Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5463496f-416e-3848-9617-96d36f8a2f6c.roa
File:                     5463496f-416e-3848-9617-96d36f8a2f6c.roa (raw, json)
Hash identifier:          Jd+Ef16CSIS4oG5vh/MejKcFgt0sTXIHg+Woc5PN1dM=
Subject key identifier:   53:31:EC:DF:BE:D0:09:1B:46:75:75:1E:60:2A:0F:6D:59:A6:4C:92
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858488280A4DF3F3A68BBCA82C940
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5463496f-416e-3848-9617-96d36f8a2f6c.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     396566
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:a4:df:3f:3a:68:bb:ca:82:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=f81f560f-1304-46a3-a357-9e88ec43840e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:3d:94:b4:11:32:6e:6b:d3:fe:72:6b:47:
                    40:a5:85:a9:3d:03:88:62:fe:dc:63:10:29:57:e9:
                    26:ff:a9:c5:5e:10:70:34:20:fa:ca:ac:98:57:7a:
                    dc:81:81:46:db:d3:45:6f:a3:19:49:2d:79:8a:49:
                    f6:e7:dc:42:26:fe:d6:52:b9:4e:5a:30:95:b6:0b:
                    fb:47:ed:80:65:a2:55:72:37:6f:1b:99:2f:38:fc:
                    0e:f9:4d:89:ab:0f:5c:ba:2f:b0:92:9e:84:80:a5:
                    20:86:24:31:97:e4:df:59:95:9f:3e:4f:95:b3:6b:
                    66:f5:bc:a2:41:83:13:89:f6:bd:b6:86:80:d3:10:
                    6d:d7:85:b1:63:31:f6:c3:59:dd:cc:95:7c:8f:dc:
                    a5:55:e9:64:63:96:df:22:6c:33:c1:0d:87:3a:51:
                    3c:50:2b:54:e5:c7:bd:3d:3b:e8:8a:6f:21:cf:82:
                    0a:10:de:0d:f7:50:72:b2:a9:df:83:3d:28:2e:20:
                    a8:cb:31:03:34:94:f0:8a:87:51:4f:c3:92:2f:d8:
                    e3:53:88:7b:09:16:0a:7c:ca:e6:8d:0a:3c:7c:24:
                    ef:e6:30:d6:2d:c6:43:2b:44:1d:8e:a5:f5:69:68:
                    18:40:2c:c9:be:57:cb:26:d5:2c:c8:22:5a:d0:21:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:31:EC:DF:BE:D0:09:1B:46:75:75:1E:60:2A:0F:6D:59:A6:4C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/5463496f-416e-3848-9617-96d36f8a2f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4c:35:e0:e2:20:4b:51:87:ca:5b:47:7c:6f:18:19:88:64:
         33:72:f5:33:86:9e:f7:e8:b5:8a:74:b3:46:e9:e1:49:40:3a:
         c4:83:a9:d1:d8:52:4c:12:78:d4:5e:43:31:97:b9:fc:1c:99:
         35:78:85:0d:81:45:cb:22:9f:b7:b8:ef:b2:14:f4:63:93:b4:
         07:96:69:33:10:4c:45:b2:3b:c6:a3:8c:ac:7d:6d:13:1e:90:
         5d:04:af:36:ae:79:10:30:9f:c4:2a:95:74:6b:99:96:13:6c:
         b2:ad:02:58:1b:71:d1:b1:5f:f6:34:fc:fd:26:91:9b:7f:ca:
         c6:ef:4e:10:52:24:39:d0:a3:e6:75:7b:dc:6c:1b:e1:27:53:
         a4:87:92:48:44:f2:bb:72:e4:0f:1f:8f:8e:b2:10:52:2d:11:
         8f:16:9e:07:2a:ca:04:f7:47:34:ec:bc:ab:90:e6:e7:e3:f4:
         82:0d:33:c1:02:78:82:14:02:c6:8f:6b:fd:c6:c1:ec:ae:72:
         ea:68:c3:34:3e:34:73:04:4c:f2:03:00:4e:85:02:79:cf:40:
         23:6a:82:a3:6c:60:5e:1a:3d:d7:0c:c6:e3:3f:ed:62:c8:a1:
         b0:2b:a5:a3:54:7b:30:01:f7:dd:0e:02:b4:68:5e:08:44:ab:
         0b:ca:37:f5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiCgKTfPzpou8qCyUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjgxZjU2MGYtMTMwNC00NmEzLWEzNTctOWU4OGVjNDM4NDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuME9lLQRMm5r0/5ya0dApYWpPQOIYv7cYxAp
V+km/6nFXhBwNCD6yqyYV3rcgYFG29NFb6MZSS15ikn259xCJv7WUrlOWjCVtgv7
R+2AZaJVcjdvG5kvOPwO+U2Jqw9cui+wkp6EgKUghiQxl+TfWZWfPk+Vs2tm9byi
QYMTifa9toaA0xBt14WxYzH2w1ndzJV8j9ylVelkY5bfImwzwQ2HOlE8UCtU5ce9
PTvoim8hz4IKEN4N91Bysqnfgz0oLiCoyzEDNJTwiodRT8OSL9jjU4h7CRYKfMrm
jQo8fCTv5jDWLcZDK0QdjqX1aWgYQCzJvlfLJtUsyCJa0CHXxQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFMx7N++0AkbRnV1HmAqD21ZpkySMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTQ2MzQ5NmYtNDE2ZS0z
ODQ4LTk2MTctOTZkMzZmOGEyZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA8TDXg4iBLUYfKW0d8bxgZiGQzcvUzhp736LWK
dLNG6eFJQDrEg6nR2FJMEnjUXkMxl7n8HJk1eIUNgUXLIp+3uO+yFPRjk7QHlmkz
EExFsjvGo4ysfW0THpBdBK82rnkQMJ/EKpV0a5mWE2yyrQJYG3HRsV/2NPz9JpGb
f8rG704QUiQ50KPmdXvcbBvhJ1Okh5JIRPK7cuQPH4+OshBSLRGPFp4HKsoE90c0
7LyrkObn4/SCDTPBAniCFALGj2v9xsHsrnLqaMM0PjRzBEzyAwBOhQJ5z0AjaoKj
bGBeGj3XDMbjP+1iyKGwK6WjVHswAffdDgK0aF4IRKsLyjf1
-----END CERTIFICATE-----
Generated at Wed May 14 07:20:16 2025 by rpki-client