Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb2f4a44-17a0-31f8-a785-e9049c015cbb.roa
File:                     fb2f4a44-17a0-31f8-a785-e9049c015cbb.roa (raw, json)
Hash identifier:          3vWXm3jdoapCl8LAyzF/a/7tGYq04ILVsxpHZIU88eY=
Subject key identifier:   A3:4D:A4:6C:61:F9:A4:39:92:08:F7:52:95:6C:24:02:ED:2F:89:4A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD9A7B246DD9A45282B80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb2f4a44-17a0-31f8-a785-e9049c015cbb.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396596
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d9:a7:b2:46:dd:9a:45:28:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=f493ee73-6fda-4743-945c-c0eec4bbe2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:80:93:3d:f9:f1:5b:a8:34:66:1c:70:95:
                    70:66:f0:7b:d9:ba:5d:05:97:ca:99:b9:fd:34:28:
                    65:79:ea:ee:d0:8c:8c:e9:97:71:f7:38:ee:e6:80:
                    6d:1a:1d:68:02:63:86:a8:ff:c9:f9:53:28:22:f5:
                    0b:1e:e3:f4:04:2a:60:94:24:3b:9a:20:2a:5f:37:
                    20:33:ba:78:08:c4:74:20:52:bc:8a:2d:95:a9:2b:
                    f3:99:8a:6e:cb:f7:54:e5:86:8f:14:26:c9:47:0b:
                    5b:81:d3:e2:82:1e:b4:ca:3c:ad:e4:ad:2b:d3:91:
                    b6:cb:c7:d8:2f:15:2c:e1:2c:33:dd:57:d0:d6:df:
                    16:e4:f9:5a:a6:16:e8:01:7f:36:6b:c9:31:44:dd:
                    8a:c9:fb:49:72:fd:30:44:e9:17:f7:f6:22:42:c0:
                    91:51:48:cc:63:39:a9:79:86:b8:0c:84:11:04:d2:
                    36:71:d6:48:1d:27:52:00:4c:bd:58:58:6d:7c:b5:
                    bc:6f:63:12:ab:d1:7e:b9:84:39:96:5b:e2:ab:1c:
                    f3:64:7a:03:23:f7:b3:9f:5e:1d:e0:cf:b0:0d:e1:
                    95:99:5f:2d:87:8a:fb:da:cf:ea:69:a6:17:74:12:
                    d1:24:a3:ac:82:97:b4:ba:0a:e4:de:0b:6c:e2:67:
                    9a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4D:A4:6C:61:F9:A4:39:92:08:F7:52:95:6C:24:02:ED:2F:89:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fb2f4a44-17a0-31f8-a785-e9049c015cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:84:a2:7e:8e:87:2a:10:c8:a5:15:34:90:27:9b:17:7c:64:
         af:e5:48:49:e6:75:0f:62:39:c0:f0:78:39:6d:ae:ff:1a:0d:
         5e:ea:d4:cc:dc:29:37:e2:32:12:29:05:ab:29:79:6a:dc:00:
         44:94:39:c9:66:03:04:aa:ba:0f:6c:8d:6f:1f:6e:c6:c3:9e:
         c8:21:da:9c:8a:64:a0:26:55:c5:fc:56:81:3b:0b:76:45:45:
         bb:2d:f2:b6:ab:3f:81:84:10:1c:ea:50:00:1c:76:ee:ce:46:
         0e:78:b2:c9:e3:2f:ea:d0:fd:e4:ba:34:86:0f:9a:9a:47:29:
         e3:97:8f:dc:d8:9b:7b:fa:4a:f2:07:36:f4:51:32:7c:c8:ab:
         a3:4d:c2:b5:fc:4b:df:89:18:b6:1d:a2:f7:f4:d6:7c:3a:0f:
         cc:7b:a4:72:8f:c0:8a:b8:6e:bc:26:48:d5:99:70:ec:bc:33:
         98:fe:e5:0c:fa:52:87:db:bf:85:bc:c5:2c:95:ba:92:18:1d:
         df:e8:f6:e7:9b:66:de:54:73:57:b0:25:de:d9:08:50:29:c0:
         fd:53:2a:03:3d:51:10:3b:90:81:ff:9f:c4:c2:c6:fd:6f:1a:
         5c:34:f4:6d:51:e4:44:7c:ee:dc:4d:e2:a6:e5:89:46:ff:83:
         42:99:06:56
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9mnskbdmkUoK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjQ5M2VlNzMtNmZkYS00NzQzLTk0NWMtYzBlZWM0YmJlMmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+aAkz358VuoNGYccJVwZvB72bpdBZfKmbn9
NChleeru0IyM6Zdx9zju5oBtGh1oAmOGqP/J+VMoIvULHuP0BCpglCQ7miAqXzcg
M7p4CMR0IFK8ii2VqSvzmYpuy/dU5YaPFCbJRwtbgdPigh60yjyt5K0r05G2y8fY
LxUs4Swz3VfQ1t8W5PlaphboAX82a8kxRN2KyftJcv0wROkX9/YiQsCRUUjMYzmp
eYa4DIQRBNI2cdZIHSdSAEy9WFhtfLW8b2MSq9F+uYQ5llviqxzzZHoDI/ezn14d
4M+wDeGVmV8th4r72s/qaaYXdBLRJKOsgpe0ugrk3gts4meaiwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKNNpGxh+aQ5kgj3UpVsJALtL4lKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmIyZjRhNDQtMTdhMC0z
MWY4LWE3ODUtZTkwNDljMDE1Y2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBThKJ+jocqEMilFTSQJ5sXfGSv5UhJ5nUPYjnA
8Hg5ba7/Gg1e6tTM3Ck34jISKQWrKXlq3ABElDnJZgMEqroPbI1vH27Gw57IIdqc
imSgJlXF/FaBOwt2RUW7LfK2qz+BhBAc6lAAHHbuzkYOeLLJ4y/q0P3kujSGD5qa
Rynjl4/c2Jt7+kryBzb0UTJ8yKujTcK1/EvfiRi2HaL39NZ8Og/Me6Ryj8CKuG68
JkjVmXDsvDOY/uUM+lKH27+FvMUslbqSGB3f6Pbnm2beVHNXsCXe2QhQKcD9UyoD
PVEQO5CB/5/Ewsb9bxpcNPRtUeREfO7cTeKm5YlG/4NCmQZW
-----END CERTIFICATE-----