Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa
File:                     1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa (raw, json)
Hash identifier:          TNsnMMhtmqmm14iWoLzMeXYpaUs2DGky9Xwiq0KGPlc=
Subject key identifier:   63:6D:4C:E0:D5:91:2F:BC:AC:A2:58:77:2A:AC:22:6F:1C:5B:94:FA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B66B9627C2D7B697A9600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     36631
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:66:b9:62:7c:2d:7b:69:7a:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=ba9f7f5f-3583-4d83-a770-97f27bd3536f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:8e:10:af:e3:48:a0:00:c4:c5:85:11:f3:
                    2e:17:4c:17:75:73:80:00:f8:b5:dc:08:b5:2b:c6:
                    80:12:3a:cd:81:2e:b9:f4:6c:1c:19:82:7a:9a:15:
                    99:de:d8:ac:6e:29:4d:d7:7c:f5:d7:8f:73:52:a6:
                    ed:82:5c:69:bd:01:9d:62:42:53:b0:f4:c5:53:49:
                    d1:c7:23:67:7c:a5:c2:d5:3c:13:43:12:e8:ac:95:
                    d7:d7:ea:af:74:3a:dc:e0:d8:15:13:5d:88:22:c7:
                    74:07:fc:52:40:cd:9a:68:94:d7:bf:c5:73:56:38:
                    6f:60:5c:e6:f8:e5:e3:41:cb:e0:15:18:b6:b8:28:
                    89:68:0f:61:9a:89:f1:73:cd:34:94:e8:ab:72:80:
                    6f:0e:35:55:3a:3d:fe:45:12:78:fb:f5:e8:f5:77:
                    00:e8:f6:99:ff:44:f4:9b:4b:db:4a:06:89:a5:23:
                    65:61:fd:e2:98:c6:bf:7b:81:93:66:dc:34:2f:da:
                    75:0b:3a:c1:f9:98:c5:7f:fe:58:4f:64:72:94:ba:
                    14:cb:ee:50:e4:9e:36:21:8f:b0:2b:d7:a3:3e:e3:
                    2a:47:4c:50:7f:ee:74:c8:37:c4:09:a2:7e:40:41:
                    cc:3e:ef:52:d4:c5:0e:e7:84:65:c0:20:5b:6b:c5:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6D:4C:E0:D5:91:2F:BC:AC:A2:58:77:2A:AC:22:6F:1C:5B:94:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ff1de01-aea8-3a39-9176-4d224ef8bf6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:23:f6:49:ad:ad:03:63:36:24:29:2d:48:d3:59:7e:9d:8f:
         05:d9:e8:b7:a2:a7:16:19:6f:53:76:06:c7:54:94:98:df:27:
         b9:b3:94:24:98:84:af:8c:54:1f:e1:df:d2:75:93:bf:8d:a6:
         f5:2d:54:eb:98:10:ed:77:f6:b4:4b:e4:a9:dc:d2:e5:aa:e0:
         70:6b:f3:51:4a:8d:08:5d:9f:5a:1a:2e:ff:50:d7:c8:6a:2b:
         31:19:83:9f:28:78:66:30:5c:41:e1:3c:6a:12:17:fd:91:b6:
         97:cd:75:c7:38:0f:16:9b:5c:c5:07:71:11:34:73:6d:56:ee:
         2a:5f:b8:7b:ca:b6:55:66:a8:ee:bb:39:94:15:c1:e2:09:95:
         b6:d8:15:41:bf:fe:bc:f8:35:8b:74:cf:e8:52:a6:76:b8:bb:
         52:81:33:27:75:7c:f3:fd:4d:13:a1:b2:3b:eb:8a:20:e0:e1:
         bc:5b:a5:aa:25:77:0c:2f:0d:60:c0:5c:77:e3:86:fb:60:1b:
         19:6f:41:67:04:3a:fb:9b:49:df:58:90:1f:f4:3a:ff:a3:d5:
         aa:2f:1a:9c:83:34:f9:6a:e6:48:d1:1a:ad:b5:50:71:76:93:
         c6:59:0d:69:5f:cb:80:e8:29:9c:4b:cb:35:2c:cc:e8:8f:74:
         3d:54:17:62
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiWC2a5Ynwte2l6lgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
YmE5ZjdmNWYtMzU4My00ZDgzLWE3NzAtOTdmMjdiZDM1MzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwauOEK/jSKAAxMWFEfMuF0wXdXOAAPi13Ai1
K8aAEjrNgS659GwcGYJ6mhWZ3tisbilN13z1149zUqbtglxpvQGdYkJTsPTFU0nR
xyNnfKXC1TwTQxLorJXX1+qvdDrc4NgVE12IIsd0B/xSQM2aaJTXv8VzVjhvYFzm
+OXjQcvgFRi2uCiJaA9hmonxc800lOircoBvDjVVOj3+RRJ4+/Xo9XcA6PaZ/0T0
m0vbSgaJpSNlYf3imMa/e4GTZtw0L9p1CzrB+ZjFf/5YT2RylLoUy+5Q5J42IY+w
K9ejPuMqR0xQf+50yDfECaJ+QEHMPu9S1MUO54RlwCBba8XQKQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGNtTODVkS+8rKJYdyqsIm8cW5T6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWZmMWRlMDEtYWVhOC0z
YTM5LTkxNzYtNGQyMjRlZjhiZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB9I/ZJra0DYzYkKS1I01l+nY8F2ei3oqcWGW9T
dgbHVJSY3ye5s5QkmISvjFQf4d/SdZO/jab1LVTrmBDtd/a0S+Sp3NLlquBwa/NR
So0IXZ9aGi7/UNfIaisxGYOfKHhmMFxB4TxqEhf9kbaXzXXHOA8Wm1zFB3ERNHNt
Vu4qX7h7yrZVZqjuuzmUFcHiCZW22BVBv/68+DWLdM/oUqZ2uLtSgTMndXzz/U0T
obI764og4OG8W6WqJXcMLw1gwFx344b7YBsZb0FnBDr7m0nfWJAf9Dr/o9WqLxqc
gzT5auZI0RqttVBxdpPGWQ1pX8uA6CmcS8s1LMzoj3Q9VBdi
-----END CERTIFICATE-----