Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa
File:                     43d5319b-dad4-3129-af20-515f299b677f.roa (raw, json)
Hash identifier:          LI7aJ0ucS+cB4xojd+WZ8j47E3KPbX20OShCR7YkpKI=
Subject key identifier:   99:47:B7:59:5D:E6:9A:E2:26:E0:60:E6:21:38:06:0B:B7:28:26:B2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A9452ADD1888E666CC900
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     396583
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:94:52:ad:d1:88:8e:66:6c:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=3239a4f5-9b81-4a84-845a-dabe0db15f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:91:42:08:46:40:20:9c:62:83:55:aa:56:
                    fc:9a:4b:86:55:a8:c2:65:7c:72:c2:e8:49:06:a6:
                    28:a1:d3:8f:b7:27:7f:21:11:5a:f7:b6:a7:84:2b:
                    ac:94:d6:c1:4f:44:88:50:7d:18:1b:a5:80:88:1f:
                    b9:b8:e1:a1:a6:97:4d:1d:b3:33:1e:f6:fd:5f:87:
                    a8:bc:4a:c6:52:63:64:ce:3c:7c:3f:93:58:cf:b5:
                    0f:ec:53:96:1b:6c:7a:aa:05:02:83:43:ab:2a:2b:
                    d2:28:2a:28:5e:9e:b4:3b:57:4a:9a:da:85:55:74:
                    af:6b:db:0b:14:f4:e4:a1:c5:c3:61:07:32:30:f3:
                    ee:3d:df:75:ae:0e:fb:a4:36:57:e6:79:29:f1:2d:
                    ce:28:dc:42:73:56:df:16:c2:10:22:8e:94:bf:fa:
                    28:fa:aa:a7:20:b5:94:5b:21:66:b8:a4:96:17:b6:
                    df:33:a9:04:92:ba:ab:64:5f:ca:59:31:5b:42:49:
                    a8:65:c3:94:67:9b:ba:75:67:0b:3f:e2:f0:ba:81:
                    bd:dd:88:8b:ad:62:27:ff:46:13:a5:95:21:ff:a5:
                    25:90:29:e7:e8:3e:80:5b:f9:9e:b2:96:19:a0:3c:
                    a6:75:69:87:b4:88:dd:d3:22:3b:9d:7c:82:35:dc:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:47:B7:59:5D:E6:9A:E2:26:E0:60:E6:21:38:06:0B:B7:28:26:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43d5319b-dad4-3129-af20-515f299b677f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:38:91:c4:61:7e:bc:fa:01:8f:49:b2:38:12:ae:7f:b8:
         ba:6e:ce:f1:74:ab:2c:67:65:a0:55:b5:24:ff:ca:f6:62:75:
         5c:8b:2d:e6:f0:c6:08:cd:3c:b9:74:2c:ab:90:da:ed:77:84:
         fe:ce:4a:3a:a4:ad:d4:ee:84:1a:0f:21:ba:ee:13:fa:72:d0:
         1f:fc:1e:4c:69:96:11:af:1f:cb:8a:8c:9e:56:84:68:6b:ca:
         a3:67:a1:f9:56:34:0a:71:d5:a8:6c:37:90:6a:6c:71:0e:d9:
         4a:a9:a1:10:63:95:e9:50:2b:22:91:21:fc:a8:95:a2:d0:3e:
         10:e1:60:20:0a:89:3f:87:dc:ab:d7:07:36:eb:57:ca:1d:de:
         d8:e0:0a:47:eb:95:41:1d:50:c2:10:bc:70:f2:16:5d:2f:1d:
         ed:a6:03:49:2d:44:9f:bf:3a:a3:f0:b1:0c:80:e2:54:30:31:
         14:e4:21:51:8b:ca:58:3d:5b:0e:ec:ea:7f:28:cc:a1:48:8f:
         6e:38:4f:9a:57:0e:d4:11:6b:b6:0c:f2:e4:c8:a3:64:77:af:
         6e:cb:db:b1:ea:aa:38:90:b6:25:cd:18:cd:c6:f4:88:5f:18:
         b6:20:1f:36:f6:41:46:71:ff:a6:05:ec:4f:28:de:bf:b7:55:
         e9:9e:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 07:18:09 2025 by rpki-client