Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa
File:                     005da65d-6cff-3e56-8b54-a46847b3c730.roa (raw, json)
Hash identifier:          UjAvHxn8sPjAASgME3z9j5hLGe6BI9Zt7awlP8uBfcg=
Subject key identifier:   F8:4A:D6:D7:00:F2:DE:3E:CE:4B:7E:85:75:EF:4E:23:0C:D1:00:DD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F155201F29E1B3908C1219C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     397194
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:20:1f:29:e1:b3:90:8c:12:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=697e55b8-1211-4e43-b4a4-490a5a2d1fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:8e:74:8d:4c:c2:6d:75:9d:52:fc:5d:ce:
                    2f:18:72:c1:1b:e4:8f:a3:b2:43:29:9e:0f:86:55:
                    1d:e3:ee:fe:fa:b9:01:31:88:cd:48:88:b1:e8:87:
                    06:29:ef:b4:7e:52:b9:a4:ba:83:83:05:c9:8d:48:
                    02:23:4b:f1:f0:60:90:90:a6:73:ea:94:2d:8d:6f:
                    a8:ef:fc:8e:62:fa:42:d0:74:08:6b:3f:a9:ae:4c:
                    93:4a:22:7d:01:20:d1:eb:57:80:48:c2:ac:5c:ca:
                    9f:68:5d:a3:1d:f3:17:83:de:1e:4d:42:b7:0c:b4:
                    19:64:ff:61:b3:4e:f5:f2:cc:b0:42:38:41:94:61:
                    ce:88:09:10:79:ad:05:7f:93:98:14:1c:b3:6a:04:
                    ca:57:d8:a0:78:76:e0:b5:38:30:9e:4f:4b:13:ef:
                    d3:f2:ea:d6:76:4d:a2:e8:2b:b3:74:c7:15:82:3e:
                    29:06:b8:c7:7c:2d:38:98:fb:1a:fd:25:39:18:f5:
                    de:0a:81:ea:0d:4a:b6:ef:b0:4c:31:17:98:5b:6b:
                    d6:5a:bd:35:1a:c6:97:30:c4:ff:dc:38:40:97:06:
                    34:72:6b:89:c8:44:a9:be:b8:eb:74:30:41:3e:db:
                    65:22:9c:0b:35:d5:9e:23:7b:aa:9d:15:c1:8c:43:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4A:D6:D7:00:F2:DE:3E:CE:4B:7E:85:75:EF:4E:23:0C:D1:00:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/005da65d-6cff-3e56-8b54-a46847b3c730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b9:1a:39:3a:bf:10:49:1a:17:1d:b3:1a:34:c8:c7:70:6f:
         96:d5:43:9e:5b:0e:9a:1e:c4:47:17:21:ca:8f:3c:c5:62:da:
         a8:2f:60:06:87:fd:b5:ff:dd:9b:18:8b:32:bf:53:96:93:19:
         d7:84:27:cf:d7:9c:84:87:ad:f8:15:f4:eb:f9:ed:84:0c:fd:
         9a:30:37:19:3b:24:90:c6:b2:68:75:af:ba:f3:5f:2e:3f:0d:
         da:ed:ce:20:2a:2d:c2:69:d8:12:54:c8:fc:96:f6:16:4f:13:
         61:c7:38:5a:c6:a4:0e:6c:3d:df:12:58:03:b4:48:33:f3:6c:
         2a:23:3d:cc:a5:92:b7:7d:a9:45:9a:18:b2:7a:27:55:6b:55:
         dc:b1:cd:02:0d:34:57:77:e6:ba:6e:9a:65:42:a5:fc:90:5e:
         f7:09:97:20:f7:72:79:3b:8a:10:50:5e:ba:14:c7:ca:d3:68:
         18:b2:e9:a5:a2:93:cb:4b:1b:7a:83:fc:76:a3:13:cf:78:56:
         47:f4:b6:67:26:74:2d:b5:d6:f0:fa:c4:83:fb:d1:88:9f:1d:
         e1:c8:e6:c6:d1:ff:db:fc:82:d8:83:2f:d3:a6:27:23:5f:10:
         8f:40:67:6b:05:b8:b4:7e:b5:13:e1:04:78:92:2b:c3:0f:9e:
         bc:41:ed:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----