Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/289cadc9-0163-35f2-be04-4cda10892c79.roa
File:                     289cadc9-0163-35f2-be04-4cda10892c79.roa (raw, json)
Hash identifier:          gYsnpRXwv69AFJJ/87CjJMoWF1zXSPRK4A8I38/SMvw=
Subject key identifier:   0F:7E:C9:25:CB:74:FB:FE:E6:68:21:47:5C:E5:FB:29:1F:6B:7C:48
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806450E7665C1FCFD7F3C5020
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/289cadc9-0163-35f2-be04-4cda10892c79.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396555
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:0e:76:65:c1:fc:fd:7f:3c:50:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=41101d0b-c20f-4e8f-bcab-9db09fbd02d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:82:b6:85:02:17:8b:aa:cf:5e:66:92:ae:
                    08:cb:45:b3:9c:e5:86:30:17:0e:55:4c:75:5f:a3:
                    f6:79:41:c7:01:dd:75:26:33:12:3e:c3:32:f2:78:
                    14:03:bd:ce:c3:63:a9:bb:6c:83:13:66:6f:ba:00:
                    b1:02:b9:be:da:81:cd:af:36:57:13:e2:75:09:d4:
                    9e:52:ff:86:c8:8e:6a:7b:4f:46:1e:38:95:6c:20:
                    b4:e5:18:5f:3b:98:47:fa:0e:21:c8:e5:95:07:88:
                    ef:10:bc:0d:61:32:86:be:66:1d:ee:b4:06:2f:80:
                    e9:02:c6:36:4c:10:22:d8:3b:83:9d:a5:9b:10:01:
                    84:4a:7f:d6:41:ca:85:e9:a7:1f:ad:d1:13:7d:0f:
                    26:30:35:0d:3f:ae:84:6d:ed:72:2b:8b:dc:57:ee:
                    de:a3:3d:6f:1e:66:a2:4c:9a:b7:2d:d1:e0:69:a5:
                    d0:1f:f8:4b:b2:8e:14:11:fe:fe:3a:a7:bb:e8:d4:
                    b8:f6:c7:56:86:8a:69:80:08:f8:a7:40:f8:0b:5f:
                    2b:1c:52:9b:28:91:2e:69:58:de:7e:f2:55:95:2a:
                    13:af:a7:67:a1:63:9f:56:bf:24:d0:39:3a:2d:9d:
                    2f:3b:84:97:d5:da:22:80:0f:cb:16:63:68:96:31:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:C9:25:CB:74:FB:FE:E6:68:21:47:5C:E5:FB:29:1F:6B:7C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/289cadc9-0163-35f2-be04-4cda10892c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:59:d7:03:d1:ce:b5:4a:91:a7:f1:8c:9b:f8:b6:03:fc:1e:
         d4:71:9f:d1:44:79:0e:b1:da:f2:b2:3a:79:e0:c9:05:74:83:
         a9:8f:16:34:48:21:dc:a0:05:6d:34:17:5e:39:33:dd:6b:c8:
         f7:65:1b:9f:54:2a:48:7e:4f:29:98:7e:9e:42:9c:18:7c:2b:
         76:b1:12:21:f8:3e:20:c0:dd:99:00:f2:25:a1:1a:df:9d:07:
         f3:cd:68:e7:6f:92:5b:2b:bd:26:af:db:89:18:08:f0:df:fe:
         34:88:f4:61:c4:c2:7b:69:0f:6d:6e:e2:ce:46:9d:46:51:00:
         6c:25:e2:a9:ce:77:16:48:e5:5b:5c:ff:a0:c8:2d:d2:2a:89:
         8b:83:ed:71:96:1c:be:4f:64:e3:43:65:fc:8e:34:5d:71:dc:
         40:44:a8:cc:b6:2f:48:23:7a:ec:7b:a9:ad:37:18:b0:dc:78:
         aa:4c:cb:45:6d:5f:84:69:4b:76:12:7a:be:d4:e4:81:8c:88:
         e6:db:24:4a:36:f7:ad:73:74:df:40:6e:db:33:4d:4e:0c:7e:
         f3:54:36:89:c6:81:f6:64:f6:ec:96:58:fc:e0:04:b3:1b:8a:
         06:ba:49:d9:07:72:f0:35:27:e6:34:17:a9:70:dd:0e:aa:92:
         70:d9:ea:aa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgGRQ52ZcH8/X88UCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NDExMDFkMGItYzIwZi00ZThmLWJjYWItOWRiMDlmYmQwMmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCyCtoUCF4uqz15mkq4Iy0WznOWGMBcOVUx1
X6P2eUHHAd11JjMSPsMy8ngUA73Ow2Opu2yDE2ZvugCxArm+2oHNrzZXE+J1CdSe
Uv+GyI5qe09GHjiVbCC05RhfO5hH+g4hyOWVB4jvELwNYTKGvmYd7rQGL4DpAsY2
TBAi2DuDnaWbEAGESn/WQcqF6acfrdETfQ8mMDUNP66Ebe1yK4vcV+7eoz1vHmai
TJq3LdHgaaXQH/hLso4UEf7+Oqe76NS49sdWhoppgAj4p0D4C18rHFKbKJEuaVje
fvJVlSoTr6dnoWOfVr8k0Dk6LZ0vO4SX1doigA/LFmNoljEhEQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA9+ySXLdPv+5mghR1zl+ykfa3xIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjg5Y2FkYzktMDE2My0z
NWYyLWJlMDQtNGNkYTEwODkyYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA+WdcD0c61SpGn8Yyb+LYD/B7UcZ/RRHkOsdry
sjp54MkFdIOpjxY0SCHcoAVtNBdeOTPda8j3ZRufVCpIfk8pmH6eQpwYfCt2sRIh
+D4gwN2ZAPIloRrfnQfzzWjnb5JbK70mr9uJGAjw3/40iPRhxMJ7aQ9tbuLORp1G
UQBsJeKpzncWSOVbXP+gyC3SKomLg+1xlhy+T2TjQ2X8jjRdcdxARKjMti9II3rs
e6mtNxiw3HiqTMtFbV+EaUt2Enq+1OSBjIjm2yRKNvetc3TfQG7bM01ODH7zVDaJ
xoH2ZPbsllj84ASzG4oGuknZB3LwNSfmNBepcN0OqpJw2eqq
-----END CERTIFICATE-----
Generated at Thu May 8 15:12:43 2025 by rpki-client