Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db0434a4-465c-345e-90f2-920c3ff4cde9.roa
File:                     db0434a4-465c-345e-90f2-920c3ff4cde9.roa (raw, json)
Hash identifier:          cvFO8HL5dbnMguFhlpmSqYEEULpIQj/bkVx9MT43F1M=
Subject key identifier:   5D:0A:E6:18:6A:5A:66:17:67:1C:2B:86:BE:23:0B:F1:35:FC:62:47
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BDFA7745E4C575822CEE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db0434a4-465c-345e-90f2-920c3ff4cde9.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396569
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:df:a7:74:5e:4c:57:58:22:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=44368856-c5e6-4ce5-8b0e-a452fcdf4950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:35:ce:a7:52:71:97:ad:86:6a:a2:2d:40:ed:
                    24:37:5a:d0:12:df:3b:87:d8:4a:e8:75:7e:da:46:
                    c9:04:58:76:0c:a4:a3:7e:9a:a7:40:97:2d:a0:f8:
                    f9:69:fa:5a:f5:a5:0a:c2:0f:68:46:5f:a5:68:b2:
                    bd:be:d3:11:05:07:ba:e2:13:60:ce:32:ea:d1:65:
                    ad:dc:28:da:40:ab:b1:9e:1d:83:e5:1a:53:1f:eb:
                    df:f4:06:93:c5:13:70:27:57:d1:96:ad:dd:c5:f9:
                    09:8e:fb:3c:c6:09:7a:ae:62:81:b3:2b:58:f1:2d:
                    c4:8f:57:49:60:8c:49:a6:92:29:ac:16:77:5d:81:
                    2b:73:c7:0f:fb:9b:19:8e:4d:bb:0d:59:00:cd:ab:
                    21:c0:b3:81:4a:cb:aa:d1:f2:dc:28:d8:48:f9:0c:
                    d6:3c:b9:cf:5f:5a:44:c7:01:2e:d1:23:38:da:ed:
                    1e:2f:eb:68:84:fb:92:d6:92:fc:14:51:ad:b2:33:
                    49:c9:07:17:a6:5e:10:71:4f:05:25:13:18:e1:41:
                    9c:62:d2:b6:e3:41:e9:7d:e9:ae:c8:6c:b4:75:1c:
                    09:10:47:d1:66:5b:d3:d4:ef:42:17:46:15:f3:37:
                    50:d8:99:56:f9:3c:ff:38:ab:04:e0:e5:83:7a:b5:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0A:E6:18:6A:5A:66:17:67:1C:2B:86:BE:23:0B:F1:35:FC:62:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db0434a4-465c-345e-90f2-920c3ff4cde9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:69:21:c4:da:35:06:b0:c0:9b:1e:b2:88:f7:ae:dc:95:15:
         80:b8:33:22:f6:ab:58:46:16:2e:d7:30:0b:99:9b:37:b7:30:
         a0:cd:76:3e:53:1f:93:e9:fc:b7:7b:cc:a2:01:a3:e2:58:5f:
         f1:fd:9d:b2:bb:dc:24:19:2a:fc:f6:7b:47:35:f3:a1:65:df:
         a2:2c:d7:8a:cb:36:bb:dc:ef:0c:bc:fb:d0:41:96:f3:99:7b:
         d2:63:ae:29:32:97:50:d7:9e:63:66:96:92:e3:cf:8a:c4:a0:
         63:73:b0:28:e6:df:c3:3d:9e:71:5b:32:4b:98:00:b7:b0:1b:
         0b:c7:05:a4:b8:0c:af:54:52:a4:2b:4d:4b:95:b9:00:30:6c:
         4e:65:48:25:62:37:d0:3b:a6:f5:b2:ee:dc:66:ae:06:bb:94:
         b0:80:b7:5f:84:e1:5f:dd:0a:38:27:2e:3c:b9:0c:8d:48:cd:
         4a:5d:e3:ee:2b:16:3a:8d:ea:db:03:6d:a5:c2:f3:7f:9a:fb:
         ea:06:53:98:7e:29:f4:08:87:08:c4:75:3e:23:72:dc:81:84:
         df:dc:f0:fe:1f:a7:ac:a3:a6:3d:b7:bc:39:82:fd:0c:f8:03:
         72:c5:b4:2f:7a:dc:61:19:f9:e8:cf:c1:6d:fb:4d:a8:1f:1e:
         d8:4b:93:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----