Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76eef1a6-272e-328a-b2f2-890432c45e84.roa
File:                     76eef1a6-272e-328a-b2f2-890432c45e84.roa (raw, json)
Hash identifier:          z7tBLxfw+Q2Q4rHM6mB1maZr0yiQlAjZW2tb7DDk8qw=
Subject key identifier:   BC:3C:FB:85:6C:81:3E:4D:42:6C:B5:C2:9B:08:DB:0D:66:74:D3:0D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A9712E447DCBCF3A06E00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76eef1a6-272e-328a-b2f2-890432c45e84.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     396541
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:97:12:e4:47:dc:bc:f3:a0:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=9090454e-1f9c-4a3a-a813-d2c25820fc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:8d:61:60:c1:98:3f:06:b6:d7:1c:97:9a:
                    dc:64:1d:0d:c8:85:97:de:25:22:92:38:df:c2:52:
                    11:76:0e:61:53:4d:46:9d:8b:e8:a3:54:61:b0:ee:
                    d1:4a:cb:25:d5:1b:79:1e:e7:22:db:2b:28:c9:d5:
                    5e:0c:0d:82:a2:5a:5b:e1:98:ec:3c:1c:11:af:80:
                    1f:6a:af:d3:ab:c2:f3:ba:07:77:3d:00:66:8b:1c:
                    1f:e5:81:bf:0b:21:c1:89:40:0d:04:eb:f8:ba:3b:
                    30:43:71:d3:b2:a0:92:92:d5:3a:dc:25:e3:b1:e9:
                    49:cd:98:91:fa:b9:52:f8:8b:ab:a9:8d:94:ec:c8:
                    f7:72:c2:c0:e7:61:0a:82:68:1d:7c:e1:ea:96:dc:
                    a9:ea:e8:a1:06:2c:e6:2b:71:2c:68:30:14:d3:a1:
                    08:ae:68:c9:c3:20:19:50:d1:b6:b6:ac:6c:e1:c6:
                    9b:99:86:33:60:33:b0:08:a3:36:63:e5:30:26:c9:
                    ba:ab:a7:a2:5e:83:80:30:b6:b1:b5:07:76:1c:30:
                    dd:51:61:97:7b:57:7d:9f:2c:9e:2e:7f:51:65:81:
                    a3:b3:e5:35:51:68:82:1a:b4:7a:76:2b:b9:b0:b8:
                    5e:77:9c:fd:73:f3:86:51:04:a3:3f:64:93:2a:27:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3C:FB:85:6C:81:3E:4D:42:6C:B5:C2:9B:08:DB:0D:66:74:D3:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/76eef1a6-272e-328a-b2f2-890432c45e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:4e:bb:91:2e:ce:3e:a5:6b:c5:da:0a:3b:be:0f:5a:bd:
         ff:29:c9:dd:c0:b1:c4:cf:23:76:30:f5:fc:75:f2:e7:16:5c:
         84:47:57:4b:54:99:88:d2:3b:1d:07:0f:94:b3:39:7b:aa:49:
         13:dc:b5:d3:97:63:05:fc:f0:53:2d:37:84:58:71:e8:c9:b2:
         7d:5c:64:03:02:15:8e:07:6a:ab:7e:d3:76:43:49:8e:61:ed:
         65:55:83:c5:19:b9:14:9e:73:dd:93:f9:c3:7c:b9:6e:25:a2:
         6c:3e:46:f6:b8:62:37:4f:d4:5f:79:c8:26:29:fe:8e:68:0a:
         ac:83:85:cf:d4:44:02:ca:7f:71:bd:e1:1e:87:58:05:4e:ad:
         23:7e:b2:63:4a:30:83:72:89:12:10:e8:e4:82:66:6c:9e:37:
         ba:53:ee:24:a1:93:d4:72:0e:a2:af:fc:01:be:04:71:54:35:
         5e:96:f7:4e:16:7f:2f:ff:7b:19:05:d4:ca:30:ea:07:cb:bb:
         a1:88:2a:0c:67:3a:b3:29:90:70:89:ba:ef:34:db:99:e9:9b:
         fc:4c:9d:a0:75:c3:d7:08:40:14:5d:2b:ae:35:cf:df:d0:9f:
         8b:d7:1f:4b:05:0d:47:6c:8e:c3:20:c4:ab:39:31:d3:6a:f4:
         b0:ae:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:08:09 2025 by rpki-client