Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa
File:                     2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa (raw, json)
Hash identifier:          WfBdSmF7+AOsGLDFxJhXqpy0R9eOQHfPjsr06R3AEw4=
Subject key identifier:   C1:7E:1D:94:7F:39:30:8E:07:7F:C4:E8:B1:B7:B2:B1:89:08:7A:22
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EADAD85B25274E55B7D800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     396570
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:da:d8:5b:25:27:4e:55:b7:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=f05ccdc9-cfa8-490f-9002-5381607dfa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ba:bf:f7:a8:39:53:47:29:dc:d7:29:3c:a6:
                    c7:09:83:4d:6c:a0:f2:af:46:df:63:e8:34:90:a2:
                    ec:49:76:40:13:d5:2e:3b:11:49:1c:ed:20:24:25:
                    bf:6c:c5:46:e3:29:0e:9a:65:3b:f8:ee:6f:ae:69:
                    c1:50:56:71:9a:a1:c9:85:e2:43:26:96:e7:21:08:
                    f9:44:09:c5:f1:eb:1e:ae:ec:80:59:c9:5f:0f:d1:
                    c0:53:da:a6:c3:cc:2f:f3:a7:f8:b6:42:74:8c:dd:
                    01:47:34:2b:64:e4:42:14:d3:80:6f:c9:6c:c3:f7:
                    89:89:c0:2b:0a:85:dc:92:c0:76:d5:f2:02:ea:ad:
                    e9:1d:b2:71:5a:21:0d:60:5e:8d:11:f9:be:f0:9f:
                    91:34:eb:58:12:54:b1:8b:73:86:8d:f8:cf:02:76:
                    ab:b6:47:5e:4c:7a:a6:30:d3:60:6f:b9:d5:be:31:
                    07:1d:e4:5a:d0:a8:ac:3d:0b:da:59:86:bc:7f:a9:
                    19:0e:96:cc:47:24:cb:2a:83:5d:bd:ea:c7:bf:44:
                    d7:f7:7e:47:ba:80:cc:7b:86:ad:f1:8a:7b:6c:44:
                    65:a7:d9:86:29:8f:d9:29:73:46:24:08:95:08:ed:
                    66:08:d1:8f:b5:5b:b7:05:de:91:09:aa:be:7c:7a:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7E:1D:94:7F:39:30:8E:07:7F:C4:E8:B1:B7:B2:B1:89:08:7A:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2ed0ff1c-bf29-38bb-b229-b81e04e1ab05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:df:17:bb:f6:ac:12:cf:f1:b0:09:bd:09:45:11:f4:92:d2:
         a6:95:ce:95:7d:a3:3e:ea:1f:7a:a7:95:9e:ac:9c:0b:5a:7b:
         d3:8a:48:24:46:b6:cd:b7:21:46:cc:ee:b4:d4:48:32:66:34:
         17:d5:e7:62:0f:60:57:0c:11:36:fb:41:ce:f4:9d:38:a9:70:
         c0:f2:11:87:57:a3:b9:8f:17:87:67:e2:32:05:b5:a5:82:7d:
         50:33:a2:12:ac:52:05:1a:27:fc:30:3b:4c:fb:35:6f:3a:e9:
         3e:b4:a6:be:30:76:86:c2:05:a7:55:9c:f3:5e:28:86:c5:60:
         21:47:25:2a:ba:d3:ac:d3:73:eb:67:d4:fc:8e:7c:20:d0:41:
         dc:0e:45:ee:b5:b3:ae:eb:c8:39:c1:1f:6d:0c:e7:47:ac:2c:
         ba:d8:91:09:ba:c7:33:00:0d:f2:6c:c9:2c:eb:d7:ab:7d:c6:
         eb:30:0c:6e:7e:52:9b:1b:a9:6b:08:4c:f0:69:23:98:48:cc:
         cf:ea:51:2b:df:9e:b1:64:b9:da:43:ae:38:e1:8e:07:93:df:
         3a:da:c2:cc:b1:2d:51:9f:33:e2:63:2d:e6:21:5a:a1:fb:b5:
         10:78:df:7c:b7:c4:65:61:2a:d5:00:ec:2c:c0:68:f5:89:14:
         90:23:7e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:29:56 2025 by rpki-client