Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/308a0300-f770-3e11-876a-8e023c48fcb0.roa
File:                     308a0300-f770-3e11-876a-8e023c48fcb0.roa (raw, json)
Hash identifier:          qulWRtrU4NMdPcRh4P6Qm1EBIVcjIRQq8GL8aYh95MU=
Subject key identifier:   3F:89:A3:08:73:DE:2D:32:21:11:7B:A2:27:22:EA:0A:35:4C:9F:05
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806450DCF76DCAC2FA5C2D400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/308a0300-f770-3e11-876a-8e023c48fcb0.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396543
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:0d:cf:76:dc:ac:2f:a5:c2:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=54eafd73-ec71-4e7c-8f56-9ee8b6093e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:89:de:b9:48:47:88:39:1a:3f:82:fd:7f:8f:
                    88:87:9a:c6:e1:b6:26:f2:61:7e:63:58:9b:4c:27:
                    ee:5e:c1:25:8f:4c:31:a8:7f:7b:59:5a:c6:ce:ec:
                    46:6d:b7:6d:bf:35:84:da:5e:ca:6d:78:a4:02:bf:
                    76:50:8b:e9:0e:ad:ca:dc:01:a5:f3:aa:f9:04:27:
                    33:d5:9b:da:cd:b2:35:91:b2:9a:b1:57:11:dc:54:
                    d7:09:9f:3a:27:5b:ec:d5:7b:54:0e:53:bc:97:ae:
                    37:c8:4f:6f:23:6c:55:d4:f1:cb:d0:ae:f4:d9:d7:
                    f7:30:92:3e:05:90:b5:9d:c5:b1:bf:84:2a:ce:fe:
                    b6:74:b0:63:8b:e9:ca:b7:6b:d8:1e:ff:e7:dd:cd:
                    c5:8b:7d:59:e2:ed:1a:a5:b3:b2:3c:9c:3b:f0:9c:
                    ee:e6:75:ae:84:e4:62:63:00:ee:ef:a7:ce:61:30:
                    0e:86:e8:3d:80:20:d8:3a:d3:17:2e:0f:13:5b:0a:
                    ed:b6:6e:25:0c:6f:78:e0:13:c3:2c:d3:3b:cb:96:
                    e6:84:c0:65:90:0e:aa:fa:e2:69:1f:56:68:4a:7c:
                    19:6b:de:52:ca:5d:76:1d:68:83:3a:d7:41:cf:8d:
                    d5:5c:ef:29:29:f0:10:f7:8b:41:07:29:66:df:ce:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:A3:08:73:DE:2D:32:21:11:7B:A2:27:22:EA:0A:35:4C:9F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/308a0300-f770-3e11-876a-8e023c48fcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:30:96:53:35:25:13:77:d0:ec:66:36:24:15:16:ef:75:
         5d:f4:6a:0d:f8:ed:6a:10:9a:c6:68:22:0e:39:e3:b5:95:fa:
         79:78:ba:3f:6a:76:b0:77:49:99:64:78:71:f0:3e:7b:e3:29:
         5e:cb:bf:b1:0a:ef:89:ae:1c:69:e1:43:e4:30:35:df:37:5f:
         c2:cc:9a:d6:95:cc:dc:8f:89:33:5c:45:81:6e:4c:0a:8f:3a:
         5e:b9:87:a2:89:af:2b:93:d2:f4:34:d1:bc:2a:7c:d5:f5:24:
         07:af:32:49:88:7b:7d:6a:05:d1:4d:35:bc:94:d7:fa:b9:91:
         9c:3b:77:63:ff:96:e7:4c:67:5b:67:f8:1d:c7:7b:a6:3b:47:
         09:60:75:aa:4a:1b:3d:4f:c7:23:a4:ca:ca:4b:c0:5f:b9:78:
         81:f8:39:c7:94:cd:3a:bd:1a:a5:f9:d6:30:b6:5d:2f:74:d0:
         10:35:d4:e4:18:27:d5:9f:e0:b8:c8:1c:24:09:8e:62:82:5d:
         8d:6c:73:8d:3e:9e:e4:97:3d:da:9f:4b:e0:1b:ae:ad:9c:8d:
         55:93:02:26:9f:d4:94:af:a2:e2:34:fc:b7:56:51:9f:de:10:
         45:67:4b:64:c0:1c:f9:e1:5b:0d:2c:12:42:71:c0:ea:f9:cd:
         45:c0:70:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----