Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa
File:                     6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa (raw, json)
Hash identifier:          /o0qwoFnv59GAAuThq6SyH3wk5AgP7nOC9sE52ykrM0=
Subject key identifier:   3F:50:7F:62:98:2E:0D:37:25:9F:29:50:2C:0B:4B:CB:90:3E:A3:8C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848064512A02CA5046300A8C140
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396590
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:12:a0:2c:a5:04:63:00:a8:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=5ca37353-c39f-429b-8f59-2b85f4961632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:4c:45:1a:d3:68:a9:e2:31:03:dd:e8:d3:
                    63:97:0d:02:84:e4:0e:70:d0:49:da:85:5b:ee:33:
                    9e:0c:7b:5d:ae:20:65:8e:8b:50:62:42:c6:5d:2b:
                    b9:2e:91:cd:96:2d:9e:5c:4b:f1:64:d2:73:e1:5e:
                    a2:2b:cd:8b:3b:c3:19:ea:1e:6f:70:d4:c1:78:93:
                    e5:9f:c9:f4:f7:dc:75:3b:61:80:1a:0a:b7:4a:9c:
                    b4:01:e3:45:8e:16:c3:7c:37:8b:fc:4a:5c:60:0d:
                    a5:3a:7c:f1:0e:81:f0:1b:f1:95:72:df:4a:4a:15:
                    54:28:11:31:18:1f:71:96:76:7e:4b:a5:7e:b4:94:
                    75:de:98:ff:49:b4:e2:da:64:59:42:4a:57:df:db:
                    d9:80:8c:3d:7c:3e:4c:4a:f6:5e:4d:30:6d:fe:b6:
                    33:62:fd:08:d3:c2:71:40:2e:80:80:ef:e8:ea:1f:
                    eb:c4:53:9b:7e:b6:f7:39:f4:3a:f2:c6:39:ca:1d:
                    dc:ff:6c:9b:11:5d:83:16:7c:e1:32:9f:e5:08:72:
                    e4:f3:f6:e2:8d:55:7b:7a:38:31:21:6e:2b:83:22:
                    88:6a:a5:11:c2:5e:b8:d9:16:ef:9f:a7:55:e1:de:
                    c5:cc:62:c6:65:a7:5d:67:ad:13:15:6d:02:0f:06:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:7F:62:98:2E:0D:37:25:9F:29:50:2C:0B:4B:CB:90:3E:A3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6f38aa99-aae2-3b96-9a04-a4a6c66499b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:4b:ed:b4:ed:c0:55:f6:46:0f:c0:94:ac:52:48:d2:15:9c:
         45:3c:4b:84:e5:bf:a8:07:ed:26:c3:5e:f6:a2:ac:ae:f3:e8:
         32:26:c4:8a:d8:22:4d:09:9a:76:b4:c9:6b:1f:1d:97:86:d0:
         0e:de:96:01:73:19:e9:9f:f3:6e:eb:c1:53:04:e3:ee:0b:86:
         cd:8e:af:b2:ca:76:4f:6f:a8:2b:02:74:e7:11:fa:1e:f5:ff:
         4a:43:81:70:bb:3a:08:8c:c1:5b:0a:1e:40:14:1a:19:c4:bc:
         ec:c5:ae:96:67:aa:2e:b1:15:dd:81:e3:f8:9d:c6:34:74:da:
         3d:0d:36:78:32:bb:c0:d1:f6:86:06:d3:e8:6c:17:d7:13:85:
         d1:a3:62:55:09:fd:a6:81:64:d6:02:57:90:b3:4c:4d:28:46:
         c4:49:1e:5e:ad:69:a7:5c:1f:0b:4c:93:fb:a0:d7:2c:ec:9e:
         85:25:34:87:2b:13:73:7b:ba:9a:36:12:b0:f3:9c:d8:13:d5:
         82:09:09:c9:71:de:ab:78:85:b2:84:60:7f:3f:1a:77:b2:14:
         d4:b5:53:67:14:68:66:d7:b8:aa:6f:90:50:11:28:96:f9:ed:
         79:9a:d5:cb:b0:0e:4b:c5:60:53:fc:94:a6:76:d6:c5:d8:50:
         5a:dd:bf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:49:37 2025 by rpki-client