Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
File:                     affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa (raw, json)
Hash identifier:          uRvSxM3OwGhP73UirTjAaHnNZ/1TusuLtEejJ1kdh4s=
Subject key identifier:   DA:A5:7E:43:A1:7C:9C:5C:78:FA:B4:41:BC:6F:32:A9:A6:8B:E2:16
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F155244A02D226C5AAA91080
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     397211
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:24:4a:02:d2:26:c5:aa:a9:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=e0f4b4b0-9ffb-4177-b2ab-d46f607b3175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:90:67:ce:1d:c1:c1:73:45:e7:ec:57:62:
                    fb:49:7a:2e:bd:ac:ba:bd:dc:9d:e6:06:53:1e:9b:
                    51:78:58:04:5c:fa:fe:42:62:ef:34:12:67:e9:13:
                    cb:b6:c8:58:c0:96:14:07:4e:ea:9f:97:d7:90:5a:
                    3a:1b:37:ca:c5:cd:d3:bb:8f:b3:c1:82:8b:60:69:
                    c2:72:66:ff:43:44:1a:26:ae:5e:4b:22:34:81:8b:
                    7a:df:0d:a4:09:6c:3b:3f:18:80:4e:fb:e2:8e:38:
                    8b:ba:d7:ae:f1:51:d6:79:a2:36:b3:b1:59:6f:c2:
                    df:51:01:59:6d:7b:ea:f3:3a:82:3f:89:e6:01:e5:
                    49:f6:f6:62:0b:79:06:71:2b:e6:87:69:6a:2f:c0:
                    48:06:7e:ad:fa:9b:63:7c:b6:5d:7f:d0:a8:5f:bf:
                    40:db:b7:58:2b:e1:3d:f0:3f:14:0b:2a:6f:47:78:
                    92:41:1b:ea:2c:05:db:99:fd:43:ef:6f:14:09:db:
                    ab:f6:48:5e:cf:ed:1a:56:51:67:a5:f3:f8:b5:90:
                    f4:ac:31:64:e0:d0:4b:4d:2b:7b:ec:17:77:0b:1e:
                    1d:f4:0c:51:17:5b:6a:bf:46:cf:d4:4f:56:fe:ab:
                    50:c1:50:a0:d7:96:dd:ee:15:4c:7e:c4:fb:9e:8d:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:7E:43:A1:7C:9C:5C:78:FA:B4:41:BC:6F:32:A9:A6:8B:E2:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affbc13f-36a6-38f1-b5cc-09c0b04b9b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:6e:07:ca:7b:b1:39:91:ce:23:03:88:7f:45:8f:89:1d:b5:
         0a:f7:7a:cc:ff:02:8a:89:19:e2:66:80:6b:94:13:d5:80:80:
         7f:31:89:5c:20:fd:33:4c:3e:63:52:43:9e:ca:f9:94:ff:ce:
         07:97:12:89:7e:be:27:e0:3a:a9:9d:ad:48:39:c5:78:56:23:
         fa:01:64:d5:4a:22:b5:4d:de:ea:16:8f:3e:20:41:dc:46:d5:
         ba:f2:62:a4:21:83:f1:19:25:06:cd:30:78:0e:20:0b:64:99:
         59:04:a9:5b:6a:36:6a:f1:56:b3:03:33:fe:29:7e:37:7c:10:
         7b:3d:fb:b3:d6:e2:75:1a:64:26:d4:d1:12:93:f4:56:6c:ed:
         d8:d6:3d:6b:0d:42:5c:b2:f6:fd:a5:f6:9d:8e:cd:c7:68:78:
         b9:0e:87:0d:48:80:3c:5c:64:36:b4:d2:dc:3e:f3:1c:ea:63:
         7e:86:4d:de:53:b1:bd:66:5b:90:2e:c6:dd:60:74:e6:4b:c6:
         6a:38:ad:0e:f1:1d:73:d3:21:44:a1:f3:c7:47:b7:eb:39:90:
         ad:22:33:8f:4a:62:4f:6b:7c:3c:f3:f0:c5:6f:a8:41:4f:8e:
         d5:ee:c6:5d:a3:89:da:ca:44:d5:c0:1b:2b:8f:1d:df:e8:c9:
         3e:97:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----