Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659d3322-be64-3219-a49c-5740744e0e25.roa
File:                     659d3322-be64-3219-a49c-5740744e0e25.roa (raw, json)
Hash identifier:          bKd/2TG9CwXg7TYdWJ6XaogtOp2hobGM3zx+npCnUbQ=
Subject key identifier:   F6:9B:A2:0C:8C:0B:4E:22:D1:6E:9A:84:FC:29:DE:12:1C:8B:C2:1D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848064512156B60091C8D165A80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659d3322-be64-3219-a49c-5740744e0e25.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396569
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:12:15:6b:60:09:1c:8d:16:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=88b05b88-726f-4747-ba26-67ea3c4396c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:89:22:62:1e:86:0d:2d:b8:13:c3:e1:3c:
                    e2:9b:fa:cd:56:6a:a6:da:f0:ff:7b:73:5a:0a:b7:
                    a9:3b:8f:aa:a7:33:7f:f8:97:b7:40:f6:b1:e6:17:
                    c2:0d:99:3d:ce:f6:43:86:c6:9f:94:73:ce:12:25:
                    51:1e:20:bc:4d:40:f6:99:44:29:34:54:90:63:a8:
                    ee:8d:0c:46:a9:65:cf:8b:fd:80:25:90:50:8f:39:
                    05:5f:75:31:77:a8:23:f3:b7:5c:86:4e:24:be:b2:
                    fd:a6:f3:a3:07:5a:9a:7c:3e:21:ce:9a:41:54:42:
                    68:bd:00:da:f0:6e:00:08:c0:47:ae:5e:0d:f2:fc:
                    6c:1c:70:de:ec:5e:89:31:d1:ac:66:cb:88:a7:df:
                    14:1e:cf:8b:49:d5:05:bb:1f:53:bb:f5:77:3c:4e:
                    c2:eb:78:54:d8:d9:86:91:b3:77:ea:5e:43:c5:b1:
                    8e:57:f2:b0:04:d6:fa:88:94:05:53:e4:a0:48:e7:
                    01:3d:66:13:3b:8f:9a:83:7b:2e:40:85:39:85:f3:
                    02:b0:c2:ea:85:07:9f:87:de:9e:58:bd:cc:ad:50:
                    2f:72:5d:5d:82:8f:35:df:4b:ae:e3:c1:58:78:7a:
                    11:49:1b:9b:49:ef:18:73:4b:e7:cd:fc:9c:30:00:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9B:A2:0C:8C:0B:4E:22:D1:6E:9A:84:FC:29:DE:12:1C:8B:C2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659d3322-be64-3219-a49c-5740744e0e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:99:ba:d7:b7:aa:02:98:6c:7e:1b:cd:28:91:eb:fb:37:7e:
         9e:f6:bb:fb:3a:de:ea:b0:4c:0c:2f:c2:2a:82:26:64:d9:99:
         40:bb:0f:a9:a3:b4:fc:e6:05:c3:12:75:a3:77:60:c8:b8:fe:
         b5:28:3b:83:66:05:8b:2e:fe:29:a5:3c:7a:a4:4d:57:0e:a1:
         80:9e:f4:8a:81:01:e5:d8:2e:05:bb:02:a6:2e:a7:f6:05:b8:
         21:aa:ac:9b:7f:49:cd:b8:fe:db:51:ec:88:70:ab:f2:79:30:
         c6:cf:4d:5b:f6:94:77:75:e7:6e:82:c8:a6:7a:2e:88:10:d3:
         25:be:07:3b:a2:a4:a4:15:95:27:a8:1c:08:f6:6c:9c:b2:fd:
         e1:7c:ce:1f:a3:ca:85:4f:ba:ba:8d:b0:49:ba:0e:ef:9d:08:
         66:c5:e2:eb:6e:12:aa:ca:a7:d2:41:07:58:1c:8f:a3:60:f8:
         31:17:bf:27:fb:57:b2:db:b4:31:65:6d:43:be:ca:a4:83:29:
         b1:f0:99:b3:a2:af:a7:f9:f7:23:6e:30:63:33:2f:e9:41:48:
         11:8d:2c:d3:e3:af:84:42:cf:a8:57:83:ca:6d:17:d4:02:01:
         cf:44:6d:38:a3:ab:95:f0:47:24:91:6f:c9:a2:ce:23:6a:a0:
         37:46:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:50:17 2025 by rpki-client