Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d5969dd-3ec5-3491-a2af-506e9a2a7492.roa
File:                     9d5969dd-3ec5-3491-a2af-506e9a2a7492.roa (raw, json)
Hash identifier:          0/ABA/et8unRQTCV6WRL/X7Y+ltHHrQTSZ3eHbBFSoo=
Subject key identifier:   2D:E4:BE:98:CE:9C:B1:96:BD:D7:0F:A4:2D:6B:3C:C6:AF:01:B7:EF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806451BB6E2B8B447537EAA80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d5969dd-3ec5-3491-a2af-506e9a2a7492.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396559
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:1b:b6:e2:b8:b4:47:53:7e:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=20e304b8-82e9-4611-a9fd-f7f4e82c3288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4c:04:c6:1b:1c:d6:49:95:e1:e6:c6:57:64:
                    87:3d:46:f2:4d:92:dd:bb:83:06:a7:04:55:6c:15:
                    e6:4f:c1:8d:08:68:a0:e8:d4:f0:e7:c6:54:3f:63:
                    d3:e0:22:ea:41:69:0d:07:d9:ef:fb:a1:01:9a:cd:
                    1a:6d:81:84:48:17:bb:43:cd:cb:3b:48:4b:c1:14:
                    23:46:3a:f4:55:43:46:d3:6b:f6:80:a6:33:86:44:
                    6d:41:0c:b2:e1:d9:17:fb:be:6e:c0:51:9f:33:dc:
                    18:2b:72:b8:43:83:e9:7c:31:56:4e:5c:6f:c4:fa:
                    b7:8f:88:a5:78:39:44:cc:d0:b4:22:cd:24:48:ea:
                    87:ac:72:8a:9e:23:37:37:c3:60:41:d5:b5:c0:6e:
                    26:60:1e:f6:cf:1e:cf:50:34:8e:8f:47:d2:33:ff:
                    d0:a2:a0:3f:0c:d2:9a:e3:d9:86:e7:65:ef:ca:fc:
                    4b:ad:3d:4c:33:e0:57:a9:53:35:69:53:3d:cf:4b:
                    b9:7c:f9:09:e5:85:75:11:7a:82:be:c6:3f:c5:86:
                    29:a3:55:82:69:d6:f3:0f:7b:84:9d:bf:7d:9f:fd:
                    b5:75:55:5b:42:6c:3f:d8:a7:58:d9:d8:4c:ef:06:
                    9d:74:5e:dd:c9:3e:64:70:f2:96:64:84:4f:2a:45:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E4:BE:98:CE:9C:B1:96:BD:D7:0F:A4:2D:6B:3C:C6:AF:01:B7:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d5969dd-3ec5-3491-a2af-506e9a2a7492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:e5:42:8c:f3:e2:a3:38:e7:3e:bb:d0:ab:6f:75:03:50:
         ec:00:58:b1:96:fb:e6:d8:6e:40:59:9c:91:7a:4c:63:23:c0:
         4c:a7:86:fe:bd:0c:65:39:23:da:50:95:ed:ba:7a:ad:40:05:
         fb:f3:d4:eb:bb:b1:9d:17:8d:e2:b7:a1:d9:ee:7d:7f:2c:3f:
         d4:68:9c:8f:3f:70:f5:bf:15:09:36:f8:86:aa:4a:2e:c5:05:
         8f:2a:8a:fa:45:26:56:43:c5:59:cd:9b:49:74:30:8f:8d:e8:
         23:4d:6d:95:9b:31:38:ea:da:94:c8:6c:93:b0:41:36:1f:89:
         27:3f:b1:b3:a6:8a:9a:ed:06:b9:5f:99:97:f0:fe:ef:cc:17:
         ce:33:60:13:e0:0e:de:72:2f:0b:09:c2:71:9c:8d:5e:dc:a2:
         f9:f1:60:e4:13:9f:ca:61:21:19:4f:0d:ea:19:a6:27:ef:e0:
         85:69:88:77:96:26:5f:b0:ab:ae:54:39:38:0c:ed:31:c6:55:
         4e:5c:93:59:49:ec:ef:e4:3c:28:f7:ce:cf:40:2f:95:1d:ef:
         8d:5c:80:5a:df:49:48:5f:2a:d0:93:1a:df:c5:c9:57:c1:b3:
         fe:d2:f2:55:bf:a1:7f:83:0a:cf:f6:14:70:3f:29:5d:f8:bb:
         0f:05:fd:e6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgGRRu24ri0R1N+qoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
MjBlMzA0YjgtODJlOS00NjExLWE5ZmQtZjdmNGU4MmMzMjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EwExhsc1kmV4ebGV2SHPUbyTZLdu4MGpwRV
bBXmT8GNCGig6NTw58ZUP2PT4CLqQWkNB9nv+6EBms0abYGESBe7Q83LO0hLwRQj
Rjr0VUNG02v2gKYzhkRtQQyy4dkX+75uwFGfM9wYK3K4Q4PpfDFWTlxvxPq3j4il
eDlEzNC0Is0kSOqHrHKKniM3N8NgQdW1wG4mYB72zx7PUDSOj0fSM//QoqA/DNKa
49mG52XvyvxLrT1MM+BXqVM1aVM9z0u5fPkJ5YV1EXqCvsY/xYYpo1WCadbzD3uE
nb99n/21dVVbQmw/2KdY2dhM7waddF7dyT5kcPKWZIRPKkWL/QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFC3kvpjOnLGWvdcPpC1rPMavAbfvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOWQ1OTY5ZGQtM2VjNS0z
NDkxLWEyYWYtNTA2ZTlhMmE3NDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBkb+VCjPPiozjnPrvQq291A1DsAFixlvvm2G5A
WZyRekxjI8BMp4b+vQxlOSPaUJXtunqtQAX789Tru7GdF43it6HZ7n1/LD/UaJyP
P3D1vxUJNviGqkouxQWPKor6RSZWQ8VZzZtJdDCPjegjTW2VmzE46tqUyGyTsEE2
H4knP7Gzpoqa7Qa5X5mX8P7vzBfOM2AT4A7eci8LCcJxnI1e3KL58WDkE5/KYSEZ
Tw3qGaYn7+CFaYh3liZfsKuuVDk4DO0xxlVOXJNZSezv5Dwo987PQC+VHe+NXIBa
30lIXyrQkxrfxclXwbP+0vJVv6F/gwrP9hRwPyld+LsPBf3m
-----END CERTIFICATE-----