Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa
File:                     9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa (raw, json)
Hash identifier:          kWZZ3IEFTqeJAK904npksISKM+Qsx1XzWKtqS6Ezmj0=
Subject key identifier:   90:BB:0D:62:B5:E1:16:75:C2:97:9B:8E:86:6B:80:0F:60:E9:F4:F5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858488280A37C2D5C40E7ACD7FBC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     40647
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:a3:7c:2d:5c:40:e7:ac:d7:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=cc16cf5e-e540-49d3-ace8-7e836cc61d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:2a:71:6f:6f:35:94:43:a6:d0:08:26:0e:
                    0f:bf:ca:43:f1:a1:63:cf:7c:ca:bb:69:25:c4:cf:
                    78:47:f4:eb:65:f0:aa:b1:16:60:ec:66:40:fc:5a:
                    45:94:1e:db:79:5a:83:e0:6c:9c:7f:dd:be:a7:23:
                    f5:e5:b0:83:3f:7a:65:28:30:b4:11:d4:89:3c:a1:
                    46:26:d7:35:bf:2d:49:cc:0b:2c:96:b2:40:14:e5:
                    23:f5:c4:8d:be:b7:31:58:f5:bb:76:55:ab:b5:a8:
                    e6:db:6e:37:b3:6a:ad:7d:97:f2:f4:9e:7b:b9:4f:
                    1c:4c:c9:51:d2:ed:db:a4:6a:bc:2c:e2:46:4e:d5:
                    d2:54:31:b2:9e:d7:f6:b8:22:33:6d:27:20:35:0e:
                    5a:74:54:aa:e9:ff:c4:e7:72:d2:96:35:a5:ce:58:
                    54:d7:0a:83:33:0b:fb:2d:b9:55:16:33:15:6d:00:
                    37:df:b1:7f:92:a1:cd:57:e2:89:7a:49:65:5f:e5:
                    51:51:b3:4e:e1:50:92:e0:31:4b:e5:50:17:44:88:
                    41:45:29:f1:a1:c0:7e:e1:71:87:98:b5:1a:2f:04:
                    ba:b4:34:3f:14:49:c7:54:10:ef:ec:48:e3:8f:2d:
                    49:4b:4e:c0:dc:c1:4c:31:5b:73:e8:72:55:94:ce:
                    81:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BB:0D:62:B5:E1:16:75:C2:97:9B:8E:86:6B:80:0F:60:E9:F4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9d9d7aa5-12eb-3b55-8617-6d400b1da793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:88:d7:84:22:6e:fe:e1:96:bb:d7:49:e3:7b:76:ff:88:07:
         7a:c0:54:48:f1:4e:63:5a:f0:f9:9f:03:d8:66:08:67:ab:75:
         b4:f7:d4:14:c9:6f:8f:ef:fd:36:2f:25:a0:a7:b8:1c:5b:83:
         2f:b6:28:f3:e3:48:3e:4f:2f:fb:13:70:68:be:d2:d4:75:ec:
         58:fe:7a:3f:03:27:e4:75:cc:ee:62:d8:97:a0:cf:41:59:a2:
         53:b9:30:bc:ec:6f:8a:63:89:f9:96:ce:57:96:70:5c:2b:a8:
         26:da:85:2a:70:8e:3c:b4:d6:59:c1:c2:02:95:80:f3:80:33:
         c3:fa:10:ac:ad:1a:c1:b5:e2:56:84:ae:22:6d:0b:7d:ca:e9:
         a9:80:7e:4d:07:85:54:aa:07:7a:0d:c6:18:4d:5e:28:65:3d:
         02:b9:c0:0d:d3:41:2a:ef:f1:fc:0a:3d:f3:e9:8d:4a:bc:fe:
         e0:de:85:22:0e:30:3b:56:89:fb:03:3c:d4:48:99:08:24:da:
         a7:e4:d6:5b:ec:54:09:d8:17:f9:13:49:94:49:27:da:98:b3:
         8f:00:d5:fc:42:66:e2:af:76:b3:24:df:31:af:cf:38:b2:63:
         14:01:e7:58:f7:3f:f1:20:68:d4:b1:b0:64:e3:1f:06:85:4e:
         41:30:af:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----