Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f75dfda-6cef-372c-8ae0-863ff8750e12.roa
File:                     8f75dfda-6cef-372c-8ae0-863ff8750e12.roa (raw, json)
Hash identifier:          tyjJChL0AKgdnoPLxOxB29QbDOpnWCclRfqb5y44MqY=
Subject key identifier:   4C:77:2F:39:2F:48:12:C8:B1:5F:6F:D2:6E:AC:33:A8:8A:C2:11:FC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584855D5A3F34C8C4DE909680880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f75dfda-6cef-372c-8ae0-863ff8750e12.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     0
IP address blocks:        2620:74:12::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:a3:f3:4c:8c:4d:e9:09:68:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=989ea262-ea85-4ea2-9ebf-233df57d8f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:9d:52:62:e3:dc:66:45:65:72:f8:a6:e4:
                    6f:7b:bb:41:c6:9a:47:a4:87:82:92:a1:ba:9f:29:
                    e1:42:bf:50:d9:85:75:bb:e7:ea:d4:2c:74:82:f0:
                    3a:8a:4d:8c:ba:f2:a6:84:29:53:4e:5d:5f:39:0c:
                    93:23:92:c4:ea:f8:fc:c0:fc:ba:a3:8d:0f:52:2a:
                    70:cc:68:99:2c:fe:cc:95:3f:f6:d4:7b:0f:20:71:
                    b9:0a:9d:05:9d:da:3f:b4:56:92:07:73:0f:e7:36:
                    88:c6:cf:95:84:92:59:ff:3e:67:02:70:b6:32:16:
                    b7:bc:42:18:d4:df:36:12:91:a9:be:7c:d4:2e:92:
                    ff:bc:16:cb:87:6c:f2:3a:1a:2e:fd:c2:57:c6:0b:
                    fb:d7:77:3e:8b:8d:73:04:08:1b:08:17:ba:59:95:
                    f8:66:70:6f:e9:dd:83:e4:79:35:fb:23:64:14:4a:
                    41:c1:48:84:63:a9:ec:1c:28:0c:0b:5a:16:f3:ff:
                    11:91:63:45:ac:6d:8b:f5:39:41:c3:2a:67:a7:4c:
                    47:80:17:6d:e0:d1:ed:1b:32:9c:9f:a8:64:48:8e:
                    97:05:90:6d:4c:81:95:25:5a:c6:07:66:26:f6:2d:
                    91:ed:98:5c:93:f2:4b:e3:59:16:af:9f:6a:53:60:
                    a0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:2F:39:2F:48:12:C8:B1:5F:6F:D2:6E:AC:33:A8:8A:C2:11:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8f75dfda-6cef-372c-8ae0-863ff8750e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:12::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:7a:0e:a8:34:d1:39:34:09:9e:d2:d1:d8:a2:34:a7:a0:
         49:e8:60:f4:bc:31:20:ab:07:af:8a:68:aa:a2:fc:99:0e:6a:
         cb:3f:de:a3:a7:05:8b:63:21:52:a4:a9:5a:77:c1:3a:a0:9f:
         92:8e:65:68:5d:9d:ef:69:9d:e2:fd:2d:93:c7:94:a2:c0:0d:
         4d:7d:ca:57:43:00:d5:80:4d:e5:9a:2b:fa:98:04:d0:69:3a:
         2e:04:95:c9:4e:20:b8:b4:04:49:7b:3e:e4:d7:f6:41:c5:31:
         56:0e:6a:e9:22:5e:cb:2f:06:9d:d1:d2:67:76:65:05:0b:24:
         dc:ab:47:52:93:66:39:d1:b6:62:9b:72:4f:9d:09:0b:da:f7:
         6c:a1:71:72:0c:54:0b:ed:af:8b:3c:65:5e:d3:02:54:4a:15:
         d7:0f:e9:e8:28:95:8b:4d:69:a7:b0:fb:6a:c8:03:5e:9e:d9:
         22:19:7c:6f:df:45:cf:60:88:6d:3c:4e:09:ab:89:ae:69:b9:
         62:e3:65:50:41:26:ee:e2:af:88:3d:53:bb:ba:80:c2:17:52:
         56:cc:8c:ed:dd:38:94:ba:64:a1:b8:98:47:a5:1f:d5:f5:c5:
         0d:65:5b:54:f4:b1:cf:ba:fa:02:79:fa:b0:a8:9c:ad:93:ab:
         40:ba:f1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:17 2025 by rpki-client