Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa
File:                     3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa (raw, json)
Hash identifier:          TiHy7aAkG2vPHX+yRpAsxwKdN4Q00GLIbbntswNcvvI=
Subject key identifier:   1A:EC:2F:8A:C8:ED:BF:96:5E:83:10:E5:51:3E:7D:8E:35:9C:7E:78
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806451B5889661C2166C413EE
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     36628
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:1b:58:89:66:1c:21:66:c4:13:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=76aeb42c-2e21-42a7-8adf-d47e747b0101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:07:c8:31:94:c5:0f:54:a0:73:79:55:1d:5c:
                    ab:b4:1b:b7:72:6a:f5:2f:4b:1d:fb:70:c4:6b:c1:
                    a9:57:77:da:c4:b2:b8:a4:8d:27:d8:d4:de:81:c2:
                    7f:21:06:71:7e:3e:55:16:4c:a9:b8:a3:03:78:76:
                    e9:12:3e:82:7b:47:87:be:7d:40:6e:06:f2:4f:f0:
                    55:94:24:9c:bf:dc:04:27:0a:09:36:03:d2:a1:dd:
                    b4:8c:3a:e6:e5:fb:8d:d7:b9:a9:0b:72:0c:43:34:
                    24:e5:e1:50:e9:ec:81:80:73:99:32:28:49:f5:9f:
                    f3:bc:bb:ed:da:c4:ed:df:45:d4:25:0d:53:b6:87:
                    18:05:ec:91:00:1d:f6:50:5b:38:fa:65:c5:05:44:
                    49:7e:53:83:f5:61:2b:b3:34:74:86:49:50:48:05:
                    9f:3f:b2:a8:c9:8b:70:5b:6b:50:18:5b:e4:5b:2a:
                    1d:9a:70:1e:68:89:a9:82:60:01:18:e0:03:d8:c9:
                    e6:31:e9:a4:60:fb:fe:8e:0f:7c:26:0b:bc:59:2a:
                    a6:80:77:5a:e7:6b:11:57:60:ea:0f:36:fb:35:d2:
                    90:a6:be:ed:27:2e:3e:18:b3:2d:bf:b6:6a:c5:80:
                    c3:54:e0:4f:72:6b:a6:fc:25:14:e0:40:01:4c:2e:
                    b0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:2F:8A:C8:ED:BF:96:5E:83:10:E5:51:3E:7D:8E:35:9C:7E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f662078-c87e-3e94-b9f7-e83fa6ac8a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:35:85:ef:a7:3a:f4:e1:3c:0a:39:da:47:8b:72:00:86:ea:
         d7:a5:71:92:2a:1f:fe:39:d4:dc:d7:88:e1:de:86:df:03:6c:
         af:6d:95:d2:e4:15:62:ec:e4:fb:2d:c5:50:9e:77:5c:e5:1a:
         94:0a:62:09:21:76:cd:fc:7a:3a:20:8f:32:e6:d9:a4:5a:93:
         eb:bd:f0:93:03:24:c0:36:f9:ad:6e:63:9d:35:22:ac:ba:1a:
         3c:d5:7e:b9:72:77:f7:ec:7d:7a:8f:89:0b:9a:7c:0a:f0:3d:
         ce:e2:75:b1:3c:76:45:b7:ae:a2:17:17:a4:3d:fb:18:67:3f:
         8d:b7:bf:8d:97:a3:7c:4d:54:99:67:ab:ca:dc:6e:c7:54:c9:
         94:e3:ea:23:75:5b:b9:4f:5b:a3:2d:d7:f6:b2:8d:d5:7f:a9:
         de:bd:76:c0:6b:a9:16:56:e2:8a:cc:ad:a2:78:3e:4e:d4:b4:
         9a:ef:55:d4:28:e6:f3:e3:6c:75:8c:fc:b4:9e:c3:0f:db:c9:
         32:f9:67:ef:82:90:09:3c:90:8f:dd:12:b3:b3:69:ee:96:2f:
         83:ff:fe:d3:69:ea:1b:59:5f:fa:be:95:d1:ef:c7:c6:c5:4b:
         0a:52:6c:62:3b:fd:24:7a:05:7f:57:0f:5a:ee:be:4e:10:7e:
         e5:e1:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:20:21 2025 by rpki-client