Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/65cbb0a9-721a-3811-bb77-5a7bb7be966c.roa
File:                     65cbb0a9-721a-3811-bb77-5a7bb7be966c.roa (raw, json)
Hash identifier:          pB13MxM67OENNWH0Bul5/iYmVg56AzipBTTa9CMGKDg=
Subject key identifier:   93:B7:9B:7F:01:F7:AC:E0:FF:C0:CF:3F:EA:AD:A3:B6:C6:B2:00:25
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6DBDEB2D0FA6C2014900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/65cbb0a9-721a-3811-bb77-5a7bb7be966c.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396826
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6d:bd:eb:2d:0f:a6:c2:01:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=564b89f7-9cb3-4758-904c-abaaa91f6a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:78:85:26:93:cd:c5:91:a7:38:45:47:63:
                    ee:74:8a:c7:7f:cd:dc:a7:82:d0:b2:92:b9:14:c0:
                    86:e4:c6:8b:fd:bf:d5:73:3a:8a:da:65:b1:92:94:
                    86:4c:0c:f0:40:7c:1e:46:62:6c:04:9e:ca:cb:2f:
                    51:92:03:08:79:6b:59:93:39:12:e0:9b:bd:47:1c:
                    e3:55:8c:a9:16:ec:24:b8:c3:69:0d:7b:7f:22:7f:
                    2b:49:db:50:ff:ea:02:4a:71:a4:5a:4b:a2:4a:bd:
                    92:5a:19:9f:50:18:80:0b:03:b7:ad:f1:0b:35:09:
                    f8:e1:e9:d5:58:5b:2f:54:1d:ec:f4:55:f4:a4:3a:
                    dc:87:d5:a7:d9:e8:77:38:66:ab:d4:89:bd:0b:f1:
                    c6:23:77:16:4e:9d:c1:2d:27:7b:39:32:f3:48:e8:
                    3f:09:25:1f:44:09:de:2d:38:cd:f2:79:2f:f9:ec:
                    ee:3e:c0:f9:30:86:6f:dd:81:ff:67:15:d7:8d:90:
                    42:b2:93:a3:75:ec:95:ab:0b:a6:55:79:af:88:fe:
                    aa:6d:61:aa:60:66:81:8c:2a:8a:e3:2f:15:5b:9b:
                    55:40:ba:f6:fb:e9:eb:0c:73:bb:ed:20:67:da:15:
                    7a:04:36:35:eb:c9:cf:8c:d2:7c:f3:8b:90:f8:35:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B7:9B:7F:01:F7:AC:E0:FF:C0:CF:3F:EA:AD:A3:B6:C6:B2:00:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/65cbb0a9-721a-3811-bb77-5a7bb7be966c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:d5:7f:4e:ea:25:bf:33:cc:0b:55:ce:dc:1b:1b:a5:71:
         91:9c:16:63:5e:eb:b9:c8:4b:fc:d1:6e:f9:89:08:1b:aa:58:
         bd:cf:0e:78:7a:af:c1:06:13:77:a5:61:78:cc:d9:e0:e8:93:
         3a:5c:2a:06:05:43:73:19:75:ff:a1:0c:1a:25:15:a4:4f:17:
         c1:00:b6:81:96:9e:fe:c2:7b:b5:ef:b7:6e:d9:91:0f:3e:da:
         f1:84:c8:a6:96:2a:18:64:50:3d:80:59:ed:3e:bf:c9:e4:3d:
         d8:6f:24:dc:44:09:77:e8:ea:c7:f0:5d:bd:2a:ea:28:78:f8:
         99:dd:8d:3f:01:33:96:42:e2:b4:9e:ee:09:6a:8a:1f:98:22:
         20:1d:a6:67:c5:71:b1:e8:cb:b6:ee:ec:12:95:23:c6:37:10:
         bd:63:05:9d:66:e6:38:b6:a8:0a:c9:98:3d:6c:ae:11:b3:1b:
         97:4f:c1:23:bd:bb:ab:0e:ed:36:82:88:c8:93:c2:14:a1:d0:
         5c:32:cc:00:e6:36:94:6d:11:f7:14:6b:2d:af:ae:b8:da:05:
         75:0f:4a:4d:f6:f6:9f:ef:9c:c9:5e:aa:c4:aa:21:96:8e:52:
         1f:e0:55:6d:02:fa:14:4a:5c:99:15:86:14:bf:7f:3d:64:0c:
         9b:1d:6e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----