Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa
File:                     238e4239-26e2-34b0-b9f4-5d67352e64dd.roa (raw, json)
Hash identifier:          nS96nERShvVb53eEqa8usoH75heiI4AC17HrQxaDdKk=
Subject key identifier:   05:BD:87:DF:B9:72:AA:67:21:60:9B:56:F2:7E:09:77:1C:4F:1F:89
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858488280A2942A78CE7F480BB400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     396589
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:a2:94:2a:78:ce:7f:48:0b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=3dfa080c-ca43-4687-882d-518ff72e4984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:69:85:f3:b3:6b:d6:fa:c9:ee:80:ba:df:
                    b5:40:d0:25:b2:dc:81:a3:c0:9f:49:4b:4b:3f:76:
                    f7:21:af:a0:27:65:44:79:65:d0:e7:6a:d6:76:9b:
                    c7:14:d2:68:00:18:dd:b0:59:de:0d:2e:35:7f:d8:
                    3b:89:27:b5:b6:91:5c:8f:ac:e2:0a:f1:69:30:98:
                    67:1a:71:9d:07:61:81:ed:f9:15:c2:53:13:0e:15:
                    d7:c2:c7:59:dd:03:f2:bc:96:d1:7f:b0:97:9d:77:
                    a4:7b:c1:c4:81:ae:ff:64:41:2c:9a:6b:f4:fd:0a:
                    ac:8b:83:f4:17:96:e9:db:d2:8f:27:40:31:3c:d0:
                    9a:92:6d:1f:45:1b:e7:d3:bf:f0:0e:e0:f8:a7:48:
                    3a:7f:19:d0:73:3f:be:da:8c:13:4b:5a:e1:d9:3c:
                    73:d0:b5:09:e6:60:38:0a:1b:00:6d:63:7c:b6:7d:
                    00:58:8c:44:7f:97:0b:ac:49:42:6e:84:4e:65:37:
                    9a:4d:06:68:ab:07:0a:0b:ce:71:4b:10:3f:85:49:
                    86:fb:da:25:cb:40:31:11:bd:c3:27:18:8d:a0:0b:
                    ba:4a:1c:05:54:09:ce:b1:82:e3:49:43:9a:b5:89:
                    17:cb:fc:20:05:dc:f2:3a:3e:f5:65:3c:6f:0b:13:
                    fe:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BD:87:DF:B9:72:AA:67:21:60:9B:56:F2:7E:09:77:1C:4F:1F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/238e4239-26e2-34b0-b9f4-5d67352e64dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:01:8f:5f:9b:18:c4:1d:94:2d:5c:46:80:bc:84:fa:41:5f:
         70:de:2e:4d:26:e6:e0:93:42:ae:ae:99:f3:46:dc:fe:42:5d:
         ca:41:0b:40:96:6c:af:49:8c:c3:50:b7:c4:14:be:eb:e2:4f:
         23:54:fe:a3:2a:f2:9a:34:59:47:8d:7e:db:5f:7a:35:98:48:
         cd:d2:55:52:7c:95:18:0e:ed:f0:b5:70:fe:e3:4c:3c:98:da:
         97:2a:fc:51:41:ae:f8:c2:a5:a4:d3:42:ff:1c:81:ed:31:e5:
         0a:c0:31:5d:c2:59:04:83:72:2e:2f:32:ec:60:9d:23:43:6c:
         6d:df:24:d6:e8:f4:84:6d:2b:c8:76:f5:e0:66:69:8a:49:fe:
         46:30:3d:00:df:53:dd:62:63:3c:69:8a:f9:1d:08:39:26:b7:
         b3:e3:29:fb:84:7f:e2:ea:67:a5:42:6f:45:a4:23:fe:82:f4:
         17:79:48:85:59:46:02:14:ba:a8:ae:03:d9:1e:88:7c:3b:31:
         20:18:34:df:a8:1f:bd:99:3e:47:22:36:68:10:95:c4:34:48:
         e1:fe:87:ed:e9:b5:ae:33:50:a8:81:7d:3e:a5:21:18:13:0e:
         ee:a1:08:b6:7e:cf:59:75:e8:ad:9c:73:5e:87:18:65:c5:79:
         68:50:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----