Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/003870e3-7777-3ef0-90b5-2100312198d6.roa
File:                     003870e3-7777-3ef0-90b5-2100312198d6.roa (raw, json)
Hash identifier:          FP0fqbSXzBr/BOK3iJSzWV6TnvAV/l7yOSA34+RgAk8=
Subject key identifier:   A6:9E:0F:B2:29:E1:4D:E5:43:21:B1:ED:17:6E:AB:FF:E5:04:C0:98
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848064518282CF1AC55481F5500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/003870e3-7777-3ef0-90b5-2100312198d6.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396599
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:18:28:2c:f1:ac:55:48:1f:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=00b58d14-0a70-4f38-b26c-33fd5eb57505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:26:31:4f:59:1e:56:a2:08:c0:d1:26:e5:
                    87:5d:44:1c:e6:a3:5d:6a:fb:cb:c7:dd:17:2f:e3:
                    7e:8e:0f:90:36:48:70:7d:00:a4:12:62:65:5c:4d:
                    1e:82:82:84:09:46:a8:3a:41:08:d1:74:93:f9:ee:
                    cf:1f:31:b8:5e:46:f3:41:6c:20:10:43:fe:ab:c2:
                    24:a2:a3:12:af:ef:98:6c:68:3e:54:69:c4:2e:b5:
                    2e:8b:7b:1c:d4:8c:2a:b7:64:d9:4a:ff:11:b6:86:
                    24:fc:08:76:88:48:e6:32:7a:2c:aa:46:af:d4:cd:
                    dd:04:06:8e:86:33:5f:d0:c7:93:06:4e:e3:c3:54:
                    87:46:a0:5c:05:c0:73:c5:cc:80:94:0f:58:3a:97:
                    c8:ba:1f:03:95:60:f7:81:89:23:94:b3:ff:62:64:
                    08:dd:d2:c1:a0:f8:42:ba:54:da:90:1d:45:53:d5:
                    d2:4b:72:cd:3f:b9:3d:a7:89:d7:9b:2b:54:af:13:
                    33:5f:f9:8a:24:64:e9:f9:7c:49:65:02:a4:60:d6:
                    ef:16:c7:77:f4:47:df:73:39:8b:ba:49:a6:52:bc:
                    99:91:2f:df:f8:9d:f3:bb:a0:dc:8a:75:42:c7:43:
                    3d:60:27:ad:e5:d9:1f:02:e7:8d:34:50:8b:7b:17:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9E:0F:B2:29:E1:4D:E5:43:21:B1:ED:17:6E:AB:FF:E5:04:C0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/003870e3-7777-3ef0-90b5-2100312198d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:eb:df:7b:0d:1b:38:95:15:2b:9e:eb:c6:63:dd:25:8a:
         21:1e:3c:2d:db:05:e6:79:36:4d:3a:be:b2:69:90:5d:24:94:
         2b:a5:8f:e8:f5:d0:a0:17:ee:b2:80:5c:8f:c4:62:43:24:8c:
         9d:ea:1b:69:63:c6:98:46:7f:de:48:2d:a2:38:0e:15:9e:6d:
         dd:5c:41:34:e2:6a:df:5a:e3:da:ab:48:1e:f7:47:a3:a1:aa:
         5a:71:36:b1:dd:df:95:b7:75:2c:70:4a:a3:65:1f:d1:19:69:
         37:96:e8:cc:14:c5:eb:cc:65:00:77:88:c7:9c:ea:70:53:73:
         f5:90:43:4b:fe:f8:f8:6c:22:aa:f1:5b:d0:f6:28:79:ab:2a:
         d0:d7:18:49:d4:58:21:7e:5c:c7:92:6c:2b:28:3f:6f:68:26:
         bb:66:6a:9f:cc:06:e2:61:9e:81:5d:69:c5:d1:8a:95:0d:4b:
         b9:75:2d:0a:6e:96:fd:b5:20:2a:d3:4f:80:d7:2f:85:54:af:
         dc:4f:1a:92:5d:db:8f:f2:69:84:1a:5d:65:1b:d8:cf:50:bc:
         6f:51:08:49:18:b9:c2:cb:32:d4:8e:8d:ae:ab:05:98:a8:5b:
         66:d0:60:78:c2:54:22:c4:b7:d6:11:06:d2:d7:e7:d6:4d:be:
         b5:73:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:54:13 2025 by rpki-client