Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/152aa566-6047-3044-a1c4-061259070c26.roa
File:                     152aa566-6047-3044-a1c4-061259070c26.roa (raw, json)
Hash identifier:          xIbnUnrsIkBqTTOQyUEh/ZQMHVEb6uwise3qfxQh5K8=
Subject key identifier:   0F:BC:E0:CF:9D:50:E5:3F:F8:DA:51:AD:97:BC:93:00:F6:FC:CF:E2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD921C34AC08692AF1640
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/152aa566-6047-3044-a1c4-061259070c26.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     396560
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d9:21:c3:4a:c0:86:92:af:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=3a7ee042-05b0-426d-af24-8bb5121bb6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:63:f1:62:a1:93:d6:58:e0:94:2e:69:59:
                    e8:b2:d8:03:0c:5b:dc:50:1c:c2:2d:b1:68:6b:e5:
                    fa:06:fa:04:75:cc:ff:67:42:cd:26:dc:68:3d:c7:
                    cb:25:d2:5a:f8:98:b4:45:86:31:6a:95:8e:c2:96:
                    dd:95:29:9c:2e:8c:e3:7d:a3:f5:7b:cf:47:cb:a1:
                    ef:5f:28:78:fe:97:96:f0:64:8a:43:0c:20:c3:dd:
                    12:6d:9d:2c:ab:97:2d:fc:13:ed:84:d6:ac:71:5d:
                    a3:38:ea:b0:39:f1:65:5b:dd:29:e8:ba:0b:e9:08:
                    73:a0:c2:1d:37:d7:87:bc:29:89:7b:2c:0b:9d:40:
                    50:e0:72:14:22:af:e1:62:d4:10:15:6e:bf:38:2f:
                    90:a4:9a:7f:51:6e:bd:85:48:66:60:39:35:c6:d9:
                    51:83:b6:63:eb:e4:a2:90:e0:15:a6:db:c7:8d:ed:
                    a0:2b:38:a6:cd:bc:85:86:b5:ff:5e:44:71:5a:1a:
                    16:a0:0e:36:46:4c:0f:d6:c2:f7:60:b0:3e:39:62:
                    71:31:15:fe:67:9c:50:ac:e9:6e:36:30:69:f4:00:
                    77:51:26:4d:e9:ae:e1:6c:ed:8d:c9:04:49:b2:2d:
                    85:86:a7:f5:7f:a9:8b:21:6c:e5:12:25:75:60:00:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:E0:CF:9D:50:E5:3F:F8:DA:51:AD:97:BC:93:00:F6:FC:CF:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/152aa566-6047-3044-a1c4-061259070c26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:97:61:29:97:8c:c9:e3:ac:e0:62:ae:91:e0:27:79:3b:da:
         67:fd:02:7b:b7:51:4e:35:70:b9:06:7b:48:65:f4:18:f6:3a:
         a7:14:0b:5e:fe:28:2f:b8:16:a5:26:50:0d:32:48:05:0a:2a:
         60:17:b2:c5:65:ae:e7:f1:dd:40:a4:ab:e8:e7:11:99:0d:63:
         36:97:ad:e6:e8:5b:e1:8e:15:54:20:25:23:f9:10:e6:54:31:
         59:81:34:8f:e1:ae:06:c5:a4:9a:32:a2:f8:d4:3c:28:38:92:
         d4:01:07:6c:16:23:b1:e5:ea:e1:51:7c:af:4e:91:00:06:84:
         e0:4e:2b:1b:c3:60:90:46:9c:13:1a:97:07:f7:56:af:92:0a:
         53:20:3e:b7:67:4a:72:d4:be:20:ba:6e:dc:50:a4:f0:64:fa:
         a9:b7:31:48:cd:20:7f:8b:af:c9:ef:a0:e2:29:41:09:36:ae:
         46:f4:ac:b8:dd:ab:2b:34:9b:56:96:ff:48:e5:5b:78:02:e4:
         95:c1:ba:e4:90:1b:95:6f:a2:e1:ba:a4:09:a9:65:db:4c:61:
         78:38:2f:bd:75:8e:6a:a3:25:cd:8b:04:ad:75:90:0a:c9:62:
         3d:5c:69:ea:d4:4d:85:5d:72:d2:2e:fc:6d:4f:49:0c:18:7e:
         41:64:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:55:46 2025 by rpki-client