Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa
File:                     19c9c592-59fb-3320-8350-0573f714f80c.roa (raw, json)
Hash identifier:          zCTWuXrdR+x+JAnb0jtOI7bkR70GN5cgeEiVTuAE748=
Subject key identifier:   C0:CB:B3:8F:27:D2:22:07:60:B0:1F:C7:93:B5:4A:D0:25:D0:0A:3B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806451A756E797F2F82846580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396600
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:1a:75:6e:79:7f:2f:82:84:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=7024e728-34ff-4559-bef5-3de7f911f7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:3b:28:22:96:9c:5d:6a:61:ef:03:0d:16:
                    7c:44:5a:9b:90:2c:6d:6c:b7:28:88:78:95:10:5e:
                    13:11:ef:b1:18:38:a6:46:ea:1c:41:e7:9b:a9:d1:
                    9b:cf:ab:6c:a8:eb:2b:61:ec:7e:cd:d0:06:d4:1c:
                    4e:c0:da:ce:42:66:72:9f:5d:ba:c7:bf:d9:4d:2e:
                    e7:bf:1f:bc:68:ef:80:3f:e8:a4:8d:40:48:68:34:
                    54:4e:a5:bb:4f:93:d5:70:94:fa:e4:b9:f5:74:58:
                    6a:42:fb:96:48:2b:e8:94:df:40:50:02:d8:05:ef:
                    23:b2:8a:8b:05:f3:0a:33:54:1b:0a:e3:b6:90:1c:
                    0d:78:d8:09:5b:d8:13:79:d9:03:2d:15:8e:cf:78:
                    f0:50:a7:1c:18:96:69:56:e3:c0:5c:e2:00:5d:a1:
                    e2:93:7e:50:a4:b5:cd:34:54:84:93:55:55:c0:ef:
                    99:35:31:b6:5e:f3:48:9f:8d:11:08:0c:97:91:d0:
                    05:f2:30:38:eb:71:77:61:88:54:c8:67:fe:60:f8:
                    f8:a4:73:46:ad:fc:64:c8:11:8f:d4:ab:24:bd:50:
                    f2:c8:ee:b4:ba:fd:7a:4f:48:75:38:c2:da:35:3c:
                    0c:ac:93:b3:75:14:c3:a8:ec:61:41:af:bd:d9:cb:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CB:B3:8F:27:D2:22:07:60:B0:1F:C7:93:B5:4A:D0:25:D0:0A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/19c9c592-59fb-3320-8350-0573f714f80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:8a:94:e3:f1:8d:b3:c9:b7:f4:f8:c4:ba:0d:b9:0b:fe:02:
         3d:20:10:20:5a:95:7d:4c:af:40:40:43:35:92:1b:ab:55:40:
         48:c3:05:1c:e5:83:22:6b:55:28:75:f5:9e:38:7e:78:33:ba:
         2f:04:8d:ee:59:a8:67:73:26:7f:2e:79:e1:e3:e9:db:85:00:
         3d:f1:d6:87:89:04:c2:ff:c9:b4:d6:d7:a5:ba:3a:a5:d0:18:
         0d:11:fb:5d:b8:0d:f5:7c:4a:9e:45:00:ed:df:c6:ae:55:6d:
         d1:54:29:4a:ea:90:47:47:cd:1d:1f:a9:7d:76:a9:ea:0e:de:
         2a:1d:fc:8c:7a:61:0a:d0:fc:80:64:33:6a:f2:b5:67:75:6b:
         07:83:97:e7:6f:00:c9:c3:f1:ab:ec:b5:fb:22:b0:4f:81:0f:
         5a:a1:3e:20:e9:d5:e9:84:87:bf:d1:70:02:81:95:55:b8:f0:
         f3:77:51:9f:35:b7:40:69:ba:99:8d:81:d3:5e:bf:a0:85:e3:
         1c:cd:b6:31:77:25:56:2b:61:43:56:8f:14:6f:cf:8a:3c:8d:
         c9:5e:69:29:2c:23:70:69:a2:bd:4e:21:5e:1d:24:93:c3:86:
         e9:fa:5a:03:61:04:80:3e:60:8a:80:f5:38:ab:86:57:4d:93:
         94:60:02:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----