Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa
File:                     286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa (raw, json)
Hash identifier:          5CHuWe3sdErR7ZaKGLc4vWrcQHqtQzMimMJbllznN00=
Subject key identifier:   29:B7:85:F8:A5:40:1E:47:6A:D2:8A:4E:A5:5C:C9:CA:74:EF:49:59
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6C38AB0A0EC7422D2540
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396595
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6c:38:ab:0a:0e:c7:42:2d:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=89d7e8e5-235e-4ab6-af8d-f9717dfe8fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:30:3d:eb:6a:45:72:ab:02:ab:e2:9b:12:
                    90:b9:24:dd:4e:f8:96:7d:0c:74:fd:0f:dc:2c:c2:
                    8e:b3:e0:5b:5c:6b:ec:f1:54:c0:4e:4a:76:e0:93:
                    59:b7:09:2f:cb:83:88:c6:97:6c:2e:22:74:46:ab:
                    7d:12:37:90:c1:13:96:02:3f:bc:01:60:dd:dc:1e:
                    79:ca:87:5f:64:db:59:c6:08:40:97:f1:16:ae:a9:
                    d3:c2:89:38:21:4d:d4:9f:51:ab:af:02:db:11:f2:
                    ed:d5:5c:c8:49:74:5d:21:37:bb:3d:9c:b7:77:b8:
                    c8:0b:33:2f:bf:a1:31:b3:1e:87:55:b8:5f:39:58:
                    31:5b:56:f8:02:a0:b3:c4:6c:4b:24:88:2a:bb:3c:
                    06:51:8e:ae:f4:b9:2e:30:b4:76:6b:5f:1c:fc:1d:
                    2f:b8:90:8e:19:36:9f:cd:b3:75:0c:ff:5a:db:f0:
                    85:cc:5f:ba:6f:cb:8d:75:63:7f:df:99:a9:dd:08:
                    e9:c5:e8:c1:30:24:a6:72:71:d9:b2:d8:3e:21:88:
                    66:70:fb:e0:ce:e2:4b:5f:00:ff:56:ab:87:18:9b:
                    2f:76:37:73:a4:62:47:30:9b:ab:68:31:92:2d:f7:
                    0a:1d:59:86:48:0a:07:29:bc:37:73:c0:b4:00:27:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B7:85:F8:A5:40:1E:47:6A:D2:8A:4E:A5:5C:C9:CA:74:EF:49:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/286ea08e-00cc-3c31-b0e1-d3705e506f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:88:a2:6a:26:54:99:5f:c8:8c:b7:34:d6:62:43:ff:d8:14:
         b7:42:10:c5:d1:cc:81:bb:64:04:24:b3:18:3f:f6:cc:6d:17:
         97:e8:6c:f7:d0:0e:e9:90:64:31:cc:10:5b:fa:04:b3:e1:4c:
         ec:a0:f3:78:8c:f8:0b:6f:81:d4:b3:fd:b4:50:96:69:36:1e:
         e9:85:e1:1f:54:82:ab:d0:1a:10:3b:27:9a:72:01:4f:3b:97:
         ee:fc:e6:12:49:92:0b:c6:e2:3a:be:13:1d:73:23:c2:87:73:
         88:8c:6e:48:27:08:15:b8:34:8a:5c:8d:a5:15:6b:09:48:bb:
         f1:8f:5c:76:5a:f7:bc:fd:e9:de:be:ea:92:a1:6f:67:75:17:
         21:81:51:59:a0:e8:dd:6a:ef:ab:c6:b2:40:af:e7:27:16:f3:
         15:47:24:40:08:c1:54:7b:70:fa:6e:85:19:44:99:5c:d0:f5:
         96:66:e9:5d:07:27:87:b8:c2:9f:ea:32:8d:4b:e7:44:6f:c7:
         dd:ca:48:31:6e:ac:0f:cc:45:ee:65:51:64:97:ce:2f:9f:fc:
         dd:4c:4b:be:61:e2:9e:02:21:81:da:74:09:3e:ad:f8:96:94:
         e3:4e:07:77:89:70:67:94:90:a7:53:1e:1d:4a:4c:4f:12:7a:
         af:cf:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:52 2025 by rpki-client