Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9d08728-9a90-31f2-9be7-80926065c949.roa
File:                     b9d08728-9a90-31f2-9be7-80926065c949.roa (raw, json)
Hash identifier:          tyJmQFRaXfwYXKJ+Ca9PW1DsekmWVMlb6X1gZ5VBLGY=
Subject key identifier:   40:F1:5F:79:BF:00:98:94:02:9D:1C:C5:C7:1B:C4:D0:8E:D3:7D:0F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD8249B5EB4AE5C592E80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9d08728-9a90-31f2-9be7-80926065c949.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     396594
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d8:24:9b:5e:b4:ae:5c:59:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=e3af4a3a-303e-4552-a7ae-17e34df1caea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e4:ec:69:25:91:48:f9:17:01:f5:8d:c4:ab:
                    b1:14:86:7b:a7:ed:20:61:16:a7:22:f5:21:71:ba:
                    67:89:1e:84:3c:0e:f0:8d:42:cd:d4:41:5a:e5:dd:
                    1c:6c:3f:a4:8b:44:88:67:d4:0b:ee:91:0a:a3:32:
                    ad:34:d4:88:ca:14:be:49:f5:e5:30:25:87:f7:5a:
                    72:06:82:7d:02:13:1e:ad:8f:7e:66:8e:84:a4:cf:
                    6b:fd:4f:93:c5:e0:3b:4e:6d:72:73:db:97:9b:84:
                    87:75:de:f1:20:62:a6:51:94:ff:ec:da:5a:5d:a8:
                    55:23:50:ba:e4:77:b8:aa:f7:a6:59:78:8d:94:d1:
                    98:87:bd:9e:71:d6:de:de:99:60:9f:72:b3:9a:0f:
                    05:3f:20:af:d2:bb:b6:93:34:70:1a:52:94:34:3b:
                    59:3d:33:f1:0b:6f:ee:7c:56:72:1e:4d:62:08:49:
                    cd:10:eb:c9:08:1a:fb:5f:76:96:b8:97:44:77:79:
                    5d:35:d5:78:fe:10:7e:67:f4:6f:57:d1:c4:18:da:
                    61:af:d7:0c:2c:2e:43:0f:09:f4:2f:15:70:b0:7b:
                    d2:79:34:1a:f4:93:46:2d:3b:07:17:f0:99:3c:c0:
                    f4:14:5d:3d:03:26:e8:03:37:9a:e0:af:89:f9:4e:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F1:5F:79:BF:00:98:94:02:9D:1C:C5:C7:1B:C4:D0:8E:D3:7D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b9d08728-9a90-31f2-9be7-80926065c949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ed:04:1b:e5:ee:74:2a:fb:d0:30:c5:a6:f9:ac:fe:5f:0e:
         89:b3:00:fe:31:d7:32:78:5c:d2:96:5d:4e:94:77:59:40:bd:
         d2:36:ad:e0:29:08:1e:e2:44:00:d4:7d:2e:d1:d5:2d:2f:b6:
         1f:c2:33:fb:2b:87:93:14:e8:57:57:1d:e7:65:ed:9f:3d:74:
         ab:e5:95:77:1c:7b:8b:8d:06:33:10:7a:c5:eb:85:ef:05:5f:
         eb:84:69:b9:3f:ab:f8:b7:47:54:b1:e4:8f:b2:a0:58:33:17:
         6b:d9:9c:d8:aa:a7:d9:ce:40:3d:d3:be:0d:31:a2:42:ed:1d:
         73:ca:d9:62:8e:be:55:77:51:45:4e:e6:66:14:86:9f:37:24:
         99:49:8c:e5:76:91:2b:4a:93:37:54:11:e1:3e:92:d8:9e:3e:
         2f:94:fd:fc:01:8c:2a:40:99:45:14:60:87:aa:36:40:99:0a:
         4e:20:55:6c:93:91:f8:8d:f7:85:00:f7:ab:2a:a7:38:e5:1a:
         82:d8:17:04:a8:33:39:3a:ae:1c:09:14:57:3a:06:a7:50:9e:
         5b:0f:ff:de:57:d3:30:c5:73:f4:3e:a7:1c:18:23:98:9a:5c:
         4d:22:46:3d:c5:14:f8:dd:5d:12:df:21:51:31:6a:e0:29:e6:
         b9:a4:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----