Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa
File:                     343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa (raw, json)
Hash identifier:          L8XZmJA9WiSyrKFeBoW7SqOF43ogAX5qze/kJHKoa2I=
Subject key identifier:   78:49:1F:AB:69:E7:63:35:9F:C7:4A:C0:67:84:3D:DD:99:28:2F:F5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A97DC8D02510A82511D80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     36623
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:97:dc:8d:02:51:0a:82:51:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=97351aab-c285-40e7-b3cc-30e28a223677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:c6:32:b6:d6:52:23:7e:0a:c2:13:95:fa:
                    f4:85:c4:00:35:65:a3:72:5d:76:37:7f:0c:3e:2b:
                    cd:27:ae:b7:22:66:fa:d8:8e:60:6a:34:e7:a4:78:
                    11:68:2f:f8:20:ea:b7:fd:1e:5e:14:9f:9b:ef:55:
                    6a:2b:7b:eb:4a:80:e7:46:1d:c3:0e:24:00:c4:05:
                    20:fd:fa:b7:0d:c1:87:9e:ab:4f:cd:35:35:cd:ec:
                    69:d4:11:96:ab:27:d5:c2:43:b6:00:7e:f5:41:74:
                    63:c1:c2:10:86:d0:29:72:c9:8e:00:a7:18:0d:1d:
                    6d:7b:85:9d:f3:c1:79:02:21:12:88:f2:e2:f2:df:
                    56:4d:61:5f:43:98:2f:95:1b:ae:9f:6e:38:b0:e4:
                    71:6e:d5:9b:8d:5e:ef:f6:86:22:f2:6b:b5:e2:45:
                    52:1b:f2:6b:43:f4:3c:2b:6c:f2:27:fc:b0:cc:99:
                    5f:2f:89:c5:95:0f:e4:de:7a:20:69:49:82:ea:4e:
                    3d:be:cb:e3:72:ab:bb:74:84:0a:09:dc:f7:e6:a0:
                    da:a2:82:58:39:21:67:09:0d:5d:63:4a:a6:61:7b:
                    bf:60:3e:80:9a:32:a0:b0:f9:9c:c4:82:db:bd:99:
                    fc:ed:b3:56:e2:2c:86:f8:dd:76:db:93:00:19:c5:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:49:1F:AB:69:E7:63:35:9F:C7:4A:C0:67:84:3D:DD:99:28:2F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/343bf4db-a103-3bc0-b1d3-e43f00d5e4ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:ad:8a:63:a4:4a:e5:a1:6c:ac:2f:df:04:1e:5e:9a:a8:
         c4:02:d0:0b:fa:fa:82:6a:88:9d:94:62:09:98:77:4b:fe:80:
         3f:5a:d7:ed:6f:8c:45:2a:99:17:f7:19:43:b0:dc:b3:c2:c8:
         fa:26:9f:4e:1c:8d:a6:99:e0:2c:be:6e:b4:ff:98:6c:f3:a9:
         59:30:85:f9:52:0a:49:a6:48:45:40:8f:5b:10:6d:56:f2:0c:
         e4:ad:2a:6d:2b:f6:d5:f9:9a:00:cf:66:8c:1c:08:e3:9d:4f:
         40:a0:42:b1:23:fe:9f:00:cd:be:b9:fa:0a:e1:a0:24:46:fe:
         b6:48:a6:3a:dd:e9:d1:d8:57:45:98:5a:ec:08:cf:09:19:98:
         d6:8e:a1:d5:42:ab:a9:99:21:87:67:a6:3b:04:2a:fc:de:05:
         ab:78:27:08:4d:09:aa:cc:be:07:f1:4a:f6:1f:eb:9b:b2:cf:
         28:1e:8f:5b:d9:e8:fb:e1:2c:16:96:e8:f9:8d:08:92:4c:fe:
         1d:59:91:44:a0:90:88:06:d2:f0:c9:ea:e8:e6:64:ef:99:d6:
         da:2d:43:49:1d:bd:b3:52:d0:1e:e6:50:c6:40:03:02:33:2b:
         77:0f:c7:6e:af:5e:fa:08:82:e4:7f:19:00:53:e1:1b:a2:b2:
         cd:e8:3f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:26:16 2025 by rpki-client