Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa
File:                     30c97a7a-df06-3c9d-8337-4deb980ffa39.roa (raw, json)
Hash identifier:          KOLmsHiiwPCO92pJbwNEh0q1qnu4gXpOSZF6oV636kQ=
Subject key identifier:   06:79:12:E7:A4:09:01:BF:D9:3B:38:BC:7B:6B:3B:70:2E:EB:62:B0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858480645144F22A6CA8912C2390C
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396595
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:14:4f:22:a6:ca:89:12:c2:39:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=77a380f9-8f36-46ee-a1a1-0be5bc75ef13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:98:7b:64:d4:e9:56:0e:88:a9:7d:17:7d:51:
                    6c:46:48:27:ec:2f:19:d8:36:f2:0f:8c:6b:b1:34:
                    fc:04:67:f7:2f:0b:65:69:8e:98:71:f4:56:85:0c:
                    4a:87:dd:d4:7b:13:4a:33:da:6f:97:f7:45:e3:6f:
                    65:bc:5d:38:d4:c0:76:a4:eb:c1:40:10:00:6c:a9:
                    3a:ae:50:49:c0:d0:af:e9:be:6d:d0:be:b3:f6:3a:
                    81:3c:67:ae:7a:ee:51:dd:2e:d8:d7:d9:df:16:e9:
                    a8:b5:fe:ad:67:d3:14:3c:8f:12:a4:95:cd:ad:61:
                    06:50:6e:39:f0:c5:89:ba:94:24:06:18:a6:4e:3c:
                    87:31:49:10:21:31:a1:9f:87:e2:86:54:de:84:82:
                    44:2e:9e:5c:5e:dd:bd:52:f7:f1:aa:60:fd:b4:01:
                    cb:ef:24:b8:8c:d2:a6:0e:91:13:ff:51:fb:6d:c1:
                    90:5a:25:3c:96:8d:e9:73:b6:71:16:ca:52:c2:4e:
                    ef:1f:58:1c:d8:17:71:c5:71:a9:a0:5b:2a:e9:f8:
                    5c:e9:3e:2b:45:9a:91:80:70:a6:c8:41:41:7e:bb:
                    f7:f6:31:45:ae:13:79:e1:99:76:44:87:5e:57:f5:
                    54:17:11:94:de:18:b5:54:8d:cc:ba:9c:f1:13:5e:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:79:12:E7:A4:09:01:BF:D9:3B:38:BC:7B:6B:3B:70:2E:EB:62:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/30c97a7a-df06-3c9d-8337-4deb980ffa39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:56:f3:a5:ff:71:e6:4e:6b:08:25:61:c5:2f:73:7f:b4:f5:
         37:2d:e2:26:39:ae:53:f1:f4:51:ab:04:fa:39:7e:4b:bb:26:
         97:96:0a:8b:8e:ca:9e:88:ea:07:f0:ac:55:9e:9e:48:45:3b:
         62:ea:2b:46:2e:bf:37:c6:ec:f7:c1:45:c9:c0:50:2c:5c:1f:
         00:f1:9f:5b:8c:cc:dc:e3:e4:10:0c:75:7a:26:26:04:35:68:
         c2:3b:b7:52:e6:c3:0b:0f:2d:60:73:6e:27:46:99:43:c1:34:
         86:62:0a:16:7b:c3:1c:a3:e4:f2:b8:f6:5b:61:5c:ec:ab:48:
         f4:fc:92:c4:6f:f0:e9:1b:55:8b:fb:15:7c:24:e2:c6:27:37:
         e9:29:ae:1a:32:98:aa:00:c3:a5:14:c4:93:55:8f:ad:d7:75:
         5d:6b:4b:0f:1f:26:52:eb:96:de:5c:59:cd:89:39:0b:c9:30:
         85:0e:0b:49:d0:5a:a1:3e:c4:1b:ca:e4:bc:7b:27:9a:d3:6b:
         06:b0:42:ec:07:57:5d:81:fa:80:43:0b:23:c7:6f:5b:34:e5:
         35:54:28:07:bc:09:0b:de:e1:ba:e8:73:54:14:43:aa:5b:b5:
         19:5a:28:5a:cf:7a:c9:5d:4b:b8:7a:b8:59:3c:0f:0d:f6:43:
         46:f2:32:eb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgGRRRPIqbKiRLCOQwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
NzdhMzgwZjktOGYzNi00NmVlLWExYTEtMGJlNWJjNzVlZjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJh7ZNTpVg6IqX0XfVFsRkgn7C8Z2DbyD4xr
sTT8BGf3LwtlaY6YcfRWhQxKh93UexNKM9pvl/dF429lvF041MB2pOvBQBAAbKk6
rlBJwNCv6b5t0L6z9jqBPGeueu5R3S7Y19nfFumotf6tZ9MUPI8SpJXNrWEGUG45
8MWJupQkBhimTjyHMUkQITGhn4fihlTehIJELp5cXt29UvfxqmD9tAHL7yS4jNKm
DpET/1H7bcGQWiU8lo3pc7ZxFspSwk7vH1gc2BdxxXGpoFsq6fhc6T4rRZqRgHCm
yEFBfrv39jFFrhN54Zl2RIdeV/VUFxGU3hi1VI3MupzxE177XQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAZ5EuekCQG/2Ts4vHtrO3Au62KwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzBjOTdhN2EtZGYwNi0z
YzlkLTgzMzctNGRlYjk4MGZmYTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB8VvOl/3HmTmsIJWHFL3N/tPU3LeImOa5T8fRR
qwT6OX5LuyaXlgqLjsqeiOoH8KxVnp5IRTti6itGLr83xuz3wUXJwFAsXB8A8Z9b
jMzc4+QQDHV6JiYENWjCO7dS5sMLDy1gc24nRplDwTSGYgoWe8Mco+TyuPZbYVzs
q0j0/JLEb/DpG1WL+xV8JOLGJzfpKa4aMpiqAMOlFMSTVY+t13Vda0sPHyZS65be
XFnNiTkLyTCFDgtJ0FqhPsQbyuS8eyea02sGsELsB1ddgfqAQwsjx29bNOU1VCgH
vAkL3uG66HNUFEOqW7UZWihaz3rJXUu4erhZPA8N9kNG8jLr
-----END CERTIFICATE-----