Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b070276b-2458-3829-974f-58f17eed80f9.roa
File:                     b070276b-2458-3829-974f-58f17eed80f9.roa (raw, json)
Hash identifier:          vkktZZ8nI7rJ2Db4hPMcYb8obr7Fy8UA10IBiPZ9hUU=
Subject key identifier:   8E:56:36:C7:0E:F5:32:D7:D9:C5:A4:D9:09:03:18:1E:0B:EC:C2:1D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B68DCEB0B0571483D7200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b070276b-2458-3829-974f-58f17eed80f9.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     36620
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:68:dc:eb:0b:05:71:48:3d:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=4be2adb2-ea2c-4589-bccf-cc44c95a9dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:b0:a9:71:bc:cf:e6:85:10:8a:f6:70:9e:
                    7f:70:f4:37:41:c1:66:61:a2:b8:1b:9f:9e:7f:67:
                    2c:52:90:29:b4:4d:aa:92:9e:de:d1:a1:9e:a8:c5:
                    78:61:44:86:c6:52:cc:e1:f9:ba:3b:80:82:ff:b0:
                    52:50:eb:cf:21:aa:c2:33:b0:c1:c9:f2:4c:34:93:
                    08:a8:79:02:19:55:59:13:aa:78:d3:67:13:c7:8d:
                    f5:a1:50:31:50:fe:0b:d0:c0:a6:ab:d6:94:53:2f:
                    1a:74:ea:5e:f1:2b:cf:54:cd:28:37:c7:aa:fb:59:
                    85:f0:f0:81:96:d9:9f:8e:5d:45:c3:d2:e8:b0:9d:
                    ea:2e:2f:a8:e3:78:14:f1:34:20:34:ab:76:32:89:
                    28:94:ad:9a:86:89:fc:df:39:cd:68:37:c4:02:7c:
                    d9:b6:33:89:ba:cc:77:12:08:1e:b1:7c:7c:0a:4b:
                    a3:f8:07:5a:f7:fc:92:92:a7:f6:1f:cb:e6:67:8b:
                    09:3f:90:d2:e7:2a:ad:bb:fe:9c:21:77:79:83:96:
                    cd:17:93:06:bb:84:16:42:ca:87:41:a6:0e:3f:70:
                    1c:60:20:a3:a2:c9:8a:b2:b8:ea:35:0b:9e:f0:60:
                    98:33:85:5f:9e:d3:6e:fc:c3:2f:b2:8c:3d:56:25:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:36:C7:0E:F5:32:D7:D9:C5:A4:D9:09:03:18:1E:0B:EC:C2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b070276b-2458-3829-974f-58f17eed80f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:05:68:2c:b1:4c:e2:c7:98:e2:a8:54:9e:52:eb:7b:b4:
         0f:1b:cb:ef:dd:0c:06:32:5b:03:19:0c:ce:26:e0:08:89:a1:
         b3:e9:98:d3:36:88:db:5e:62:ac:98:dd:35:82:06:11:38:7f:
         ea:15:18:ce:2b:73:de:5d:c5:5a:5c:34:8d:b0:ae:95:3b:fa:
         a6:7d:e5:c3:23:fe:9d:06:4e:d3:38:77:79:d1:42:42:4c:e7:
         91:d9:69:7a:ea:56:1f:3a:00:50:bd:0d:98:ba:e2:13:1c:ca:
         dd:10:4a:8f:38:68:8f:05:73:17:d2:86:21:4f:bb:ba:4d:29:
         89:95:9c:81:6b:ff:2e:62:27:7b:bc:49:e6:85:66:99:4e:46:
         04:64:71:df:9b:87:d1:9e:58:b1:15:3d:17:ba:6e:da:d5:15:
         43:88:0a:86:19:ac:dd:c5:18:66:3d:35:81:11:1b:28:ee:7d:
         22:c5:8e:25:8e:e8:3a:5a:ff:69:de:15:aa:53:5b:ea:20:d1:
         07:4d:8c:ca:b6:0d:4a:bc:3d:4d:b7:73:fa:5f:68:61:5c:5f:
         70:45:0f:b2:38:0e:8b:bc:39:85:4f:7c:84:5c:c0:1a:b5:41:
         21:3b:19:ca:51:44:89:34:e3:4b:f9:ca:1f:bf:06:6b:2b:46:
         f0:b3:a7:ea
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiWC2jc6wsFcUg9cgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
NGJlMmFkYjItZWEyYy00NTg5LWJjY2YtY2M0NGM5NWE5ZGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXywqXG8z+aFEIr2cJ5/cPQ3QcFmYaK4G5+e
f2csUpAptE2qkp7e0aGeqMV4YUSGxlLM4fm6O4CC/7BSUOvPIarCM7DByfJMNJMI
qHkCGVVZE6p402cTx431oVAxUP4L0MCmq9aUUy8adOpe8SvPVM0oN8eq+1mF8PCB
ltmfjl1Fw9LosJ3qLi+o43gU8TQgNKt2MokolK2ahon83znNaDfEAnzZtjOJusx3
EggesXx8Ckuj+Ada9/ySkqf2H8vmZ4sJP5DS5yqtu/6cIXd5g5bNF5MGu4QWQsqH
QaYOP3AcYCCjosmKsrjqNQue8GCYM4VfntNu/MMvsow9ViWyYQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI5WNscO9TLX2cWk2QkDGB4L7MIdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjA3MDI3NmItMjQ1OC0z
ODI5LTk3NGYtNThmMTdlZWQ4MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBu7wVoLLFM4seY4qhUnlLre7QPG8vv3QwGMlsD
GQzOJuAIiaGz6ZjTNojbXmKsmN01ggYROH/qFRjOK3PeXcVaXDSNsK6VO/qmfeXD
I/6dBk7TOHd50UJCTOeR2Wl66lYfOgBQvQ2YuuITHMrdEEqPOGiPBXMX0oYhT7u6
TSmJlZyBa/8uYid7vEnmhWaZTkYEZHHfm4fRnlixFT0Xum7a1RVDiAqGGazdxRhm
PTWBERso7n0ixY4ljug6Wv9p3hWqU1vqINEHTYzKtg1KvD1Nt3P6X2hhXF9wRQ+y
OA6LvDmFT3yEXMAatUEhOxnKUUSJNONL+cofvwZrK0bws6fq
-----END CERTIFICATE-----