Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbfd1cb-91f1-3402-8516-e160fe526ee7.roa
File:                     1cbfd1cb-91f1-3402-8516-e160fe526ee7.roa (raw, json)
Hash identifier:          //x1AcL/m/LWu685ufl/FztAPUHjr6QvKTXtyanCdTQ=
Subject key identifier:   62:8F:33:8B:D4:B9:0F:79:BE:A3:6F:23:6C:75:C8:76:E6:79:2E:40
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F000AA3BD4CF40FF682DC0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbfd1cb-91f1-3402-8516-e160fe526ee7.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397229
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:00:aa:3b:d4:cf:40:ff:68:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=bd43ccd6-93cc-4c3b-a646-58dda10d8bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d5:2c:7f:d5:dd:2d:ce:15:0c:be:27:21:1a:
                    86:53:d4:27:9e:fb:fe:b5:68:37:61:b0:d4:30:ac:
                    b5:74:49:3d:af:a0:cd:72:00:20:9b:9d:0f:cd:6e:
                    37:33:ea:b4:01:d2:02:17:9a:d9:60:e1:b8:ed:51:
                    62:1b:ac:cb:a1:ee:b0:ad:27:af:04:d2:9b:93:c2:
                    dc:c4:1b:e6:e4:12:b8:dc:a1:f5:b0:a0:95:a5:ee:
                    1c:26:81:7f:51:dd:8b:7f:3e:b7:b2:c4:6f:4a:c3:
                    2d:ac:08:e0:91:c1:4d:fe:46:ee:a1:43:ac:b7:be:
                    3f:63:65:12:5f:45:59:91:59:d0:23:83:cd:1b:73:
                    d0:99:a0:d6:8b:20:7e:7f:b3:2e:29:0c:71:5c:44:
                    25:30:b3:03:f5:81:5c:2a:94:68:3d:1c:cc:e2:fc:
                    9d:2a:e5:78:e3:40:4f:8c:c8:b5:34:42:16:81:6f:
                    66:9d:c4:3a:4e:38:05:6a:99:6e:e1:e3:cb:52:b9:
                    11:2b:e8:6b:88:7b:e1:2c:88:2d:02:70:1b:24:4a:
                    d9:28:8a:67:f5:2f:8a:78:87:49:de:55:5a:a1:35:
                    a8:35:c2:5e:2a:55:0e:2a:ac:27:06:51:ae:2c:a4:
                    b2:7b:98:66:7b:61:59:58:4b:fd:d3:68:a3:48:53:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:33:8B:D4:B9:0F:79:BE:A3:6F:23:6C:75:C8:76:E6:79:2E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/1cbfd1cb-91f1-3402-8516-e160fe526ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:35:4c:96:83:3d:6c:0a:46:6c:b4:e6:96:db:e6:f1:48:f6:
         06:18:7a:2b:e8:f1:36:e7:0a:50:a0:51:f8:69:b0:53:13:d0:
         d0:49:83:40:83:17:e6:42:ce:20:85:c2:db:f7:60:ab:f1:fb:
         50:30:6a:5a:ef:c8:34:ad:e7:f7:12:60:5d:09:7e:3b:24:a6:
         40:c0:fb:79:a2:ac:a8:9c:36:f6:75:5b:69:8e:08:30:bb:11:
         ec:31:d7:0c:05:a8:d1:0f:17:03:8a:b3:ff:bd:17:ba:44:0d:
         4a:bc:fb:bf:fe:d4:69:51:6a:e3:bf:3d:59:72:c1:e5:e3:49:
         4e:70:00:93:c7:dd:64:74:9c:33:84:b9:dd:61:59:6a:b6:64:
         9b:cc:a3:68:27:07:94:89:00:79:0b:72:30:97:ef:35:de:6c:
         94:b4:98:f1:49:45:e4:55:10:e6:3a:ea:09:92:fc:9d:a9:ee:
         01:fc:cc:ab:62:f7:5a:ac:fd:bc:19:c0:92:dd:cd:98:a9:80:
         e7:e4:22:66:9a:45:0e:3d:0e:17:f6:72:80:98:ec:20:89:cb:
         18:65:0e:01:2b:11:0b:d1:27:2c:d0:ae:bf:cb:da:45:5f:1a:
         f6:22:cc:f6:23:b6:94:63:a7:88:0d:7f:17:4c:dc:c7:21:84:
         97:fa:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----