Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/806aee88-19bd-3e4e-b47a-e451a147a219.roa
File:                     806aee88-19bd-3e4e-b47a-e451a147a219.roa (raw, json)
Hash identifier:          ppEmkeS2Uad1hu0BkWdzkfA2qbAw916As01nE1sm3yc=
Subject key identifier:   ED:44:AA:BE:97:D4:9F:A9:49:45:37:C5:81:B0:20:76:B3:6B:89:B5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848064518E332CFC62B3D795300
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/806aee88-19bd-3e4e-b47a-e451a147a219.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396558
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:18:e3:32:cf:c6:2b:3d:79:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=7a9c2136-7bfd-4578-b56f-8249480d6eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:b8:97:4f:11:34:1f:c5:40:19:86:c5:17:
                    0e:89:07:52:20:08:03:a4:b2:3b:ff:3a:a1:ef:c3:
                    01:cf:c6:3a:ea:a8:4a:5a:7a:e1:4f:a2:9e:c0:1d:
                    a2:43:40:58:dd:b6:61:02:81:87:da:55:70:97:49:
                    28:04:23:39:6c:58:81:a0:7f:6d:68:c0:be:c7:62:
                    40:61:9b:81:12:6a:00:ae:10:72:b5:17:8a:5f:d9:
                    db:2d:29:fb:50:b8:09:26:b0:d1:c2:ee:5b:ac:3e:
                    5f:aa:70:0a:de:27:73:d0:6c:cd:27:33:76:3a:d6:
                    37:fa:f3:3a:42:f3:e3:98:ce:93:d6:20:b9:49:f3:
                    57:11:82:64:81:5b:35:ff:c6:9f:43:4d:b5:2a:e3:
                    fb:11:60:ed:1b:77:fd:f3:ce:97:fe:25:de:7d:b6:
                    48:3a:9b:70:86:da:f7:3f:71:a8:af:a4:a7:16:4e:
                    8c:65:a9:63:9e:e0:7b:8c:a0:ac:9a:7d:4e:a6:77:
                    f8:61:80:89:a1:a2:36:40:de:48:70:ff:39:50:27:
                    f1:c4:16:bc:d2:f2:c1:4d:3a:0a:21:53:51:9b:38:
                    da:4b:51:ec:9d:78:e8:93:21:fd:99:8c:08:96:6d:
                    d0:66:bb:ab:b8:1b:a1:26:1f:36:72:11:14:d7:ec:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:AA:BE:97:D4:9F:A9:49:45:37:C5:81:B0:20:76:B3:6B:89:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/806aee88-19bd-3e4e-b47a-e451a147a219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:01:4b:aa:f5:22:86:5a:58:6d:9c:a4:a1:33:b1:21:1a:
         b6:5f:f7:58:c9:4b:8b:d7:fb:19:e0:64:22:24:d9:7c:b2:6c:
         d5:94:4d:1c:55:b6:e0:f9:ed:99:fd:c3:14:41:f3:ae:51:dc:
         33:49:36:41:81:89:9c:b9:82:70:35:ad:f2:8e:8e:e4:fa:ab:
         93:ea:ad:55:f6:81:9c:b4:19:f9:e8:1c:35:17:b8:97:a2:9c:
         34:9a:f7:f6:bd:2d:b8:8b:43:85:2c:ea:cb:c9:c6:07:02:bf:
         ca:ba:a4:2f:af:a3:96:5d:b5:30:6b:07:b5:d3:27:d2:84:22:
         e1:21:1a:b6:fb:63:58:75:eb:fe:75:7e:54:92:5f:44:f2:18:
         bc:cb:ea:dc:87:a3:54:41:c8:ca:01:a7:a3:84:89:82:a5:59:
         1f:39:e2:47:18:3c:b0:35:c5:37:48:58:43:e4:79:d3:de:56:
         da:b9:6a:0c:77:06:58:88:5d:6b:57:f5:9a:d3:5c:cf:df:30:
         8b:06:b1:79:57:c2:ba:ec:a1:79:eb:94:81:4e:b6:72:da:75:
         e1:2d:60:09:f4:8b:e6:a1:b1:9a:63:ea:b2:61:c2:f5:b8:a4:
         a8:4a:1f:7e:a4:25:d9:9c:6c:8b:dd:d9:be:43:fa:b5:82:9b:
         1c:b1:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----