Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/413435cf-dc16-38c8-a7ad-4e017ef0f695.roa
File:                     413435cf-dc16-38c8-a7ad-4e017ef0f695.roa (raw, json)
Hash identifier:          ddfgzrWcrY/gCFCF/HUqdmugSRlvcKOFohbAaMckalo=
Subject key identifier:   03:C8:33:44:3C:5E:3E:D8:E9:8F:88:22:E7:A7:85:0F:B2:0E:F2:CD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6D73A535E168A2918700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/413435cf-dc16-38c8-a7ad-4e017ef0f695.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     36618
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6d:73:a5:35:e1:68:a2:91:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=2cc1a82d-38d0-4e60-b60e-f215e52aa1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f9:c8:06:86:76:25:5f:13:36:9a:6e:e8:31:
                    5b:9c:14:df:7a:e5:de:49:7e:5e:cc:da:2c:df:26:
                    a4:99:d2:cf:68:8f:17:0b:cb:8a:cb:9a:15:cd:a9:
                    45:1b:ea:24:98:9d:f4:28:1e:ac:97:ee:d7:a8:fc:
                    4a:f7:ca:25:e6:aa:83:80:11:8b:9e:dc:35:d2:f5:
                    1d:31:c6:95:ca:a0:53:4e:bb:eb:74:00:6e:ea:b2:
                    39:99:39:3b:93:6a:0d:5c:5d:09:a2:32:31:a5:76:
                    64:65:72:de:72:37:0b:81:6f:ee:48:de:06:09:b9:
                    bd:80:b7:fc:9e:30:d4:51:ab:aa:02:1c:a9:84:63:
                    e5:3c:06:af:c1:7b:88:a8:b5:a9:91:d2:d9:a4:7a:
                    da:26:e1:36:63:9d:87:91:4b:c3:20:82:b6:11:77:
                    ca:c4:b1:c2:2d:11:71:d1:62:5a:b2:a8:14:ca:6a:
                    ae:39:23:4b:7b:44:bc:53:0e:2d:2e:58:69:62:6c:
                    dc:41:3b:5d:0b:5b:af:8d:49:d6:8e:12:98:b7:d9:
                    4d:d3:80:87:b8:fb:8a:ec:7f:71:cf:d5:15:34:f9:
                    3e:3f:c1:75:81:e1:cb:06:70:4d:6a:d6:4a:b3:27:
                    29:8c:a0:2d:4e:55:25:b9:9a:44:73:42:8b:61:e8:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C8:33:44:3C:5E:3E:D8:E9:8F:88:22:E7:A7:85:0F:B2:0E:F2:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/413435cf-dc16-38c8-a7ad-4e017ef0f695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:57:66:81:39:a5:66:6b:66:73:9d:2f:7c:86:e1:0c:1a:
         0b:22:f7:fb:6e:13:63:05:4a:1a:06:ac:43:9a:d0:07:b2:b4:
         e9:43:e2:09:ef:da:c1:30:7e:58:d8:1e:ab:2f:31:86:b9:ab:
         69:c9:ee:0c:fd:c9:60:e2:ec:6b:4a:02:15:60:2d:ce:89:3a:
         85:d4:06:bb:47:e9:81:1e:d1:60:8e:05:6e:67:99:96:69:85:
         c8:64:fb:39:ad:8a:f3:d5:6f:18:a7:b4:d0:0e:19:13:f5:28:
         c1:3f:60:26:73:e3:89:b4:0e:66:22:ae:25:bf:05:03:40:95:
         5f:e3:2e:a8:f8:3f:e9:30:bd:75:c0:a2:73:a6:5b:9c:83:01:
         a3:b0:9b:c5:43:5c:de:eb:20:f9:d3:c9:83:e4:ea:69:d0:d7:
         f8:65:b4:7e:73:63:35:d0:5d:19:b8:3e:1d:52:ad:c4:c3:d4:
         bd:ca:48:c7:97:35:b7:1c:b5:c2:46:4e:ea:69:9a:e9:7a:bb:
         9e:11:10:f2:d2:41:f2:da:4f:46:ce:b5:ec:d4:c0:7a:cb:e7:
         22:a2:fd:43:e2:8a:65:ff:c0:dc:20:2e:80:36:a3:a4:7d:00:
         2d:7f:e5:a2:e5:de:18:23:24:6e:17:98:66:f1:56:5d:b5:fc:
         7a:69:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:11 2025 by rpki-client