Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa
File:                     507b0811-c273-30ef-a628-dfc4f6e1715c.roa (raw, json)
Hash identifier:          G9Mp0xo0vYBkgD7H2+x+CdeMkMfzWl6IWTzUA/iqf6A=
Subject key identifier:   D4:E2:44:F8:C2:F6:56:40:B6:2F:21:34:26:26:E9:78:22:70:E9:12
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858480EA51E173FB2EA91DD08DAC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     7342
IP address blocks:        2620:74:ab::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:1e:17:3f:b2:ea:91:dd:08:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=302cafda-4255-4184-a98e-ff28d9e689a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8a:86:b3:ae:e1:40:87:2d:86:f2:f3:c0:f2:
                    3f:1b:fa:46:d0:bf:d0:6c:95:7c:46:3e:e4:63:bb:
                    94:c0:6e:9c:ab:3f:28:97:17:4f:b9:81:4c:ba:f4:
                    e8:75:50:b5:32:f3:8f:07:d1:ed:30:3c:3e:6d:2c:
                    59:10:30:b0:cc:c8:50:69:ad:dd:d3:47:30:f5:a4:
                    1c:23:c6:fd:4a:d3:83:63:16:17:c6:f8:f2:73:0b:
                    82:8f:a9:11:1b:29:e4:fe:c2:aa:b2:bb:e6:77:72:
                    f4:31:21:d2:92:36:b3:b9:a7:71:e8:8f:ed:17:c1:
                    86:41:f9:90:45:3e:52:fa:ea:00:7f:5b:09:7f:20:
                    a4:cb:96:f7:11:3f:38:23:8c:65:c9:a1:ad:cf:9a:
                    36:67:23:f3:e5:80:04:18:09:8f:fc:ea:29:ff:92:
                    e2:99:3f:03:33:2e:66:09:d7:db:34:b7:c4:8d:23:
                    26:e4:fd:09:de:83:cd:55:51:59:65:d2:45:05:bb:
                    65:30:c4:98:5a:56:2e:13:a3:13:f7:7a:43:8a:da:
                    2a:cc:c9:1b:ad:62:f9:b3:9f:f6:d4:a6:6d:ad:91:
                    71:35:d5:09:4c:c4:79:bb:85:12:11:f7:6e:bc:15:
                    e6:bd:ff:a4:15:ab:fd:55:4d:48:6d:5b:52:2b:41:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E2:44:F8:C2:F6:56:40:B6:2F:21:34:26:26:E9:78:22:70:E9:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/507b0811-c273-30ef-a628-dfc4f6e1715c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:ab::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ff:59:61:35:93:62:3c:c9:42:89:da:c1:1d:0d:d8:29:32:
         be:6b:c2:10:97:07:d2:61:dc:ef:a7:36:46:d1:03:37:44:0f:
         06:af:e3:ec:5a:e6:9c:3f:c4:03:75:09:18:86:b8:62:23:5d:
         81:38:5e:50:ed:b9:3a:fb:e1:be:d2:50:5b:d4:0b:e1:4f:ec:
         fa:a6:4d:7d:96:ae:a8:31:16:30:d7:ea:62:27:54:ac:37:3f:
         05:07:de:5c:32:89:b6:23:82:54:b6:fa:04:10:8a:f9:de:60:
         28:cc:64:03:c6:d2:4d:05:68:fa:fd:1a:3c:11:91:69:0c:d1:
         84:d1:ea:3e:f1:e0:65:a4:75:d7:66:9b:cd:e4:e1:08:62:31:
         b2:70:e8:da:96:fc:63:6a:cc:cc:e3:ff:13:b8:31:6a:68:6d:
         00:bd:68:04:fd:66:9c:8e:b8:02:83:ed:ab:13:64:87:f6:56:
         b5:fb:8a:5f:9a:27:cd:bd:78:8a:48:93:7a:8c:f9:f4:72:bd:
         20:0e:c3:ba:6e:75:b6:f2:28:cf:db:ac:09:e1:7b:23:1f:04:
         b0:8c:85:c1:df:18:04:98:cd:32:33:ce:e5:62:67:e4:6d:32:
         98:f6:34:e6:ca:37:b7:58:6a:2e:f6:6b:4e:49:43:65:22:ac:
         8c:7e:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:18 2025 by rpki-client