Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/2d0bd174-74ee-33af-b41a-1ac571be9097.roa
File:                     2d0bd174-74ee-33af-b41a-1ac571be9097.roa (raw, json)
Hash identifier:          UW/uoDM4moMx2YIzw8am2We40wJZC5vES1YPWVhMWsM=
Subject key identifier:   15:20:7A:DE:69:18:1C:D7:A4:5F:3F:C9:8A:C7:3C:F7:62:2D:57:E1
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F43285848A400BCEBEEB08CFE9B5C31C0
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/2d0bd174-74ee-33af-b41a-1ac571be9097.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     394354
IP address blocks:        2620:10a:8018::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:bc:eb:ee:b0:8c:fe:9b:5c:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=2130b9c3-219d-41a9-84ed-4042deae1697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:88:cf:00:0c:a7:2a:cf:48:63:3f:b3:db:
                    22:2e:99:44:11:f8:45:93:b1:64:b0:4e:85:02:fd:
                    f4:8a:c7:e7:30:22:ab:91:7e:7c:f9:88:7e:d8:ff:
                    87:bd:6e:a5:46:ba:86:f0:67:ab:bf:3e:28:a6:0e:
                    12:55:7a:f2:e0:10:8b:69:65:9e:a6:6a:9a:94:83:
                    ac:9a:ca:89:4d:45:eb:80:98:ad:fc:06:cb:a2:de:
                    96:31:90:41:a4:12:d2:8e:5d:d2:6d:78:6b:ba:ef:
                    54:b9:f2:b2:66:0f:2c:6b:ee:b9:62:63:b9:da:e6:
                    e6:2a:a2:f4:3b:53:c4:6c:ae:c0:1d:1f:4a:66:73:
                    8b:5b:35:ee:f7:b7:ac:ca:41:b3:f4:72:79:4a:aa:
                    d9:be:b7:50:8d:63:a3:e4:4d:05:d1:d1:03:f3:b3:
                    08:4a:3d:54:ce:ae:24:4a:90:c1:fb:c3:d1:6f:e4:
                    81:e5:11:53:5b:46:8b:27:b7:47:aa:10:11:d2:22:
                    91:48:b3:5e:98:ab:25:11:bb:b3:eb:35:18:a4:9b:
                    42:ad:a0:bf:8a:76:f5:e3:90:ce:b9:c5:51:09:d6:
                    55:b2:a2:8b:36:b5:c8:6b:08:ea:ff:a5:8a:11:f8:
                    ff:b4:b3:80:b3:d1:50:57:0a:33:66:ae:b0:37:83:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:20:7A:DE:69:18:1C:D7:A4:5F:3F:C9:8A:C7:3C:F7:62:2D:57:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/2d0bd174-74ee-33af-b41a-1ac571be9097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10a:8018::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ba:dc:25:32:3a:88:d9:11:9e:ec:ad:73:b0:0f:75:96:0e:
         13:17:d3:69:cf:93:02:33:31:2e:bd:e8:2d:0a:a7:5e:d8:d7:
         a4:8b:55:69:a8:f0:20:10:b0:3e:66:87:2d:d6:ff:52:46:89:
         10:3e:d9:b1:73:e8:5e:2a:f1:c7:ef:19:9c:2f:2b:32:f0:34:
         81:71:59:d2:84:7d:90:9e:49:3e:80:34:fc:74:8b:26:b7:fa:
         dc:f4:50:59:81:f5:3a:41:2d:db:d4:20:bb:14:fd:e3:77:83:
         0b:06:79:ff:c1:8d:8e:69:bf:c0:8b:5b:a6:e9:fe:f6:38:99:
         ed:90:35:5c:ef:4a:8c:51:0e:79:3e:cf:fc:90:4f:e6:0b:3b:
         c1:be:e3:6d:ee:b0:b7:61:5d:bd:73:33:81:18:23:20:a2:d3:
         e8:bf:88:2b:76:35:bc:ee:ca:09:b2:92:be:1c:eb:6f:97:83:
         22:c9:69:4b:88:09:96:a1:81:ad:ee:b4:82:4b:69:87:54:92:
         53:f2:ad:5c:df:1a:00:64:73:37:40:7c:8d:a1:98:c3:22:30:
         4b:57:6a:9d:28:9d:a5:0d:16:cf:49:ac:21:01:10:d6:45:88:
         b6:aa:2b:12:f0:ab:11:27:95:ae:a6:dc:a3:ef:7a:34:95:98:
         5c:f9:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----