Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70524da8-6a44-3f79-907d-b15a58bfd8bf.roa
File:                     70524da8-6a44-3f79-907d-b15a58bfd8bf.roa (raw, json)
Hash identifier:          Gyeo49XCMHgVfWwRJF8rs6ZzQWNE6zVlyZTPB/OJ4mo=
Subject key identifier:   D5:99:BB:CF:0A:64:C9:90:7B:D0:F7:5F:9E:4E:5A:0F:E8:39:E1:39
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6CB92B2DF0405C085180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70524da8-6a44-3f79-907d-b15a58bfd8bf.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396545
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6c:b9:2b:2d:f0:40:5c:08:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=f813d7db-eb82-4b27-8e66-3147b16ec5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:c8:df:de:4f:c3:48:24:3d:54:2d:e7:9b:
                    76:ef:8e:12:0e:5e:c1:33:62:3d:7d:9c:84:e3:d4:
                    b3:d7:d1:32:26:b6:48:fd:d9:fb:17:b9:ef:f8:2c:
                    7d:f4:bf:0b:27:29:4d:f7:ea:f0:7b:0e:33:aa:5b:
                    af:a9:9a:b3:aa:93:73:77:96:29:8f:82:c9:ae:7d:
                    9d:f5:b6:f0:60:1d:82:ca:9b:46:ab:3e:78:b5:1e:
                    bc:49:d4:7b:7b:9c:a9:17:a1:de:2e:c7:4e:a4:d5:
                    27:32:b7:16:bd:de:f2:ab:c6:a9:41:78:ee:d2:7e:
                    d8:11:5a:71:52:80:59:c5:6a:fd:d1:3c:4d:5a:4c:
                    f1:20:0b:63:c3:6f:35:d0:8b:9f:fb:76:ef:1b:30:
                    ae:e4:02:01:71:00:92:91:1a:e4:1e:48:02:66:11:
                    01:00:fc:d6:77:1c:0b:aa:8e:07:6c:77:17:5f:0f:
                    64:86:e5:cc:6a:67:a2:c4:dd:25:fe:86:ab:a1:0a:
                    19:07:5c:3f:7a:44:9e:19:01:37:63:71:e3:f8:6f:
                    c9:10:c7:34:55:67:ee:4f:7f:33:4b:50:c3:e3:d6:
                    bc:c7:b1:ad:cc:9c:e9:f0:6e:bc:2c:4b:e0:75:92:
                    de:04:9e:93:25:e1:d4:e1:07:b5:43:a9:82:45:8b:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:99:BB:CF:0A:64:C9:90:7B:D0:F7:5F:9E:4E:5A:0F:E8:39:E1:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/70524da8-6a44-3f79-907d-b15a58bfd8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:77:4f:7e:d4:cc:bb:39:12:57:78:4c:9f:72:f1:9d:3e:
         e5:7a:de:2a:4a:3b:e6:fd:5e:75:8f:ef:10:7d:30:14:e6:f8:
         ab:1b:a2:c7:fa:4a:f1:35:84:59:98:84:1f:4c:8c:37:fb:8a:
         e1:79:d2:83:2d:cb:61:59:2a:e1:80:28:53:bf:3f:72:aa:09:
         a7:4d:f0:9b:80:8a:5c:fb:e1:ec:17:30:c9:0a:42:9f:cc:78:
         63:13:98:84:57:25:80:96:e1:40:f7:6b:61:8e:8e:9b:92:95:
         b0:93:0d:a2:f7:9f:2c:0b:1c:1e:d4:5a:50:b3:08:1b:02:dd:
         07:10:97:40:63:7c:d9:3b:dd:2c:e5:ba:2b:98:18:96:51:4f:
         ed:16:c4:6e:25:e3:ad:12:21:fa:cc:cf:4d:50:cc:93:e2:18:
         4f:81:c5:a9:49:e0:b9:96:c9:ea:19:fc:fb:24:ea:f2:20:86:
         a7:1f:2b:8e:8a:8f:2a:d7:95:e0:ea:d8:1b:d0:db:ae:02:96:
         d1:9d:5a:fa:7e:0f:8b:43:f9:64:c7:99:22:54:58:45:7b:35:
         1b:19:7e:26:4e:c0:c4:33:3a:c4:c4:98:30:23:05:dc:ca:d9:
         d9:35:a9:3f:c2:0d:4a:75:68:df:51:95:38:00:48:1a:94:e4:
         c3:a1:00:49
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiWC2y5Ky3wQFwIUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
ZjgxM2Q3ZGItZWI4Mi00YjI3LThlNjYtMzE0N2IxNmVjNWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6bI395Pw0gkPVQt55t2744SDl7BM2I9fZyE
49Sz19EyJrZI/dn7F7nv+Cx99L8LJylN9+rwew4zqluvqZqzqpNzd5Ypj4LJrn2d
9bbwYB2CyptGqz54tR68SdR7e5ypF6HeLsdOpNUnMrcWvd7yq8apQXju0n7YEVpx
UoBZxWr90TxNWkzxIAtjw2810Iuf+3bvGzCu5AIBcQCSkRrkHkgCZhEBAPzWdxwL
qo4HbHcXXw9khuXMameixN0l/oaroQoZB1w/ekSeGQE3Y3Hj+G/JEMc0VWfuT38z
S1DD49a8x7GtzJzp8G68LEvgdZLeBJ6TJeHU4Qe1Q6mCRYsC2wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNWZu88KZMmQe9D3X55OWg/oOeE5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNzA1MjRkYTgtNmE0NC0z
Zjc5LTkwN2QtYjE1YTU4YmZkOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB143dPftTMuzkSV3hMn3LxnT7let4qSjvm/V51
j+8QfTAU5virG6LH+krxNYRZmIQfTIw3+4rhedKDLcthWSrhgChTvz9yqgmnTfCb
gIpc++HsFzDJCkKfzHhjE5iEVyWAluFA92thjo6bkpWwkw2i958sCxwe1FpQswgb
At0HEJdAY3zZO90s5bormBiWUU/tFsRuJeOtEiH6zM9NUMyT4hhPgcWpSeC5lsnq
Gfz7JOryIIanHyuOio8q15Xg6tgb0NuuApbRnVr6fg+LQ/lkx5kiVFhFezUbGX4m
TsDEMzrExJgwIwXcytnZNak/wg1KdWjfUZU4AEgalOTDoQBJ
-----END CERTIFICATE-----