Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29abc896-7272-3200-bc2e-55c67b302c5b.roa
File:                     29abc896-7272-3200-bc2e-55c67b302c5b.roa (raw, json)
Hash identifier:          +sArYoASb/91lnYcmbWZQQeK/X9eKH9TPk7fBgVfPzU=
Subject key identifier:   74:0C:DB:4B:7F:2C:1B:DD:3B:CB:D5:90:5B:D1:A0:32:9C:D3:3D:1C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A99DB360223CC52CB7400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29abc896-7272-3200-bc2e-55c67b302c5b.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     22547
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:99:db:36:02:23:cc:52:cb:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=d51b131e-e1a6-4c49-9dfd-d5774eb09fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:d8:e3:23:22:e0:e5:ac:2f:d9:1f:f2:fa:
                    ba:a0:d1:9a:c3:8f:0f:68:bb:49:f2:33:b1:7e:60:
                    35:8e:2c:e9:96:f5:82:39:bd:d0:3c:4c:81:be:52:
                    55:da:51:79:33:92:b3:ef:f0:d2:06:3a:a2:20:48:
                    ca:0a:6b:fe:99:97:51:2d:a0:8e:1b:7a:2d:68:e6:
                    09:65:69:0b:96:12:51:d5:86:11:7e:fa:57:96:32:
                    01:3e:2e:7d:30:50:f3:c6:2f:76:36:6d:bb:bc:bc:
                    ae:57:02:29:a8:5c:68:24:e6:3c:b5:61:06:26:3a:
                    9f:2c:37:27:e1:56:01:f3:89:29:4e:39:63:b1:de:
                    c8:1c:bd:e0:1e:56:81:e9:2b:11:5b:11:d0:a0:32:
                    bb:3c:2d:e7:ba:16:1c:b7:2c:d2:58:74:4a:82:e9:
                    7c:8d:75:fd:bb:0d:e0:9d:81:46:b2:c4:ac:f0:d8:
                    87:c6:9c:03:f0:43:1b:45:df:e5:2a:fd:02:03:89:
                    a6:17:a2:dc:db:b1:91:f9:05:a2:ae:a5:48:e4:f7:
                    ce:c1:55:95:84:ad:75:4e:bb:42:e2:cc:5d:9d:4a:
                    11:e5:11:dc:a1:02:40:8b:06:cc:94:d1:9b:44:d1:
                    9b:20:ad:57:f9:97:15:da:31:f0:36:9c:3f:40:64:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0C:DB:4B:7F:2C:1B:DD:3B:CB:D5:90:5B:D1:A0:32:9C:D3:3D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/29abc896-7272-3200-bc2e-55c67b302c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:1a:b4:6c:24:53:14:4c:68:52:0a:1e:a9:b0:2c:b6:9f:
         0d:31:9f:a4:e1:d3:df:3a:c4:1c:c2:fd:11:05:65:45:d0:51:
         52:0f:4a:86:cb:63:1a:12:10:8d:dc:a1:05:73:65:82:ba:6e:
         21:b0:c5:3f:21:28:73:c6:c4:04:da:39:c3:47:0c:fb:f3:7d:
         e8:71:93:7b:a9:2d:ca:97:84:dc:e6:51:83:ac:7a:a7:61:de:
         33:e0:ef:8a:3e:cf:85:e2:64:35:d7:57:6b:00:b6:48:1a:61:
         a0:d0:5f:27:10:e7:cc:d0:e0:c3:be:ec:a0:6d:b7:31:3a:5c:
         79:3b:14:05:bb:48:b5:9b:31:57:5b:66:2b:e3:c0:ce:46:3b:
         70:ce:42:4b:5a:58:68:4c:cc:0b:34:5d:dd:b6:fd:6e:30:53:
         7a:e6:a1:aa:af:5c:ac:77:66:8c:2a:4d:ef:07:96:9e:28:b0:
         81:54:da:37:0a:c9:fb:ea:c6:93:d3:d8:3d:93:89:27:a0:cd:
         04:2e:d7:45:fc:f6:93:2c:ce:40:a7:15:57:21:cf:99:ea:fe:
         cc:aa:0a:42:37:b2:a0:77:22:33:d7:a3:b7:72:25:af:27:e3:
         46:fb:9e:7c:e9:f3:50:39:1b:c0:4b:1e:49:22:0f:92:fd:c9:
         1b:dc:24:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:44:01 2025 by rpki-client