Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/066d85ad-6c32-36bf-92b4-92b2a9345ffb.roa
File:                     066d85ad-6c32-36bf-92b4-92b2a9345ffb.roa (raw, json)
Hash identifier:          xna41wAWt+S6tX7MaoJ3yjtLvsHfWXYD1ZZnF7afn2w=
Subject key identifier:   AC:AC:4B:CE:FA:BD:27:80:5A:0A:74:D5:37:0C:B7:D7:6B:7A:39:36
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A959D58D7CAD745CD2720
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/066d85ad-6c32-36bf-92b4-92b2a9345ffb.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     20172
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:95:9d:58:d7:ca:d7:45:cd:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=6266c67e-3e7a-4555-943d-4e13a157ab90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:f1:4d:cf:39:39:ca:92:9e:2b:c1:6b:58:
                    ba:ba:95:19:8f:87:d1:6d:0b:c0:76:d5:7d:03:08:
                    9f:84:2a:fe:fa:ff:1d:8c:1a:92:7c:60:c6:94:30:
                    fe:27:d7:84:fb:9d:62:7b:07:30:a0:f0:ff:01:a6:
                    b0:73:0d:3d:94:a5:9f:68:37:19:bc:16:93:3a:e6:
                    5b:f8:8e:04:91:31:64:e3:71:74:20:cb:67:e0:12:
                    0f:8a:13:51:1f:72:a6:c0:31:a6:ed:79:19:61:35:
                    3c:31:1d:a1:9f:30:69:bf:02:36:7c:99:93:1e:4d:
                    0b:65:4b:3e:19:15:0c:e4:b5:8b:7f:f3:dc:8c:da:
                    75:72:87:d7:7c:b1:e9:83:7b:12:7a:c8:90:b9:69:
                    99:1e:03:86:82:1d:b5:e8:e4:16:f5:56:ef:69:ed:
                    1d:28:3e:76:5d:81:d8:1b:1b:6a:51:7d:f2:22:31:
                    6c:58:d4:31:e1:9b:88:26:01:8c:cd:ca:00:d3:98:
                    59:6b:8f:40:b9:e5:1c:66:dc:75:0e:20:05:18:71:
                    e4:3d:97:1a:05:53:aa:a6:f7:25:f8:40:22:3e:76:
                    fd:c0:ac:8b:4e:42:6f:b2:6e:6c:45:45:ab:c4:95:
                    25:bf:96:d0:4b:9e:95:59:dc:0b:68:3e:b3:63:e1:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:4B:CE:FA:BD:27:80:5A:0A:74:D5:37:0C:B7:D7:6B:7A:39:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/066d85ad-6c32-36bf-92b4-92b2a9345ffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:8f:40:65:d1:1e:de:22:e3:88:2d:f8:52:7a:d1:62:37:
         db:0d:98:0a:cd:0d:1f:ca:3c:ba:bd:5d:b4:12:3e:b4:be:3d:
         25:1c:cc:27:43:31:77:70:28:41:33:58:ce:be:0c:bf:c0:32:
         34:a0:31:20:c4:d9:58:f5:49:5e:41:56:2e:7c:ba:42:c2:ad:
         bc:98:71:56:e6:9f:52:28:be:38:f5:8d:1b:53:70:b8:69:23:
         d6:f3:7a:11:12:23:9c:40:23:57:a8:09:df:06:00:e2:15:c8:
         90:20:fd:66:ea:f0:96:ab:a2:12:aa:8c:b2:bd:75:8c:ba:9a:
         b0:39:e9:0c:6a:d8:7c:09:c7:fc:58:45:6b:91:3c:41:9d:54:
         84:59:d3:03:17:b9:7f:b2:28:8e:f0:a2:53:a2:77:75:e5:6a:
         10:32:07:4b:68:8a:b0:34:1f:cd:76:b9:f4:e5:49:1d:80:a1:
         4e:45:f5:e4:27:ac:f6:56:18:06:5e:fb:5a:19:77:18:23:23:
         91:cf:aa:42:f7:e1:93:41:4b:fc:4c:46:36:75:de:1d:54:47:
         00:d6:d0:54:d4:3d:7d:86:9b:18:54:81:df:7f:94:3f:6f:13:
         b6:f0:ca:91:57:71:c8:72:e5:66:cf:94:8c:52:c4:65:24:a2:
         5b:a7:d0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:01:27 2025 by rpki-client