Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02132eaa-8dae-38d9-a1bf-5043b11117b9.roa
File:                     02132eaa-8dae-38d9-a1bf-5043b11117b9.roa (raw, json)
Hash identifier:          1OtcOnXRi1jfpUhXu+lsK/+VV//joF585q8TVVwWGL4=
Subject key identifier:   1C:74:3F:7A:BD:7D:2F:36:31:6B:45:C0:5E:D7:25:F0:EC:1D:C1:1D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858480EA51E31D63CE0E545A63740
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02132eaa-8dae-38d9-a1bf-5043b11117b9.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     7342
IP address blocks:        2620:74:63::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:1e:31:d6:3c:e0:e5:45:a6:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=55196578-0bcc-4588-a7e7-e69544df18e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:41:7e:0a:19:f2:a7:33:8a:60:9c:e2:aa:fc:
                    d5:8c:3f:c7:63:3f:32:02:94:80:ff:3c:8c:86:b5:
                    bd:1c:da:91:ce:03:13:44:67:46:fa:0e:83:f7:26:
                    83:fc:22:46:eb:2c:41:8f:78:69:0f:cb:1b:a7:a8:
                    46:ee:4a:02:ff:05:a1:ee:ff:ef:3a:2b:0e:0f:81:
                    54:32:d0:17:fb:89:37:bc:1b:c5:9f:71:84:ae:ca:
                    38:69:bd:9c:dd:26:75:68:aa:39:91:c9:9f:56:81:
                    da:92:07:01:8e:bf:c7:8b:04:ce:4c:d8:2e:f2:1b:
                    04:0a:b1:b6:a9:49:a5:5f:ee:eb:c7:da:3e:4c:94:
                    f0:e5:88:f2:2a:b3:3a:4e:4d:95:c4:17:dd:11:a6:
                    76:c5:73:c0:cf:fc:d4:73:f2:44:04:87:87:b5:ab:
                    bd:8c:8c:7a:3f:0f:ee:a5:00:5e:b2:01:67:3a:e0:
                    83:c8:f9:70:30:bb:b8:af:4b:4e:f5:32:1c:ba:99:
                    82:63:b0:62:6c:b4:77:24:8e:3a:01:7b:0e:60:10:
                    22:98:0d:df:b4:00:06:b1:b1:d2:3d:d6:1e:62:e3:
                    84:fb:a4:11:91:cf:be:62:c3:a3:7f:e6:b7:cb:b7:
                    58:da:6d:2f:56:80:8d:d6:c7:ac:ce:dc:6f:44:e1:
                    d2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:74:3F:7A:BD:7D:2F:36:31:6B:45:C0:5E:D7:25:F0:EC:1D:C1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/02132eaa-8dae-38d9-a1bf-5043b11117b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:63::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:62:60:6e:ba:d4:db:c2:08:61:2e:e2:18:be:8c:85:48:
         7d:4b:93:9c:6b:f6:23:a7:e1:40:83:dc:a0:43:0c:10:d7:6a:
         ee:f2:61:88:0f:76:26:ce:53:cb:b3:63:27:84:f0:52:6b:7d:
         f4:71:85:bb:d5:98:76:f4:b6:18:b4:be:5c:41:03:b5:41:a8:
         86:e2:e5:8d:e7:7a:06:b5:c4:cc:5e:e1:33:b0:8d:27:e2:cc:
         de:89:dd:8f:ff:83:7c:d0:bc:36:3f:da:29:d4:f2:cb:2b:cf:
         2b:34:79:32:10:ac:f4:3f:49:76:c1:be:fb:19:7a:fa:c0:b4:
         11:cf:cb:34:00:fc:85:e5:aa:09:30:59:a5:a5:cf:4a:07:b3:
         33:10:df:e3:7f:d6:6e:66:e6:41:12:14:d4:1f:d0:df:16:f7:
         2a:de:bc:f4:23:e0:5b:e5:7c:41:1c:d7:e4:f1:ea:a8:58:90:
         98:ec:8b:3f:1f:f2:10:2f:83:49:62:78:c5:be:3f:4f:a0:5d:
         6a:af:06:6a:ba:93:a2:19:c4:e3:15:87:20:a5:bf:36:e8:88:
         d2:4c:22:c3:59:12:3f:86:72:b0:bd:f2:c2:2d:08:a7:39:d1:
         76:f4:b3:96:2f:3b:7d:9a:60:e1:e2:fa:fb:21:8e:58:42:22:
         ac:d1:86:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:13:57 2025 by rpki-client