Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/531fec64-192a-3d4e-92f2-7132ade6faba.roa
File:                     531fec64-192a-3d4e-92f2-7132ade6faba.roa (raw, json)
Hash identifier:          YMynVZlyLDOCcqrb5UweVkMfLYTLmX7XfNqeZ9Sh7VA=
Subject key identifier:   82:EE:C1:26:8C:51:09:2C:A2:8B:8D:0E:12:DB:5B:6F:FD:63:BA:09
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6AD256B8D5F1B6D01880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/531fec64-192a-3d4e-92f2-7132ade6faba.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396588
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6a:d2:56:b8:d5:f1:b6:d0:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=ef842206-56a2-407d-a553-2bd6771db7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:96:ee:68:1e:8a:09:9e:8e:f6:53:3b:7e:
                    4f:62:b1:fe:a1:9c:85:1d:d3:56:71:cd:67:30:42:
                    de:b6:23:30:36:02:0d:60:2a:66:e2:50:c9:9f:05:
                    51:e1:92:1d:29:1c:de:19:9d:08:6e:92:6e:42:b6:
                    6d:26:df:9b:51:17:d6:e4:4b:20:4f:67:70:ad:c3:
                    ee:46:9e:b1:24:08:6f:e6:a5:1b:b3:a9:66:1a:20:
                    2e:2f:49:06:47:0f:69:a0:f4:53:9d:a8:4d:72:e4:
                    98:34:f5:fa:19:1c:f6:44:9b:8f:3e:0f:c5:11:ef:
                    34:c9:73:3c:06:28:e9:2f:09:74:28:18:96:6c:e9:
                    68:aa:fb:66:f7:df:9a:d3:6d:b1:c4:64:fe:bb:6d:
                    3b:6f:e1:11:dd:7c:33:18:e8:68:ea:91:74:88:12:
                    20:27:20:87:b4:84:bb:09:4b:9a:71:69:28:6c:7e:
                    5c:4d:34:02:25:fb:af:41:65:ce:c5:9e:9f:98:91:
                    ec:a8:e0:38:a9:75:43:cb:9b:f0:1f:e4:4d:82:56:
                    8a:8a:3d:91:11:74:5e:8d:97:75:5c:96:b8:21:aa:
                    09:30:f1:64:a1:53:a5:18:88:8f:0a:58:76:55:5b:
                    97:22:6c:58:5e:c6:b6:dd:09:46:15:83:bd:a2:ff:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EE:C1:26:8C:51:09:2C:A2:8B:8D:0E:12:DB:5B:6F:FD:63:BA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/531fec64-192a-3d4e-92f2-7132ade6faba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:66:3d:7a:6e:41:c5:44:41:98:7d:c3:28:d0:c0:9a:52:90:
         10:88:eb:c3:c7:ed:8c:58:6d:69:f9:d6:cf:ac:99:01:0f:df:
         e6:2b:5d:a3:4f:ac:bd:f3:25:a9:65:00:a0:12:ca:e8:ce:06:
         25:ab:72:44:3d:29:34:56:41:50:2d:01:6d:23:3b:66:fd:90:
         49:c0:57:77:0a:4c:4f:89:8c:ea:58:14:2c:59:64:19:92:76:
         03:d1:51:a0:14:8b:6e:f3:de:93:8f:55:86:f7:c1:c9:f6:c7:
         25:4d:cc:a6:cc:72:4c:bb:17:d8:e9:33:7f:4a:2e:db:93:9d:
         f7:34:80:78:67:a4:0e:04:ca:10:1e:fe:83:85:55:36:da:b9:
         a5:7d:24:1d:f3:07:36:70:92:9b:ba:f6:3d:6c:d3:6b:c4:d2:
         93:6d:80:36:9a:90:73:cb:e6:b1:b3:57:71:3a:dc:97:28:b1:
         e1:16:1f:7d:a8:f7:e1:f9:97:eb:fe:8a:71:e8:09:1d:da:5e:
         4b:51:82:60:07:d1:e1:61:f2:3b:8b:76:0b:b4:2b:dc:c0:b2:
         ba:ab:41:d9:fe:d9:4f:36:40:a1:de:cf:ed:f9:a6:bd:53:5d:
         a2:f7:8d:84:63:c5:42:60:41:aa:21:64:f0:bb:a3:4f:d8:e3:
         7d:5f:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----