Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa
File:                     6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa (raw, json)
Hash identifier:          md9IFdFfmv2m99SzlPGhR+O4X7E/FHeRtAfkGkTrc60=
Subject key identifier:   48:13:66:89:57:15:D9:54:8D:2F:AB:2F:D8:EE:2A:C8:11:D8:FD:48
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858482EC014B975C940CE22058268
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     7342
IP address blocks:        2620:74:5a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:14:b9:75:c9:40:ce:22:05:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=88dd383e-cf78-42bc-bc38-2023a3ac723a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:7d:17:1b:df:41:4f:69:3b:d6:6d:bd:5a:
                    36:0f:11:7e:0c:83:08:78:5d:ed:7b:e4:94:95:1d:
                    53:56:b2:e8:bc:d1:aa:12:dd:b2:87:52:f3:a4:39:
                    c6:0f:fe:ed:9a:76:d7:ab:1a:c4:1b:a5:19:00:a6:
                    83:6b:99:18:6d:5e:1a:10:d8:20:3e:52:b6:ea:9c:
                    44:21:e1:61:64:64:9e:32:42:15:16:61:9e:34:82:
                    15:8c:60:43:70:ad:19:d3:99:55:b0:f0:b4:93:cd:
                    3d:a5:61:d7:3e:39:a2:4b:65:89:c5:bb:71:62:e2:
                    e3:f6:23:99:fe:1f:4d:c8:45:87:02:2f:d4:80:33:
                    11:dd:fc:7d:d1:07:b9:47:05:60:74:e3:e8:13:16:
                    b8:e5:8c:b3:c4:03:8f:88:f3:7f:c6:ab:32:fb:c3:
                    23:54:f2:ad:b9:bf:71:3c:a7:b9:56:9c:81:77:49:
                    73:c4:b7:e9:55:7a:cd:ba:e4:4c:6d:1f:22:e1:bb:
                    e6:fa:0d:8d:86:11:e0:3a:05:1e:83:3a:07:cf:a4:
                    28:21:42:f7:33:89:3f:55:be:68:3d:11:4c:ba:8a:
                    34:4f:c3:9c:0c:ad:6f:e3:a7:1d:2d:77:73:cc:79:
                    45:a5:54:3b:c1:1b:8c:f2:22:77:cc:10:61:16:b0:
                    b8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:13:66:89:57:15:D9:54:8D:2F:AB:2F:D8:EE:2A:C8:11:D8:FD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6b36240e-a949-3bdc-b8bd-77b54c88e9b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:5a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:16:ee:20:61:ff:61:aa:26:d7:54:12:2f:76:a9:53:71:
         12:aa:14:c6:97:d6:22:cc:81:59:22:1e:5e:a2:50:17:a5:89:
         29:7e:f8:ee:ac:ac:fe:29:e3:aa:5f:8c:f2:78:f7:26:d9:3c:
         0b:54:57:e5:e1:ca:fc:bf:84:4e:c1:7f:a9:1d:31:50:5f:86:
         20:18:68:a0:1b:6c:a3:33:d4:9b:90:e9:7e:29:73:0d:a1:51:
         e0:a8:82:42:fd:43:f7:93:b0:ce:f4:7b:dd:57:d1:32:82:e1:
         7c:3c:ec:37:c2:40:72:d0:59:d8:02:80:ad:22:a7:27:06:e3:
         bc:5d:06:22:15:11:89:26:78:e5:23:fd:cd:2a:f6:28:d7:33:
         47:fe:db:91:50:81:39:88:8a:69:5b:84:e6:a2:a4:07:f1:48:
         b8:f3:8e:bb:9c:e5:bf:68:8c:81:4e:c3:1e:89:bc:5f:d4:ca:
         a0:ce:66:af:71:1d:d8:17:e6:2f:7e:1a:e0:02:c5:78:bd:8d:
         c9:83:5a:1b:fe:c8:09:05:4d:a8:61:47:10:fa:f0:f5:55:5e:
         64:9d:8d:b1:ec:03:f2:6f:fa:56:af:9b:41:1a:1f:9b:d2:29:
         6c:ce:73:86:aa:23:f3:a7:2e:63:fc:8b:58:1d:59:41:d1:88:
         a5:f4:0c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:06:26 2025 by rpki-client