Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa
File:                     1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa (raw, json)
Hash identifier:          AphGgOVhQJ7mz0LdX+NS8ADq4MF7gqic3E2qmWWrcNY=
Subject key identifier:   47:00:F1:40:5A:5D:D7:4A:EB:F0:CA:52:A2:11:BA:07:74:A9:4D:FC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F15526A8146C79A4B577EB00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     396549
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:26:a8:14:6c:79:a4:b5:77:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=f527ba57-e277-42d4-a84c-b821caae70e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:92:ad:11:20:bc:9d:0d:5e:3c:0f:26:df:
                    9d:58:cf:eb:0f:b2:e9:17:b8:e4:60:f0:18:93:54:
                    d1:a2:00:5f:f9:9f:70:50:64:e0:42:23:4b:6b:70:
                    da:00:14:cd:21:c0:91:2a:6c:02:3a:4a:e0:2d:c3:
                    7d:15:b4:1f:df:92:88:38:44:4b:ce:59:dd:0a:f3:
                    44:1a:be:38:3b:eb:75:26:c4:4d:8b:f6:3e:31:fc:
                    2e:77:91:33:65:d6:a7:42:b6:6a:4e:95:2c:33:20:
                    33:7c:30:40:01:4d:e6:f4:80:4b:46:5c:91:40:f7:
                    8c:e6:38:9e:c8:8d:e4:11:a5:37:f0:59:f4:73:f8:
                    31:3e:2f:a7:06:a4:03:99:ba:89:8c:2e:cf:42:4e:
                    a6:db:ed:b0:dd:0b:49:00:d9:94:77:00:28:09:bd:
                    01:c4:7f:8d:40:4d:3b:e7:72:ab:97:9f:bd:fb:72:
                    22:9a:88:b6:bb:32:85:9d:ad:07:57:95:ee:36:6e:
                    dc:3c:80:92:eb:84:81:65:62:9f:50:87:f3:1a:75:
                    08:15:9d:66:e8:8b:34:77:77:ad:20:c6:05:a1:c3:
                    b4:35:ed:84:35:d4:ff:f1:41:b7:ef:b2:22:a4:33:
                    fb:ee:3a:56:8b:56:22:d0:9a:51:68:18:f3:32:53:
                    60:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:F1:40:5A:5D:D7:4A:EB:F0:CA:52:A2:11:BA:07:74:A9:4D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:a2:4f:29:2b:82:16:e3:17:1c:4b:23:db:29:1e:7a:ed:
         11:81:42:e4:0f:fa:27:f1:65:68:d3:91:cd:3a:6b:58:8e:d8:
         4a:21:3d:8e:69:23:a3:3c:cb:88:80:2a:04:58:6f:7b:be:39:
         b4:3b:34:b3:e2:ad:72:c1:f1:78:19:33:94:18:e4:ff:cf:e7:
         97:f8:a5:e3:7e:8e:55:8b:0b:49:b0:4e:01:96:45:ec:a0:c8:
         2a:54:f4:73:d5:dd:9d:5d:8d:1e:53:a7:51:49:85:c5:ec:54:
         16:45:6d:1e:2c:b5:b8:e9:ed:3b:6b:55:b5:bc:97:13:bc:57:
         3a:15:84:59:39:b6:ec:95:85:ed:6b:0f:ef:68:42:52:81:da:
         f6:40:be:61:61:f5:9d:59:80:a3:83:f7:d0:a4:1c:2e:a6:06:
         f0:a9:0b:2a:11:82:67:f3:88:d6:5a:57:8d:e5:9b:45:51:32:
         bf:d4:0b:46:db:af:03:f4:36:6d:f0:3e:1c:62:89:1b:ca:a2:
         48:b5:c3:d4:7b:82:5f:34:da:16:63:90:1a:84:03:c3:b6:57:
         b6:0e:75:f3:4f:c7:f5:bd:4f:6c:04:0e:46:d4:ca:44:2f:75:
         ac:35:c6:31:e6:89:e5:02:e8:20:7a:72:02:dd:40:0d:94:4d:
         9c:72:a0:43
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVSaoFGx5pLV36wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
ZjUyN2JhNTctZTI3Ny00MmQ0LWE4NGMtYjgyMWNhYWU3MGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifiSrREgvJ0NXjwPJt+dWM/rD7LpF7jkYPAY
k1TRogBf+Z9wUGTgQiNLa3DaABTNIcCRKmwCOkrgLcN9FbQf35KIOERLzlndCvNE
Gr44O+t1JsRNi/Y+Mfwud5EzZdanQrZqTpUsMyAzfDBAAU3m9IBLRlyRQPeM5jie
yI3kEaU38Fn0c/gxPi+nBqQDmbqJjC7PQk6m2+2w3QtJANmUdwAoCb0BxH+NQE07
53Krl5+9+3Iimoi2uzKFna0HV5XuNm7cPICS64SBZWKfUIfzGnUIFZ1m6Is0d3et
IMYFocO0Ne2ENdT/8UG377IipDP77jpWi1Yi0JpRaBjzMlNgkQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEcA8UBaXddK6/DKUqIRugd0qU38MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWU0NmMwNDQtMzliNS0z
YzI4LWFlZTItOTMzOGViZDViOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/VaJPKSuCFuMXHEsj2ykeeu0RgULkD/on8WVo
05HNOmtYjthKIT2OaSOjPMuIgCoEWG97vjm0OzSz4q1ywfF4GTOUGOT/z+eX+KXj
fo5ViwtJsE4BlkXsoMgqVPRz1d2dXY0eU6dRSYXF7FQWRW0eLLW46e07a1W1vJcT
vFc6FYRZObbslYXtaw/vaEJSgdr2QL5hYfWdWYCjg/fQpBwupgbwqQsqEYJn84jW
WleN5ZtFUTK/1AtG268D9DZt8D4cYokbyqJItcPUe4JfNNoWY5AahAPDtle2DnXz
T8f1vU9sBA5G1MpEL3WsNcYx5onlAuggenIC3UANlE2ccqBD
-----END CERTIFICATE-----