Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5db700c-000d-311d-89aa-06f8715458bd.roa
File:                     c5db700c-000d-311d-89aa-06f8715458bd.roa (raw, json)
Hash identifier:          g5NKuseMVb5swE5+gh5/6U2RcD2W2sfcyl1TdCxh80M=
Subject key identifier:   79:62:46:39:3E:21:B8:97:C6:95:06:24:C8:B3:C7:A9:4C:BA:A5:C1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D2110D286E44692CE76F0B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5db700c-000d-311d-89aa-06f8715458bd.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     397196
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:0d:28:6e:44:69:2c:e7:6f:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=b6abb753-38b8-45b1-92d7-c3c4449c6172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:08:f7:2c:13:d8:8d:2f:3f:b1:dc:62:d2:91:
                    1e:c1:a7:a4:67:32:87:66:e3:96:45:cb:74:b7:4b:
                    ad:69:f3:cd:df:30:65:9f:0d:dd:44:1a:aa:c6:d5:
                    7b:46:85:3e:00:67:68:0a:6c:b4:e1:c5:f0:ea:27:
                    37:e6:0d:e2:6e:ab:f6:b0:b9:38:be:62:ba:cb:5d:
                    02:70:62:91:52:86:7f:a6:d9:58:cf:dd:cf:9b:ea:
                    ce:e8:f2:9a:33:f6:d4:29:4f:0e:a2:6c:b4:e6:59:
                    9b:ae:bc:14:7d:ab:63:a3:8c:c8:9c:9a:8c:45:aa:
                    db:a0:42:98:ef:2e:f3:14:ef:f9:3e:cb:71:45:6c:
                    56:3d:9a:e0:ba:fd:d6:49:a8:a1:39:24:bc:6c:c1:
                    8a:09:cd:19:d1:1e:61:c9:6d:27:d5:b1:3f:46:03:
                    88:62:81:42:86:6d:31:7a:79:be:30:c3:b9:f5:b2:
                    83:e5:51:30:5e:22:50:45:35:c8:82:b3:ad:9a:a0:
                    5a:0b:f7:e1:9e:a7:28:28:c3:6a:bc:6b:24:1a:0a:
                    1f:34:df:a7:3f:66:be:a2:c3:fb:d7:8c:5a:75:3d:
                    7d:1c:aa:21:80:ec:8a:e0:b8:fd:cd:7c:2e:85:61:
                    ca:67:28:36:d5:83:25:38:7f:85:95:75:bf:00:9f:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:46:39:3E:21:B8:97:C6:95:06:24:C8:B3:C7:A9:4C:BA:A5:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c5db700c-000d-311d-89aa-06f8715458bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1e:fc:e9:93:40:90:e9:6d:5f:d6:41:4d:e4:3d:59:94:7b:
         f9:0d:89:39:3d:69:e3:54:fd:7e:f1:62:0b:c7:d3:62:fe:ea:
         5c:8f:f1:c6:26:bd:bb:c6:33:8c:b5:f0:0a:a4:0b:02:59:9c:
         08:25:95:2d:09:9d:d4:95:19:76:33:2c:3e:60:60:b9:ba:69:
         a9:16:a6:74:54:92:e2:df:ac:20:a8:8c:fb:8b:83:59:9b:c0:
         33:11:b5:ca:73:2e:f7:c7:28:de:3f:4d:b7:6d:45:4d:ba:08:
         68:ad:9a:fe:b8:1c:f5:b8:60:df:bb:51:67:08:0e:65:f4:1d:
         b2:b5:b4:f0:21:d4:7f:aa:df:45:7e:8a:d1:00:80:b4:8e:dd:
         e2:88:ea:81:09:80:78:e9:11:76:28:98:e8:01:59:b0:a9:94:
         10:bc:9b:c5:e7:e6:56:3b:aa:1d:f2:00:5c:33:fe:d9:8f:94:
         2b:ed:c9:68:34:1d:46:60:c4:99:1b:67:cd:b5:ff:91:be:f9:
         b9:5f:6f:24:7f:12:39:a5:0d:a6:4e:ea:67:9f:79:41:6a:af:
         13:1e:5a:57:4b:91:5e:bb:ea:2f:de:b9:3e:c4:1c:84:5f:1d:
         84:43:50:7f:d4:89:f1:df:64:ef:f9:ba:05:6c:6a:e4:86:16:
         80:d3:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----