:56:29:c4:a7:4e:0a:1a:a7:2d:6f:
                    f7:9a:3d:46:87:47:e4:79:d6:63:c8:7a:59:25:00:
                    b0:e7:93:66:1d:82:69:fb:21:5e:b1:e8:8c:93:60:
                    d9:19:79:58:ee:ca:25:b7:09:5c:86:ac:94:4e:c4:
                    b5:50:d6:c7:77:e8:01:69:53:5d:ca:b9:ea:b7:61:
                    f1:d0:1e:31:6f:7d:5c:07:34:92:e9:bf:5e:21:67:
                    68:38:d4:68:ef:52:7b:b0:41:da:05:cd:cf:a8:f3:
                    54:55:ce:11:3f:c5:14:47:fc:f4:b4:d9:d8:ad:db:
                    9f:24:86:5d:dc:f5:23:c3:f5:b4:cb:89:8f:80:f6:
                    dc:07:54:6c:c9:ce:e6:ff:e3:d2:eb:48:d6:cc:cb:
                    fd:4d:a4:51:b0:2c:5d:9d:65:e1:82:38:db:bd:27:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5A:63:20:B8:D6:13:6D:EA:DB:F4:2C:E9:F2:D7:8C:BE:CF:56:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9c9bdb34-0577-3221-9f3c-057721ca61ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ca:46:b9:a5:25:e0:b0:11:0e:69:c1:de:61:86:48:c5:4b:
         5b:36:b3:17:c2:c8:54:96:62:96:41:ec:7a:77:0f:5c:71:d0:
         d5:f9:cc:fd:f6:0b:cc:31:8f:91:b4:d9:7d:29:3f:ac:dd:69:
         b4:4e:35:74:80:61:53:65:6a:b6:dd:e5:05:bc:ce:34:e0:e9:
         29:04:5a:57:7f:d7:9f:43:66:fa:a2:50:7a:92:47:fb:d9:0e:
         29:00:d8:2c:8d:94:b7:ea:77:80:ce:ed:5e:25:5a:55:96:6a:
         f5:da:c0:6a:7d:27:e1:23:a4:b3:15:96:54:74:9a:c0:fa:e8:
         d9:b9:a2:88:04:c3:7f:a2:c9:8d:48:99:4f:8f:8a:95:2b:e4:
         9b:46:46:be:04:81:15:95:e2:55:72:dc:a6:d3:67:7e:a1:86:
         eb:34:51:84:af:69:3c:26:02:58:6b:e4:08:49:c9:19:ed:88:
         d4:c1:72:1c:fb:7d:39:03:68:d2:b9:aa:fc:be:6e:dc:be:19:
         58:8f:ad:dc:69:03:c2:7f:a3:af:45:bc:c1:15:d1:93:76:2a:
         29:f0:39:a9:9f:c1:bb:f2:80:4f:89:16:56:7b:2c:c4:f3:cc:
         97:47:b7:cd:ef:fb:c8:96:74:5a:36:38:15:b1:d6:1b:91:33:
         34:52:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----