Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa
File:                     fc8e2196-6576-3640-a470-60d801270824.roa (raw, json)
Hash identifier:          bRBEC7S7ovoN6swA19WF5ez9PLAR+RQdrDF/5z9q6ac=
Subject key identifier:   C4:1C:91:96:7D:59:3B:BA:A1:A9:19:DC:FE:F3:B5:C7:72:D5:67:FA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B65B2705F1C920388BA40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     36632
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:65:b2:70:5f:1c:92:03:88:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=0f24131b-597f-42c2-8344-24b75d4caa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:44:c7:d1:66:bb:a4:79:b5:a1:81:40:a4:98:
                    92:64:34:28:0f:1c:c9:cc:a1:05:5d:8b:15:8a:61:
                    00:f7:f6:c2:9a:f2:eb:c5:5c:53:96:13:49:05:a6:
                    5c:c8:fe:77:b7:ea:6c:50:54:36:2b:2f:46:28:67:
                    11:0a:33:32:a2:49:fd:48:e3:6d:2d:67:16:eb:ae:
                    75:c7:77:a2:41:b0:09:0f:83:2a:0d:0f:40:d8:10:
                    b8:de:24:9e:45:11:ab:d5:5b:1d:ce:bc:ee:6b:ce:
                    7c:86:fb:fa:7e:27:86:be:1c:18:b9:1c:fe:b7:48:
                    d1:78:2f:b9:17:86:88:78:b2:72:6c:e7:7a:20:15:
                    f4:d1:7a:15:24:86:91:77:5a:57:18:72:39:a6:0d:
                    5d:91:01:dd:3d:91:eb:78:f8:96:6c:9b:c4:0b:62:
                    3f:91:87:25:1a:2b:2a:c7:cb:6b:7b:64:9c:8c:11:
                    dc:14:50:c3:9d:6d:47:73:67:73:cf:1a:61:7c:7a:
                    bb:50:a0:53:9f:1a:06:b8:1d:66:83:ff:a8:72:5d:
                    52:b7:a4:fa:66:21:27:12:97:05:a1:84:e7:af:50:
                    01:57:94:c3:bc:e7:22:f3:c9:e2:9d:61:23:ee:71:
                    8c:24:11:ea:76:92:4d:4e:e3:9e:5e:d3:64:27:1b:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1C:91:96:7D:59:3B:BA:A1:A9:19:DC:FE:F3:B5:C7:72:D5:67:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fc8e2196-6576-3640-a470-60d801270824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:66:e3:3c:81:0f:d0:8e:11:8c:ba:65:af:35:67:16:bf:
         07:77:c6:ab:ec:8b:1c:83:5b:80:ff:7c:ae:b4:da:d5:6b:bd:
         40:e1:ee:27:bb:cd:0a:75:e8:42:27:21:b9:55:db:2d:4f:4c:
         f9:c1:32:15:92:de:5b:df:9c:2c:93:f0:94:6e:4e:1d:03:8e:
         a5:1c:71:4f:ca:91:38:ef:60:f9:57:cc:aa:ba:b7:9c:c6:60:
         61:3a:6b:c2:70:a0:be:f2:05:79:25:0d:6b:51:68:bf:b6:82:
         f2:6f:13:d5:b1:27:64:60:80:47:95:b8:fd:f7:ac:f2:85:0a:
         d9:bc:e7:78:29:f0:ce:c1:0a:18:c1:33:d2:89:45:f7:bd:d0:
         cd:58:c6:c6:15:8d:60:63:43:cf:4a:61:f5:9c:00:3d:cc:63:
         f9:8f:30:9f:f2:d4:52:6c:c8:4c:4b:12:e2:4f:7e:70:c1:d6:
         d5:b7:6f:45:6d:ee:d9:df:20:18:21:af:b4:06:9b:2d:6c:32:
         85:dd:2f:45:94:8a:6d:80:cd:38:71:65:1d:76:30:fa:41:3b:
         04:ef:69:06:05:07:1e:bb:d1:3d:71:da:f8:df:0b:73:a7:00:
         fc:4d:57:f8:d2:68:e6:e2:e3:87:81:b4:cf:40:8d:d6:38:fa:
         c5:f8:58:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----