Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ecb40f1-4919-38f8-9463-08ea95dccea6.roa
File:                     3ecb40f1-4919-38f8-9463-08ea95dccea6.roa (raw, json)
Hash identifier:          vfGVOz/1rRiBVA9mCjcgyipcBgANzt/tcslSQZJRcj4=
Subject key identifier:   C5:8F:45:CC:BC:F3:A5:53:71:26:07:60:41:43:15:D2:47:2D:DB:1C
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F003517FA067475F2F7D80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ecb40f1-4919-38f8-9463-08ea95dccea6.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397241
IP address blocks:        2620:74:1c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:03:51:7f:a0:67:47:5f:2f:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=d1fc2fba-817e-4e9a-8fa1-0cd9f7eca363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:01:88:3c:08:cd:5c:0f:03:28:96:d5:14:
                    6c:69:83:b7:78:02:0b:04:2f:38:79:b0:f5:32:66:
                    bc:32:cd:36:bc:1c:9d:9a:f1:12:48:f4:38:59:87:
                    48:74:49:1c:0f:cd:f5:ff:2d:56:32:66:28:75:49:
                    5f:a1:f1:7a:b3:d7:75:20:75:a7:49:07:22:a3:72:
                    5b:1e:d9:4b:7d:7e:5d:b2:92:6b:95:12:e9:55:72:
                    4d:7c:f1:de:7c:cd:eb:21:03:a2:c4:45:21:7e:93:
                    55:0d:58:ed:0d:18:02:1a:4b:5a:54:b5:62:ce:32:
                    5c:11:4e:43:49:ba:09:bf:74:f4:cd:6b:97:dd:34:
                    6a:29:a4:8f:8b:17:9b:f8:51:c8:38:8b:92:ec:13:
                    12:f2:a7:10:ee:04:00:da:aa:cc:8e:49:61:a4:0a:
                    40:67:31:c4:34:d9:25:69:ab:1b:67:45:0d:c1:bf:
                    a1:3c:1b:dd:01:dc:79:fe:b2:15:dc:50:69:12:51:
                    14:8c:5d:7a:4c:82:a4:e3:4f:ab:78:8a:e2:28:1a:
                    a6:3f:33:2b:11:f1:b7:5b:96:b8:64:9b:ee:cb:89:
                    a2:d5:64:8c:ec:e4:61:cb:ff:48:7b:4b:7b:42:19:
                    68:c9:58:61:fc:70:e1:0b:8a:2d:e0:1f:15:6e:3a:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:45:CC:BC:F3:A5:53:71:26:07:60:41:43:15:D2:47:2D:DB:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3ecb40f1-4919-38f8-9463-08ea95dccea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:e2:9b:8e:08:54:c0:e1:ff:1b:8a:1d:8e:46:fc:dd:b2:
         f9:a5:de:c4:dd:65:71:74:58:6f:82:1a:0c:f7:89:db:85:ba:
         85:56:dd:6a:0e:59:e4:47:3b:1c:5f:57:e4:59:d9:a5:19:bc:
         be:fc:7b:3b:61:e5:9b:ff:23:40:e3:69:af:c6:34:38:d0:47:
         73:b1:45:ca:4f:4d:53:1e:1c:9c:91:e9:5d:7b:db:d5:b5:cb:
         65:17:bf:24:b8:9c:a1:71:64:c2:21:65:cc:6f:69:e1:40:7c:
         46:35:ee:78:2c:36:ac:15:f0:07:f3:83:2a:8a:ca:b6:94:59:
         0c:27:f5:94:77:2f:d0:34:40:06:9e:c8:0c:2d:e3:a2:52:3a:
         6e:11:98:6f:0a:1e:4d:67:c1:b4:02:f8:9d:47:d9:d3:5b:4d:
         1f:cb:2d:f1:45:0d:16:f9:57:38:50:c9:f1:7e:38:08:0f:4b:
         bc:42:d0:0a:9f:d1:41:ea:c4:e8:8b:6b:1a:da:d9:bc:da:ea:
         5c:27:ad:4d:f6:4b:bc:96:b1:46:d6:3a:8d:e5:4e:94:e1:44:
         ae:3b:bc:a0:67:37:4b:51:e4:c1:44:1e:bd:bc:70:9b:d6:08:
         c5:05:93:06:94:ee:d5:cf:e3:fe:d6:06:55:bb:ca:a8:fe:13:
         94:6e:c9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----