Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa
File:                     002ab075-89b5-3972-9a0c-7bf53d237fc2.roa (raw, json)
Hash identifier:          n1Smx8MBuXlpSSBbF15bMynaDyhU1ykwSgPaDzDddwQ=
Subject key identifier:   0A:01:25:FA:20:DA:1E:BA:B6:FF:68:77:BE:B0:6F:9D:17:6E:72:18
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806450E69F06DF226BA4050C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396542
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:0e:69:f0:6d:f2:26:ba:40:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=d0a106bf-45da-449c-a6fc-3416f00c57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:1e:5c:d4:9e:cf:8f:70:b5:7b:5d:76:05:
                    a8:d1:b0:87:49:92:56:06:5f:df:fd:ea:41:33:a4:
                    9f:07:58:61:94:31:d0:20:b1:6b:f3:5f:a0:60:31:
                    4c:ef:e0:72:e9:05:b8:b9:82:83:aa:ad:c5:c8:1a:
                    c6:62:d9:cf:65:7b:b3:52:34:c5:1c:a5:1f:21:76:
                    03:c8:64:b3:42:24:88:e7:94:7a:f8:74:ce:7f:18:
                    97:a0:e2:9d:02:a2:b2:2d:2c:e8:47:58:ca:0a:35:
                    be:0f:7d:7b:7b:42:d2:bf:cd:00:3f:36:14:74:15:
                    1b:b0:84:1e:a3:8d:3d:5c:76:55:86:45:8e:71:c3:
                    c2:c0:11:31:9b:29:84:98:35:d7:ce:95:58:2b:87:
                    54:47:8d:79:4c:29:8b:1a:14:ce:b4:f8:83:83:86:
                    2e:b2:bf:14:52:27:56:90:c8:11:9a:67:3e:f8:41:
                    8b:cd:a1:91:5e:8d:c4:38:d2:17:3d:4b:5f:e9:9f:
                    24:2b:59:ad:ff:a0:3a:8d:17:21:99:66:cc:47:b6:
                    9e:8e:b5:03:77:b8:36:e1:06:28:ad:6e:fa:91:fe:
                    60:fc:e7:ea:f3:be:f3:14:e3:32:d6:4b:9f:d3:94:
                    6e:63:2f:c1:bf:ea:ce:b7:52:81:a7:97:ef:34:71:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:01:25:FA:20:DA:1E:BA:B6:FF:68:77:BE:B0:6F:9D:17:6E:72:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/002ab075-89b5-3972-9a0c-7bf53d237fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d1:77:f6:97:70:13:54:a5:5f:81:dd:3b:10:fc:79:f4:80:
         be:05:95:f0:26:fb:0f:54:c9:93:b8:fa:97:f6:82:a2:d0:d6:
         af:a1:c0:0c:b9:d7:83:70:b1:7f:07:ac:6b:cb:48:10:db:2c:
         94:e5:aa:ee:db:33:c0:9a:12:be:7c:97:37:1d:a6:00:7b:54:
         36:ef:d5:86:e4:4e:ba:23:c7:95:ce:05:0d:5e:92:71:b3:9a:
         fe:69:4b:9b:10:e3:fe:c2:8a:8f:84:63:8a:58:de:94:31:3e:
         f4:cf:2e:67:6f:06:04:58:db:d0:f6:5c:6e:42:31:59:64:9e:
         5b:17:28:3c:a5:1b:c8:dc:25:ef:06:b2:96:98:19:56:e6:39:
         a9:36:14:39:d7:88:86:a6:df:cf:69:8c:69:9e:ba:6f:b3:df:
         b6:43:fc:2d:c1:bc:dc:ef:9b:c7:75:70:f8:d9:4f:0a:2b:52:
         bf:26:56:f2:f9:31:5b:38:b2:4d:51:96:93:ce:2e:91:43:a9:
         da:ce:bd:18:92:b7:62:b9:30:6e:29:53:e6:ca:9e:01:87:e9:
         a6:72:0d:a6:90:09:ae:02:96:1c:d7:ba:fd:62:3f:d1:e9:07:
         27:bc:86:fa:a1:bd:bb:13:cd:39:5e:2e:4c:7d:ca:05:47:0d:
         70:23:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----