Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa
File:                     433e3b39-3064-39d7-b7a6-05e755cd825a.roa (raw, json)
Hash identifier:          /Df7GyUeSFBpCDBaIaQEv92WCnvoU4r5xIuOdhdbvWI=
Subject key identifier:   67:F2:FF:CD:3D:D6:DA:98:D4:34:B6:A2:C4:2D:2B:4C:D7:D8:F3:1E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847F1551EEC57614CFB5562D580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     397210
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:1e:ec:57:61:4c:fb:55:62:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=48035948-4a6d-41db-b945-19c8f56bf05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:0b:29:80:a8:15:6b:4b:6a:4b:88:55:00:
                    c0:fc:9e:65:f5:d0:29:0f:d5:a8:06:15:90:39:eb:
                    cd:21:93:b9:da:a0:a7:0b:5d:d0:17:5c:12:5b:6e:
                    f9:16:65:bc:1c:b4:aa:85:4c:d1:31:d6:ca:88:3d:
                    ce:09:b8:20:fd:60:b2:64:9d:42:cb:90:5d:1b:24:
                    e0:27:a8:74:c5:99:19:66:3c:b9:2f:5f:a1:08:7e:
                    fa:84:00:83:92:73:4b:71:97:ec:d9:91:95:b3:a8:
                    14:d0:d0:99:71:2e:be:ce:68:42:11:6b:8a:90:0b:
                    2c:95:c7:c1:63:19:ab:97:7a:fb:e3:0b:d7:10:b4:
                    60:22:63:5f:56:c0:97:a8:0a:ab:a8:3c:b6:de:11:
                    05:cd:94:e5:f5:69:35:a7:5c:28:d2:42:7f:00:58:
                    2f:e2:1b:88:3c:17:be:5a:ee:f4:6a:d4:7f:af:3e:
                    e8:47:98:9e:8c:fa:23:54:63:b8:7f:d3:f3:b2:c0:
                    02:c8:6d:c0:74:c7:a4:8d:a8:71:70:57:3d:11:cc:
                    83:83:e2:33:f7:b0:3b:35:03:a5:ca:ae:ba:ed:2c:
                    60:0d:59:cd:22:03:44:74:36:4d:ce:5a:00:14:7d:
                    cd:36:68:f2:7c:78:4c:dc:f5:08:1c:de:aa:ee:fe:
                    81:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F2:FF:CD:3D:D6:DA:98:D4:34:B6:A2:C4:2D:2B:4C:D7:D8:F3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433e3b39-3064-39d7-b7a6-05e755cd825a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:09:32:79:e7:29:17:f0:ba:e0:28:76:2d:c3:16:b4:c7:
         61:6e:2f:e4:33:bd:9d:7c:60:22:80:78:6b:65:eb:03:21:7d:
         ba:a5:07:5e:9e:97:83:89:a3:aa:91:f9:8c:a6:35:d2:8b:0b:
         09:cc:92:d4:1c:14:8c:75:7a:b4:dc:fd:3d:02:5a:ef:36:6c:
         00:b1:6f:47:ec:06:12:91:ce:5d:1c:6c:d5:d1:37:d4:28:7b:
         5c:8b:0a:c9:50:fc:52:af:5d:28:c8:3b:00:dc:2b:0e:5d:5e:
         d5:38:6c:d1:4b:68:79:05:21:d4:e3:43:5d:fb:51:f5:bf:9c:
         15:cb:53:e9:13:fa:72:43:a8:f6:36:58:df:37:9d:bc:a4:75:
         20:fa:12:f9:a1:26:72:12:94:1a:90:6d:b9:3f:90:c9:af:19:
         35:d5:0c:fc:f5:a2:b4:33:7d:c0:65:bf:b9:02:ef:2e:51:05:
         3a:85:d3:1e:95:50:53:b9:0b:52:33:52:93:a1:87:56:cf:74:
         25:fe:59:6a:e5:71:b3:e6:b1:7a:ef:d8:f0:90:1d:46:75:68:
         7f:7d:f8:7d:4f:20:da:e0:80:11:ff:4d:28:fa:a4:3c:4a:cd:
         4d:a1:7a:7c:c5:3c:33:ce:44:ed:15:8f:a6:69:46:7c:00:b0:
         e0:46:44:7f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfxVR7sV2FM+1Vi1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyMDE0MDA1MloXDTI1MDIxODE0MDA1MlowLzEtMCsGA1UEAxMk
NDgwMzU5NDgtNGE2ZC00MWRiLWI5NDUtMTljOGY1NmJmMDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfcLKYCoFWtLakuIVQDA/J5l9dApD9WoBhWQ
OevNIZO52qCnC13QF1wSW275FmW8HLSqhUzRMdbKiD3OCbgg/WCyZJ1Cy5BdGyTg
J6h0xZkZZjy5L1+hCH76hACDknNLcZfs2ZGVs6gU0NCZcS6+zmhCEWuKkAsslcfB
Yxmrl3r74wvXELRgImNfVsCXqAqrqDy23hEFzZTl9Wk1p1wo0kJ/AFgv4huIPBe+
Wu70atR/rz7oR5iejPojVGO4f9PzssACyG3AdMekjahxcFc9EcyDg+Iz97A7NQOl
yq667SxgDVnNIgNEdDZNzloAFH3NNmjyfHhM3PUIHN6q7v6BWQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGfy/8091tqY1DS2osQtK0zX2PMeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzZTNiMzktMzA2NC0z
OWQ3LWI3YTYtMDVlNzU1Y2Q4MjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAr
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBDoAkyeecpF/C64Ch2LcMWtMdhbi/kM72dfGAi
gHhrZesDIX26pQdenpeDiaOqkfmMpjXSiwsJzJLUHBSMdXq03P09AlrvNmwAsW9H
7AYSkc5dHGzV0TfUKHtciwrJUPxSr10oyDsA3CsOXV7VOGzRS2h5BSHU40Nd+1H1
v5wVy1PpE/pyQ6j2NljfN528pHUg+hL5oSZyEpQakG25P5DJrxk11Qz89aK0M33A
Zb+5Au8uUQU6hdMelVBTuQtSM1KToYdWz3Ql/llq5XGz5rF679jwkB1GdWh/ffh9
TyDa4IAR/00o+qQ8Ss1NoXp8xTwzzkTtFY+maUZ8ALDgRkR/
-----END CERTIFICATE-----