Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6bfd58fb-464a-36f7-a072-f6076164d8bc.roa
File:                     6bfd58fb-464a-36f7-a072-f6076164d8bc.roa (raw, json)
Hash identifier:          EVX2Nbjl3RPHiDERc/zG6J6++mcxaNBTEeAkUIQjwfY=
Subject key identifier:   BF:32:B6:51:07:A3:0F:AD:71:49:6E:B1:54:73:AD:16:1D:04:CA:B2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A9428F193E61F551C1580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6bfd58fb-464a-36f7-a072-f6076164d8bc.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     396588
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:94:28:f1:93:e6:1f:55:1c:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=d8936ccf-b3f5-462a-a119-26fef7910222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:02:fe:8e:5b:d7:77:65:e8:49:d2:a0:64:1e:
                    44:37:04:4e:f0:91:1c:f5:e1:39:5c:dc:da:67:3a:
                    bf:87:db:e4:9d:c0:90:f5:bd:a0:03:60:ed:af:00:
                    62:5c:a0:e2:d1:a9:65:60:ec:2e:91:ca:dd:07:d2:
                    a8:86:5f:a2:19:65:e3:75:ac:da:c5:5b:55:a4:6f:
                    53:ab:a9:23:e2:40:2a:68:de:44:7f:84:04:b1:a2:
                    b3:a3:d8:33:92:c4:2f:47:a2:9f:bc:ab:9d:cc:96:
                    97:89:16:22:89:89:40:fd:33:3c:88:61:7b:b3:e2:
                    2e:14:9a:98:f5:3c:1e:8f:a2:53:af:16:6c:09:ff:
                    f9:c2:70:51:ed:d5:7b:91:51:6e:e2:4b:8f:a8:8c:
                    28:a3:2e:8d:3e:4c:33:8a:62:65:5f:e1:bf:67:4f:
                    c8:fc:79:f4:ba:10:5d:62:6d:07:73:8c:67:2c:ee:
                    40:86:9b:6b:80:dc:18:e7:28:ff:ca:8a:16:84:75:
                    68:df:48:36:8c:a6:78:3c:73:e9:b1:a7:8e:18:ae:
                    87:23:4f:27:22:9f:b8:86:3d:ac:75:c0:fe:71:d7:
                    ec:ad:ff:2a:86:9b:be:d4:9d:53:26:08:b8:5d:66:
                    95:fc:fb:67:a5:45:d7:72:62:10:a4:25:86:b9:13:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:B6:51:07:A3:0F:AD:71:49:6E:B1:54:73:AD:16:1D:04:CA:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6bfd58fb-464a-36f7-a072-f6076164d8bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:bb:81:fd:c1:3b:53:dc:ed:b7:a7:be:5b:89:9f:6e:32:
         f5:e5:08:48:81:d9:06:b3:eb:a9:31:be:ee:99:3c:ce:ff:f2:
         21:a4:f9:68:ec:16:b0:1f:56:b9:32:7c:5a:e9:3d:af:4e:cd:
         bc:a9:53:7b:f8:49:5f:89:31:8e:7e:26:70:47:6f:54:e0:ae:
         1f:56:76:b7:9f:16:5b:ea:79:5a:a8:c0:77:00:1d:97:df:39:
         15:5e:11:04:b0:bb:50:0f:3f:a8:00:8f:6b:43:2e:25:b4:e4:
         fd:c9:1b:a7:ee:8c:9d:48:9d:fb:f6:3c:ff:4e:11:ac:52:8e:
         8d:cd:5e:d4:ef:c5:da:d8:a4:72:6e:41:2d:a7:1b:37:c8:4a:
         99:c5:1b:47:b6:f4:a3:2b:f2:27:92:8e:6e:2b:9b:77:aa:c7:
         2f:d3:ae:48:ee:7f:16:fe:24:ae:6b:92:f9:96:b8:08:4f:54:
         27:62:c3:b9:c1:94:cb:04:c8:5d:86:70:25:26:d3:39:be:bd:
         fe:95:c1:19:5b:da:2f:89:89:d9:28:5b:0e:2e:20:a9:c8:a4:
         64:89:0e:ca:d8:b6:2f:65:ec:80:0b:f4:97:6c:a3:54:07:41:
         b8:b3:49:9d:ae:bc:4f:d7:ac:78:a6:f8:6d:d6:31:90:f3:9d:
         47:d9:1c:ff
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgYapQo8ZPmH1UcFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIwNDE0MDA1MloXDTI1MDMwNDE0MDA1MlowLzEtMCsGA1UEAxMk
ZDg5MzZjY2YtYjNmNS00NjJhLWExMTktMjZmZWY3OTEwMjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQL+jlvXd2XoSdKgZB5ENwRO8JEc9eE5XNza
Zzq/h9vkncCQ9b2gA2DtrwBiXKDi0allYOwukcrdB9Kohl+iGWXjdazaxVtVpG9T
q6kj4kAqaN5Ef4QEsaKzo9gzksQvR6KfvKudzJaXiRYiiYlA/TM8iGF7s+IuFJqY
9Twej6JTrxZsCf/5wnBR7dV7kVFu4kuPqIwooy6NPkwzimJlX+G/Z0/I/Hn0uhBd
Ym0Hc4xnLO5AhptrgNwY5yj/yooWhHVo30g2jKZ4PHPpsaeOGK6HI08nIp+4hj2s
dcD+cdfsrf8qhpu+1J1TJgi4XWaV/PtnpUXXcmIQpCWGuRP9/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFL8ytlEHow+tcUlusVRzrRYdBMqyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNmJmZDU4ZmItNDY0YS0z
NmY3LWEwNzItZjYwNzYxNjRkOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAL77uB/cE7U9ztt6e+W4mfbjL15QhIgdkGs+up
Mb7umTzO//IhpPlo7BawH1a5Mnxa6T2vTs28qVN7+ElfiTGOfiZwR29U4K4fVna3
nxZb6nlaqMB3AB2X3zkVXhEEsLtQDz+oAI9rQy4ltOT9yRun7oydSJ379jz/ThGs
Uo6NzV7U78Xa2KRybkEtpxs3yEqZxRtHtvSjK/Inko5uK5t3qscv065I7n8W/iSu
a5L5lrgIT1QnYsO5wZTLBMhdhnAlJtM5vr3+lcEZW9oviYnZKFsOLiCpyKRkiQ7K
2LYvZeyAC/SXbKNUB0G4s0mdrrxP16x4pvht1jGQ851H2Rz/
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:11 2025 by rpki-client