Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8b2bbda-27d8-352c-bb4f-221b4e47fc94.roa
File:                     e8b2bbda-27d8-352c-bb4f-221b4e47fc94.roa (raw, json)
Hash identifier:          CBE4zNavMMR6ixBW6ZorHj6jnYnXshIUe82qHx9I/Sk=
Subject key identifier:   A0:CF:BB:7D:23:0F:64:71:0C:AE:2D:2F:6C:14:94:5B:28:2E:DA:0B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848F9268D1FDAC9A386B22BD180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8b2bbda-27d8-352c-bb4f-221b4e47fc94.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     397207
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8d:1f:da:c9:a3:86:b2:2b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=ab3e34c7-8afd-44a1-9072-0b9a58efb4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:13:b9:90:89:57:df:6d:44:aa:03:f1:77:
                    94:6e:c5:67:dd:25:9c:8f:75:83:9d:74:5a:fe:a5:
                    1e:1a:52:06:e3:7a:53:2c:07:02:ba:94:64:f2:7f:
                    7c:aa:ae:c9:a2:73:4b:3b:79:f9:c7:e9:b8:18:e4:
                    cd:82:ce:e4:b8:6c:af:16:ed:89:52:0a:37:74:02:
                    d7:82:22:95:0e:e0:e7:5c:4f:d0:c0:da:54:24:55:
                    0d:29:f3:dc:88:ba:17:cf:b8:e5:54:22:5f:d0:88:
                    04:51:59:61:c5:e7:6c:98:70:83:20:35:5e:e4:80:
                    18:67:4c:47:fe:b4:af:5d:b2:f0:bc:25:e6:78:e1:
                    c4:c7:04:49:68:32:31:b1:22:30:fb:62:a3:88:3a:
                    e4:25:54:66:3e:8a:13:58:8c:19:ca:b7:4e:3c:e3:
                    5b:e9:16:d5:04:c6:88:3d:92:7b:22:88:ae:e4:ef:
                    74:e0:fa:56:2a:7f:02:9d:ad:72:62:19:51:e0:5d:
                    21:40:e1:a9:ee:87:5e:85:90:dc:6c:91:df:64:3f:
                    d0:28:c0:f2:4d:97:2e:c1:3d:85:53:09:da:99:e8:
                    71:f8:aa:19:ad:2a:11:97:96:35:ae:78:43:77:29:
                    6c:c0:20:de:3e:e4:1f:a2:cf:b6:da:54:ac:a6:d1:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:BB:7D:23:0F:64:71:0C:AE:2D:2F:6C:14:94:5B:28:2E:DA:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e8b2bbda-27d8-352c-bb4f-221b4e47fc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:0e:0f:69:b1:3d:11:80:c9:15:ea:6e:a0:fa:b2:10:5e:bf:
         b2:f2:d3:06:31:d4:24:95:5a:e0:14:3f:08:57:81:a0:0a:21:
         dd:44:21:e4:a9:e1:bb:66:13:8d:a1:06:7d:ec:a6:2d:74:42:
         fd:f5:cf:70:ef:94:27:ce:d8:7a:d9:f8:47:f6:ed:ea:88:33:
         c4:77:2d:42:55:f2:31:62:10:00:b8:83:24:62:7e:63:c1:90:
         3b:88:a4:c0:62:f4:9c:82:e5:6d:9f:6f:a5:8d:bb:5c:d5:23:
         9c:06:84:93:be:6c:e0:4f:9e:2d:c4:b6:f7:33:44:21:21:5a:
         db:5a:80:41:f5:5a:a2:22:24:9a:c9:86:aa:80:a2:62:5e:c0:
         45:23:36:a3:97:7b:5b:d0:7d:4c:4f:4d:56:a2:93:52:89:1a:
         bc:8c:3d:a2:88:1f:5e:62:82:47:96:5b:df:01:9b:fa:2f:42:
         f2:09:62:2b:bc:9e:11:95:87:a9:73:d9:fd:c8:51:ea:4d:42:
         75:0a:74:c8:19:49:c9:c1:33:a1:33:e9:f4:fd:45:46:10:9c:
         6e:6a:d8:69:68:1e:3d:0f:76:3c:6d:45:02:8e:ff:10:88:0a:
         f3:7f:f7:46:f2:4a:82:72:d9:19:46:66:08:57:d3:95:e6:d1:
         07:e3:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----