Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0dc76ad9-dfb2-3d59-a397-75fdaed7d465.roa
File:                     0dc76ad9-dfb2-3d59-a397-75fdaed7d465.roa (raw, json)
Hash identifier:          nnyaGWB7nD6GEXFw6QC+bIB5tqEZxpJL7V4lEdsgfIE=
Subject key identifier:   E2:87:EE:EE:CB:AE:21:33:B1:27:FF:D2:80:CD:A6:E1:E7:F6:88:B2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858488280A5756BE56C2D5630F180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0dc76ad9-dfb2-3d59-a397-75fdaed7d465.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     397211
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:a5:75:6b:e5:6c:2d:56:30:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=615cf5e5-c357-42b9-9122-c2e34207f00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2c:78:47:4c:33:17:c2:f8:c3:7b:e9:9f:55:
                    1a:d0:2e:3b:09:a1:c2:be:af:e7:e8:48:8e:ee:cb:
                    87:39:6f:fe:7a:6a:3d:e8:af:95:31:3e:25:35:83:
                    52:7f:30:ea:d9:68:42:74:15:79:da:a5:67:a6:a5:
                    59:6c:79:03:99:fd:7b:11:2d:43:a8:d2:a1:f0:a0:
                    d0:b7:a9:ff:7a:3a:89:e4:61:5f:73:34:7a:cf:b1:
                    40:d6:40:32:6d:8b:28:39:20:32:72:4b:c9:62:f1:
                    6d:ff:f6:45:59:10:b0:40:f2:ea:cc:5b:8a:7c:75:
                    30:b7:b7:03:8e:69:c3:f6:d8:40:02:c6:46:b8:52:
                    63:6c:01:53:82:8b:07:29:f3:f8:da:f7:3f:2f:f1:
                    ca:9a:5b:9c:ae:4e:f2:af:c2:09:ae:00:d0:0d:9b:
                    86:f9:95:dc:50:2a:db:0b:85:78:79:07:ef:62:f3:
                    9d:2e:96:03:f9:6b:47:bd:6f:1e:4d:fd:6d:a4:5f:
                    c9:9a:a8:86:3e:e7:c3:ab:98:3e:26:e1:9b:e8:78:
                    57:a7:a6:33:10:2e:cc:a5:90:74:cd:dd:60:b7:99:
                    ca:5f:31:77:6b:16:b3:00:69:06:76:77:af:f6:73:
                    64:17:24:61:2a:75:78:35:e6:d2:45:8d:81:d9:46:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:EE:EE:CB:AE:21:33:B1:27:FF:D2:80:CD:A6:E1:E7:F6:88:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0dc76ad9-dfb2-3d59-a397-75fdaed7d465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:36:ac:b9:29:8e:cb:c0:05:87:dc:76:81:75:3d:7c:8f:
         72:55:75:63:44:d6:25:00:fb:cb:10:64:da:0e:bc:bb:5f:f4:
         e3:d1:91:eb:bf:53:48:b7:ac:66:9e:24:30:67:6d:9b:cb:0b:
         00:9d:27:82:eb:5c:4c:30:6d:10:08:30:cc:66:7e:8d:96:dd:
         ee:f6:29:92:25:ba:d5:86:46:e4:fc:78:2a:77:59:ec:90:89:
         a7:1c:56:24:53:a4:3d:30:c7:0e:79:fb:fd:05:c4:74:e3:90:
         75:c3:85:b8:36:ce:df:6d:85:18:0a:07:c5:70:d5:30:41:e8:
         53:63:e3:2f:54:ce:35:fd:3d:6f:25:9f:31:c7:86:4c:90:49:
         d8:f0:32:2f:ba:f7:15:99:9a:7b:2a:aa:17:3c:ec:ad:a2:3d:
         b3:b7:c2:bb:15:a9:0f:69:df:7a:80:16:3c:d9:ef:a2:14:0d:
         0a:74:92:ff:2f:64:b9:66:86:3d:80:b6:11:1c:48:ad:33:25:
         74:1c:92:8e:06:32:48:62:ce:12:78:c6:4a:87:16:b5:33:6d:
         a6:60:17:f3:1a:e2:9c:12:73:fb:35:b2:a3:4a:fb:75:06:21:
         83:ce:75:a0:93:da:d4:19:1b:87:93:3e:88:06:f2:08:2c:52:
         41:7a:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----