Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a465dc8-7b6c-3eb7-b55c-221eed84adee.roa
File:                     4a465dc8-7b6c-3eb7-b55c-221eed84adee.roa (raw, json)
Hash identifier:          PW5vXFIuWANZFHbblNDo1VbmhUiNa0IgZh/ZbYR/9Yw=
Subject key identifier:   49:DA:4A:68:C7:3E:FE:2B:25:23:6C:54:99:9A:48:CD:D1:EB:75:CD
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806451761BA852DC63A4207F0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a465dc8-7b6c-3eb7-b55c-221eed84adee.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396591
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:17:61:ba:85:2d:c6:3a:42:07:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=0cd548b7-0ba4-4412-bf5d-1bb6a3dcc7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:14:ee:a6:7c:02:5f:6e:e2:11:c9:ff:3a:
                    fe:f3:76:44:7f:dd:2c:a5:84:80:15:f9:5a:0f:0a:
                    e6:bd:db:76:15:09:3a:a3:0a:a0:18:15:6c:47:8d:
                    66:04:77:e5:64:cb:fa:a4:fe:31:81:78:7b:27:9b:
                    e2:49:73:1f:6e:89:ba:29:d5:4e:df:32:8b:d9:57:
                    ec:49:f0:00:ae:81:fd:d7:07:d8:06:78:42:94:11:
                    db:b1:8a:fd:f4:8d:7e:58:b9:08:66:48:77:12:37:
                    98:6b:1d:9b:b7:87:b9:f8:9f:07:2a:7c:6c:6b:f9:
                    af:fc:ef:c0:4b:08:d2:d5:c4:be:93:1a:20:94:3f:
                    33:00:64:55:b3:dd:43:60:18:06:00:c9:1f:1c:68:
                    15:0d:d8:d8:5a:21:4c:e4:73:10:33:db:4c:c2:70:
                    42:22:0c:df:be:78:4e:fa:60:05:cc:f5:3f:56:ff:
                    0d:13:c3:0a:dd:93:e9:47:99:81:f6:74:91:e4:7d:
                    f0:f0:57:63:16:1d:44:05:87:77:a2:fe:bd:27:5b:
                    ac:cb:cf:bf:f7:28:5e:ee:62:3a:4d:60:ec:b8:c8:
                    7a:ef:e9:29:3d:10:6c:7d:4f:96:fa:61:77:5e:05:
                    1d:bb:ad:f6:0c:98:eb:3f:2e:60:71:fd:bf:14:cd:
                    66:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DA:4A:68:C7:3E:FE:2B:25:23:6C:54:99:9A:48:CD:D1:EB:75:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4a465dc8-7b6c-3eb7-b55c-221eed84adee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ff:ed:ac:2b:38:a9:ed:8a:a1:ee:39:1c:f6:f6:f5:bf:6a:
         f6:1a:b0:9a:66:0c:fc:88:55:6d:c2:06:4a:a7:27:d0:0b:34:
         8e:66:6f:11:af:71:04:0b:d0:b2:39:89:6c:11:a7:97:37:27:
         11:20:4d:b0:67:d3:ab:29:90:cb:65:3b:f6:ab:5c:ae:f1:cc:
         f9:b6:2a:a6:db:57:57:3a:78:1e:b1:36:2c:db:68:87:40:04:
         d0:e1:a6:3b:76:00:84:a3:63:d6:05:64:58:04:3a:db:0e:ae:
         d3:ec:66:4c:07:2e:e6:b9:5e:fe:d4:27:e4:0c:bf:3a:e5:af:
         ea:5e:1e:c8:d4:2e:e5:da:31:7a:cb:3e:48:25:9f:6a:bc:52:
         08:4f:89:29:92:84:80:01:b9:64:7d:28:96:95:df:ba:e9:99:
         ac:1f:79:24:36:96:51:ac:aa:23:c0:b4:ab:1e:bc:6b:15:07:
         f5:de:85:11:75:d6:bd:99:9f:b2:88:27:55:d0:b3:9c:7a:67:
         e1:65:ad:34:9c:f3:c4:72:2b:6e:08:0a:a7:57:e1:8c:e8:27:
         8a:05:2d:0f:82:df:3b:a0:d3:06:ac:99:4e:c1:59:32:1d:69:
         4a:39:19:aa:f4:a6:58:da:24:7b:97:b5:94:19:d4:bf:de:85:
         5b:9f:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:45:37 2025 by rpki-client