Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19f747e8-b96d-39d6-92b9-93990d87db23.roa
File:                     19f747e8-b96d-39d6-92b9-93990d87db23.roa (raw, json)
Hash identifier:          E3Jk4xZNItq6qJva0u+YETogm044sm0pCWzyTKKxaVw=
Subject key identifier:   C5:89:4A:FC:0C:6E:57:82:55:5A:49:3F:C0:EF:F0:F9:C9:14:00:E2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F1551A64C607E4DA287AAD40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19f747e8-b96d-39d6-92b9-93990d87db23.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     396600
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:1a:64:c6:07:e4:da:28:7a:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=fc56061e-a102-4dfd-94eb-96477275027e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:27:e8:05:2f:ab:c4:9d:27:2b:cf:e8:2a:
                    f2:81:95:d4:12:17:b9:92:ad:db:f4:fb:ae:7f:48:
                    a6:26:65:55:1a:8c:99:a6:74:d5:c2:15:1c:e6:32:
                    4d:ce:23:3d:e1:37:24:c2:59:53:08:cd:f3:b7:ab:
                    86:56:eb:30:80:18:b7:75:c1:bb:a6:bb:d7:bc:44:
                    93:e5:fd:ff:7b:13:d0:36:3f:69:fd:9f:8e:bc:ab:
                    11:fa:15:d8:4e:b8:08:b4:4a:e9:84:f5:38:3f:4d:
                    4f:84:90:d1:63:a4:06:04:da:d7:f1:33:fb:a7:28:
                    5b:a0:f2:ce:2f:a1:ff:08:ab:0f:45:88:07:b4:29:
                    af:c5:ed:09:ad:ce:a4:e6:ac:3a:c9:41:fa:ee:87:
                    02:99:b9:89:38:c7:98:ea:ff:97:57:00:0e:37:ef:
                    d8:0e:31:f6:56:c2:0e:a4:71:eb:26:38:50:41:b2:
                    60:53:93:d2:a9:7c:2a:4a:56:ca:3f:c5:9c:56:c9:
                    c3:17:97:2b:40:c7:d5:62:5c:40:82:da:78:3f:6b:
                    d8:98:ce:c4:f0:6b:2c:49:91:b8:b9:6f:6f:c2:49:
                    f9:2a:a5:25:59:71:76:0f:37:9a:59:87:f7:79:95:
                    a4:69:07:d0:fe:65:4b:3e:76:5f:57:f2:a7:ee:b6:
                    2b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:89:4A:FC:0C:6E:57:82:55:5A:49:3F:C0:EF:F0:F9:C9:14:00:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19f747e8-b96d-39d6-92b9-93990d87db23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:03:af:d8:5c:f5:3e:94:86:0f:a0:40:cd:43:83:0e:5c:c8:
         20:4e:3a:1b:7c:37:2d:9e:68:3c:4d:4f:b8:ca:f1:10:95:94:
         7c:f2:ed:42:ee:a7:81:dc:27:b3:65:64:2e:86:c4:09:4a:ea:
         84:29:48:43:87:a5:39:50:e3:58:e4:6c:a8:aa:9b:83:f0:57:
         f2:f6:d1:cc:a4:42:06:20:f2:e7:26:60:0a:3e:32:7d:d3:4a:
         f2:f3:bd:e5:cf:75:26:f9:8d:99:4e:ad:f1:b8:90:69:40:77:
         a6:5f:dd:8a:63:e0:7e:58:09:81:d0:19:f2:51:04:c5:cb:b9:
         6d:fb:01:39:d6:8e:e1:13:75:8f:86:7e:3a:a3:9f:76:10:f1:
         6b:3f:4f:c9:d9:bb:60:91:dd:26:54:85:a4:3d:ac:4e:a2:06:
         56:28:73:a3:a3:52:f3:22:79:b7:a8:49:eb:a8:f3:22:72:e1:
         39:ae:f4:f4:72:d7:a0:d0:83:86:e1:73:ab:94:bb:a8:47:74:
         e3:ba:20:82:f5:7f:16:09:95:4d:5c:53:56:84:6b:38:88:35:
         cd:16:ce:c4:8e:fe:5d:9e:27:02:64:b4:36:f9:3f:70:61:4f:
         11:18:92:70:d7:34:3d:1a:d1:2f:32:4f:27:44:af:2c:56:44:
         8e:ba:78:df
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVRpkxgfk2ih6rUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
ZmM1NjA2MWUtYTEwMi00ZGZkLTk0ZWItOTY0NzcyNzUwMjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzIn6AUvq8SdJyvP6CrygZXUEhe5kq3b9Puu
f0imJmVVGoyZpnTVwhUc5jJNziM94TckwllTCM3zt6uGVuswgBi3dcG7prvXvEST
5f3/exPQNj9p/Z+OvKsR+hXYTrgItErphPU4P01PhJDRY6QGBNrX8TP7pyhboPLO
L6H/CKsPRYgHtCmvxe0Jrc6k5qw6yUH67ocCmbmJOMeY6v+XVwAON+/YDjH2VsIO
pHHrJjhQQbJgU5PSqXwqSlbKP8WcVsnDF5crQMfVYlxAgtp4P2vYmM7E8GssSZG4
uW9vwkn5KqUlWXF2DzeaWYf3eZWkaQfQ/mVLPnZfV/Kn7rYrsQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMWJSvwMbleCVVpJP8Dv8PnJFADiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTlmNzQ3ZTgtYjk2ZC0z
OWQ2LTkyYjktOTM5OTBkODdkYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCKA6/YXPU+lIYPoEDNQ4MOXMggTjobfDctnmg8
TU+4yvEQlZR88u1C7qeB3CezZWQuhsQJSuqEKUhDh6U5UONY5GyoqpuD8Ffy9tHM
pEIGIPLnJmAKPjJ900ry873lz3Um+Y2ZTq3xuJBpQHemX92KY+B+WAmB0BnyUQTF
y7lt+wE51o7hE3WPhn46o592EPFrP0/J2btgkd0mVIWkPaxOogZWKHOjo1LzInm3
qEnrqPMicuE5rvT0cteg0IOG4XOrlLuoR3TjuiCC9X8WCZVNXFNWhGs4iDXNFs7E
jv5dnicCZLQ2+T9wYU8RGJJw1zQ9GtEvMk8nRK8sVkSOunjf
-----END CERTIFICATE-----