Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa
File:                     28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa (raw, json)
Hash identifier:          T5kHML7L0iL2UvtymvaLF9/BwzztQYQiNxSIvdoMveY=
Subject key identifier:   83:C3:41:B1:17:C6:2D:31:8B:01:37:15:D6:45:AA:FB:89:35:BE:3F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD689B34C5028C962CE80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     397202
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d6:89:b3:4c:50:28:c9:62:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=dce15af8-2dec-43ff-a51d-1af1da385de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:a0:08:f7:77:be:99:f0:db:cd:26:9d:71:
                    0b:07:da:9f:5b:74:67:9b:a5:71:99:58:06:7e:23:
                    17:3f:10:17:5c:6a:3b:db:47:b7:67:c2:47:49:7a:
                    e7:22:9a:82:c9:01:c8:ff:75:aa:ca:71:d3:8c:9c:
                    f2:24:41:40:b3:b4:bb:12:92:9f:b5:b1:50:b4:33:
                    6c:16:1e:0f:88:48:82:fd:fb:04:26:8b:ee:d8:06:
                    00:d6:24:68:86:29:bf:bb:fc:a4:fb:c8:f7:e8:34:
                    6d:85:08:73:c5:44:c0:e4:84:71:c4:03:9c:5b:34:
                    6a:e3:6a:dc:7e:71:8a:01:bd:c7:5b:e7:cd:9a:1b:
                    fd:3d:8f:ab:8f:d6:d3:88:57:42:31:53:19:dd:23:
                    0c:cb:5a:ff:fc:4d:40:2b:34:0d:51:ab:c9:1a:29:
                    e5:86:ca:33:32:43:b4:e7:45:46:21:79:cc:cd:bc:
                    e1:3d:e0:67:26:19:53:ca:55:c2:b1:8a:86:bd:42:
                    c6:a0:fe:80:fb:9d:1c:fd:8a:68:86:20:e6:70:30:
                    8d:e4:a5:0d:5a:5c:a1:cc:ad:f7:52:f2:d1:68:6b:
                    fa:e9:cc:52:c8:e8:e2:e4:c3:b5:91:67:7c:cc:8f:
                    3e:57:5f:21:a6:d9:34:38:e5:98:a0:11:90:43:64:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C3:41:B1:17:C6:2D:31:8B:01:37:15:D6:45:AA:FB:89:35:BE:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28464c60-d2e4-3b92-a2e2-c88f1defcf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:36:18:31:94:ac:ad:a4:22:38:11:34:18:27:10:ea:e5:fb:
         4a:09:46:7e:3f:8e:c0:37:42:4a:ac:61:e2:30:19:4e:b4:a9:
         c8:aa:f5:ca:8f:81:6f:30:6f:c4:21:3c:14:a3:8c:ff:34:1a:
         d0:05:90:8f:a8:22:e1:3d:2b:3d:c0:4c:1d:39:6d:71:4e:5d:
         87:01:81:11:c9:84:e6:a7:21:18:b9:f8:3d:9d:1d:ed:d3:be:
         c5:a1:92:5a:52:5e:c8:56:0a:f1:38:e8:00:86:66:79:7b:43:
         74:ec:db:a0:60:69:44:49:74:40:1a:64:e9:08:d5:c0:ec:48:
         68:9d:85:a5:25:d4:a6:b7:16:a6:84:0d:4a:e4:d2:d9:9f:32:
         7b:63:ea:4c:31:86:00:04:02:95:a4:04:c1:3d:0f:c2:e4:05:
         42:45:be:71:f5:92:2d:74:20:5e:65:09:1e:b8:e6:85:a2:ff:
         da:f0:2b:db:70:ec:23:b3:2e:dd:30:c9:4c:60:aa:f5:7d:8b:
         59:38:d2:b2:83:63:4f:db:3a:ca:72:b4:b2:7a:05:75:e2:96:
         aa:7b:e1:8a:b6:6d:89:c3:0c:ba:f3:fe:5f:98:25:ef:fe:fd:
         18:a6:5f:c0:24:aa:e3:80:30:9a:c5:ee:d6:e4:43:07:36:8f:
         d5:91:2e:d4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEg56taJs0xQKMlizoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZGNlMTVhZjgtMmRlYy00M2ZmLWE1MWQtMWFmMWRhMzg1ZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEygCPd3vpnw280mnXELB9qfW3Rnm6VxmVgG
fiMXPxAXXGo720e3Z8JHSXrnIpqCyQHI/3WqynHTjJzyJEFAs7S7EpKftbFQtDNs
Fh4PiEiC/fsEJovu2AYA1iRohim/u/yk+8j36DRthQhzxUTA5IRxxAOcWzRq42rc
fnGKAb3HW+fNmhv9PY+rj9bTiFdCMVMZ3SMMy1r//E1AKzQNUavJGinlhsozMkO0
50VGIXnMzbzhPeBnJhlTylXCsYqGvULGoP6A+50c/YpohiDmcDCN5KUNWlyhzK33
UvLRaGv66cxSyOji5MO1kWd8zI8+V18hptk0OOWYoBGQQ2SuYwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIPDQbEXxi0xiwE3FdZFqvuJNb4/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg0NjRjNjAtZDJlNC0z
YjkyLWEyZTItYzg4ZjFkZWZjZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApNhgxlKytpCI4ETQYJxDq5ftKCUZ+P47AN0JK
rGHiMBlOtKnIqvXKj4FvMG/EITwUo4z/NBrQBZCPqCLhPSs9wEwdOW1xTl2HAYER
yYTmpyEYufg9nR3t077FoZJaUl7IVgrxOOgAhmZ5e0N07NugYGlESXRAGmTpCNXA
7EhonYWlJdSmtxamhA1K5NLZnzJ7Y+pMMYYABAKVpATBPQ/C5AVCRb5x9ZItdCBe
ZQkeuOaFov/a8CvbcOwjsy7dMMlMYKr1fYtZONKyg2NP2zrKcrSyegV14paqe+GK
tm2Jwwy68/5fmCXv/v0Ypl/AJKrjgDCaxe7W5EMHNo/VkS7U
-----END CERTIFICATE-----
Generated at Wed May 14 06:31:41 2025 by rpki-client