Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa
File:                     0b6863c5-524e-3ada-b1f8-b23b96a42035.roa (raw, json)
Hash identifier:          WocSfvDrhbHuHGZ94bwW8/6IMQzHNH87aoO/wE9yNL0=
Subject key identifier:   BF:AB:CB:45:52:44:08:39:77:15:B6:71:4A:A0:BC:52:42:19:5E:93
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD3CCC79650A046A57E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     397200
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d3:cc:c7:96:50:a0:46:a5:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=517e5d62-0707-42c0-bb65-960252a609e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:51:b6:5d:4d:35:33:62:fb:3d:0f:31:01:b5:
                    48:5b:76:57:8d:63:d6:68:89:a4:b4:c8:3a:44:a1:
                    26:25:63:3e:c9:8d:6e:8c:84:8e:0d:a8:36:d7:bc:
                    3e:7d:c2:8f:d2:02:4d:c1:3f:73:db:ba:f0:8f:ba:
                    f0:b0:cf:07:bd:3e:32:5a:7f:c7:e8:ec:a1:e6:69:
                    fc:2d:fe:ff:e6:d7:17:ae:d4:63:bb:2e:1a:14:78:
                    3f:d1:c1:0b:ac:df:7b:11:b0:1f:de:ea:c3:22:76:
                    69:5c:4c:82:c4:a7:b7:b2:c6:da:55:00:1a:a1:c9:
                    27:0b:99:e8:ae:21:28:f8:fc:6f:25:1d:14:76:6f:
                    8e:b8:44:a7:4a:49:1f:cd:ff:54:b9:76:2a:fd:78:
                    b7:0f:85:53:16:c9:ae:a4:ce:1e:fe:2e:e2:95:f2:
                    bd:0c:ae:41:22:a9:00:1c:72:6d:c5:c0:72:67:b2:
                    f9:f3:61:c4:d3:a9:3f:12:b2:3e:13:a0:29:d4:59:
                    68:b4:ff:81:b7:63:69:0f:22:45:0a:51:d6:59:94:
                    9e:a7:b0:cf:72:51:36:06:27:97:a4:6d:91:3b:2e:
                    64:b9:e9:f1:0a:93:08:24:07:32:6d:3f:0f:cb:54:
                    6e:8b:74:7a:af:37:54:c2:d4:a6:ff:30:a5:87:4b:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:CB:45:52:44:08:39:77:15:B6:71:4A:A0:BC:52:42:19:5E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0b6863c5-524e-3ada-b1f8-b23b96a42035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1e:fd:c5:0a:9b:92:76:eb:02:89:be:02:06:6a:cb:db:ba:
         0e:73:36:89:30:56:40:7c:d7:81:db:e1:ea:51:db:db:b7:f4:
         80:36:50:47:1b:b5:4e:c3:90:09:21:3b:91:44:07:65:a5:bb:
         ac:12:15:76:98:e8:75:a5:b2:d9:1d:c9:cc:34:61:77:24:fb:
         28:4a:c0:c7:f1:8c:fb:f7:b9:28:47:62:33:16:93:a4:ac:c7:
         6c:2e:ff:3a:dd:20:43:00:b7:b7:87:a4:fe:5c:bf:24:f7:a1:
         95:7e:f8:0f:8a:ef:8f:33:e8:0a:3c:da:8f:fe:7a:e4:c9:84:
         53:c7:5a:e6:de:dc:d7:1d:72:7c:53:22:c2:b4:d7:2a:6c:c2:
         7f:3a:9f:1f:1a:91:1c:d5:df:a9:db:05:c8:28:4f:10:d2:47:
         b8:ad:86:55:bd:9f:ca:22:30:c1:30:c3:75:d3:85:52:5a:78:
         7a:d0:8e:f2:f1:9e:dd:ba:a6:5b:85:15:8a:41:65:6b:13:1d:
         b5:e4:f1:3f:46:43:1f:17:54:aa:5b:90:18:04:94:4b:72:7f:
         88:45:d4:f3:e7:93:65:43:13:e5:e2:7a:40:92:30:4c:3a:fa:
         1f:93:26:c2:3e:07:38:9e:d0:3d:d9:4c:46:9e:e3:51:b8:d8:
         28:2d:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----