Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce85890-8b53-3974-ae20-8ebc57baf09a.roa
File:                     9ce85890-8b53-3974-ae20-8ebc57baf09a.roa (raw, json)
Hash identifier:          Lv9vhLmrwhhv7IKSsy+NcIvUdM+c2D+xQA4ucm92Lm0=
Subject key identifier:   14:5E:B7:6C:1C:DE:FE:9C:8F:BB:71:B6:A7:76:F6:50:D5:7C:5C:CF
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584806450EAC163BA5FA9CEA7CC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce85890-8b53-3974-ae20-8ebc57baf09a.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396568
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:0e:ac:16:3b:a5:fa:9c:ea:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=b475078c-64c8-4fd4-92e4-ef855219d2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:7d:e5:9f:f8:d8:d4:7e:76:02:85:14:39:
                    96:49:64:f2:66:93:cb:1c:f3:a1:a1:43:de:c9:72:
                    34:82:5c:c5:6e:e9:7f:74:78:3a:d7:90:bf:8e:bb:
                    b6:1a:a9:fe:06:c8:13:14:09:43:a4:8b:85:ce:31:
                    26:fe:3b:0f:33:11:47:0f:ce:27:79:2d:fb:dc:57:
                    78:7a:4d:57:57:cc:2d:a4:8e:20:50:33:e9:d0:3d:
                    89:56:0c:62:00:29:0e:d4:8c:e2:35:0d:13:c3:7a:
                    78:05:be:32:52:64:f8:73:5f:e7:2f:02:29:32:9c:
                    16:a7:b1:97:bf:45:a3:61:4f:10:97:e3:66:37:8f:
                    d9:f4:93:92:80:7b:9e:db:bc:f5:c3:86:93:8f:41:
                    a0:fb:2c:84:80:44:a9:25:f8:e4:bf:f2:5a:7f:b2:
                    03:f3:58:9c:86:5d:37:4f:1f:30:23:f5:de:d0:3a:
                    e3:2b:d6:dc:83:42:1b:c8:0e:f0:e7:4a:cd:52:b0:
                    da:12:7f:f4:eb:66:52:21:65:72:46:1f:d5:f1:30:
                    cf:5f:51:b8:ca:84:78:a3:12:ba:d2:2c:b0:63:7d:
                    40:63:ab:b2:d9:fd:5c:3f:d9:d7:69:47:40:36:94:
                    6b:95:97:b0:4b:2c:17:44:42:d7:55:78:82:9d:5d:
                    e4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5E:B7:6C:1C:DE:FE:9C:8F:BB:71:B6:A7:76:F6:50:D5:7C:5C:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9ce85890-8b53-3974-ae20-8ebc57baf09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ea:66:e7:08:ea:a6:af:34:1e:6b:c5:95:3c:d1:4f:1d:9e:
         d7:7e:72:01:8c:d3:57:f6:3f:ee:90:39:0c:a3:af:18:e2:c6:
         87:3f:99:72:2c:39:25:2c:ea:38:d3:73:e6:3a:87:ff:cb:dc:
         ec:1f:df:09:a1:a8:09:cb:64:fe:6b:88:b5:95:70:66:f6:13:
         05:b3:68:9e:bc:1e:92:d9:10:1e:85:a1:87:0f:94:b2:34:47:
         0e:95:1b:24:5a:a8:c3:b8:82:a2:29:c4:fe:63:bc:0e:04:db:
         15:c2:aa:75:78:88:34:17:8a:56:19:09:cb:a6:88:4f:a7:5b:
         bb:2c:4a:2c:35:59:bd:f0:e3:09:cf:6f:e2:72:1a:b6:8c:4e:
         bd:c1:0c:74:d6:4e:cf:0d:6b:9d:85:cc:02:a2:3a:e5:fc:0b:
         c2:38:9b:69:d6:af:14:2a:fd:76:6f:6f:28:53:04:c7:30:9f:
         2b:ad:46:f7:3a:6f:27:47:c4:ca:88:31:4e:50:af:00:93:10:
         bb:7b:f3:94:25:80:b7:95:2b:b5:6d:7e:63:47:97:2c:00:93:
         67:48:cb:8c:94:75:fd:e1:4c:27:47:80:e9:f5:41:a5:c7:57:
         f9:f7:2f:56:01:1a:62:54:0e:8d:55:ae:3d:6a:a8:82:29:0c:
         9d:dd:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:59:47 2025 by rpki-client