Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a154e75b-efdf-3a6b-93f5-ea0510c86608.roa
File:                     a154e75b-efdf-3a6b-93f5-ea0510c86608.roa (raw, json)
Hash identifier:          WF+LMiaqUcjCb8w0Zrak4WAawtVzMPI9/XXBMHlMdpk=
Subject key identifier:   CF:F7:BF:1F:FE:C6:36:97:70:D9:B3:40:73:17:80:93:D3:3F:0B:E6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6E0B6A6424D5875B13C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a154e75b-efdf-3a6b-93f5-ea0510c86608.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396549
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6e:0b:6a:64:24:d5:87:5b:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=3a3fbe24-c49d-40f7-af84-a39f4ad0e341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:d7:85:68:e0:ed:50:24:af:38:4f:02:bf:
                    48:ad:15:06:70:23:e6:18:aa:10:84:29:c5:77:07:
                    eb:f8:24:c7:6f:b3:d9:12:ec:37:77:6b:27:2f:a5:
                    48:a5:b4:1c:98:4e:a4:63:57:bc:51:89:32:86:b6:
                    2d:bf:f6:19:29:5c:b9:3e:58:fa:ef:e9:59:15:1c:
                    e2:ef:a0:2a:09:c6:c8:9f:d5:5c:c8:bc:36:90:83:
                    85:fb:6d:a8:2d:7d:c8:13:64:e2:d6:87:97:93:56:
                    06:eb:2a:42:c6:33:1c:5a:26:41:61:c7:4a:e4:fe:
                    3c:d4:18:3d:ad:21:89:f2:e1:5a:c3:e6:8e:7a:46:
                    00:57:14:35:14:a8:bd:46:ba:66:5b:3d:48:18:94:
                    b0:15:03:cb:5b:b6:09:04:65:47:9a:7d:58:10:90:
                    8d:fc:4d:d7:41:40:24:b9:08:c8:02:3d:0c:a0:74:
                    e2:fd:cc:d6:09:4a:92:7c:45:cc:36:44:06:6d:fa:
                    d5:38:eb:f9:1a:a6:da:23:e4:81:e2:16:9f:ae:1f:
                    ec:55:29:e1:71:ab:e5:8f:1b:87:e3:3a:eb:84:6d:
                    2b:89:76:e8:c6:00:fc:bc:87:c0:13:25:4e:ef:ac:
                    ee:bc:0c:9f:e5:97:3e:d6:d7:69:a2:72:bc:dd:59:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F7:BF:1F:FE:C6:36:97:70:D9:B3:40:73:17:80:93:D3:3F:0B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a154e75b-efdf-3a6b-93f5-ea0510c86608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:71:96:aa:a7:97:a2:ff:b2:a4:04:d2:c0:46:67:12:22:89:
         7d:74:b0:74:28:de:e8:ff:5b:27:b8:01:b2:8d:24:8d:35:d7:
         5e:3b:85:ed:f2:c4:5a:e4:6c:03:9b:27:52:80:dd:13:6c:83:
         bc:85:82:d8:c2:c5:94:b1:1d:4a:df:f1:be:8c:5e:ec:05:bd:
         e6:4d:ab:72:8e:24:b2:16:01:6c:4e:33:de:59:29:e2:66:73:
         1e:a6:0c:70:a2:70:e8:2e:48:14:07:e0:c5:b1:d4:79:21:9b:
         7a:93:f7:4e:bb:f5:eb:d4:cd:83:0b:1e:28:bc:e3:e8:17:7c:
         c8:f8:b1:5c:72:bd:ad:e6:71:f5:66:0e:08:03:c0:1d:ef:27:
         0c:a9:5e:de:87:52:8b:ef:5e:84:c6:0b:db:7a:b3:54:a3:ad:
         54:b0:f2:a8:a1:15:2f:f5:2c:6e:3d:77:20:44:8f:15:42:49:
         04:93:ca:93:16:87:af:37:b8:3e:d4:da:fb:97:e3:74:f3:f1:
         a8:d5:a8:aa:13:fc:01:9a:fb:4b:8a:69:85:6b:03:14:f6:47:
         af:08:ba:54:2a:6c:16:04:05:6a:01:d4:43:43:4f:ce:7a:82:
         fe:f0:bc:2a:e3:c4:34:33:3c:29:4a:dc:13:87:60:90:70:e1:
         88:ee:d1:35
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiWC24LamQk1YdbE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDExODE0MDA1MloXDTI1MDQxODEzMDA1MlowLzEtMCsGA1UEAxMk
M2EzZmJlMjQtYzQ5ZC00MGY3LWFmODQtYTM5ZjRhZDBlMzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7PXhWjg7VAkrzhPAr9IrRUGcCPmGKoQhCnF
dwfr+CTHb7PZEuw3d2snL6VIpbQcmE6kY1e8UYkyhrYtv/YZKVy5Plj67+lZFRzi
76AqCcbIn9VcyLw2kIOF+22oLX3IE2Ti1oeXk1YG6ypCxjMcWiZBYcdK5P481Bg9
rSGJ8uFaw+aOekYAVxQ1FKi9RrpmWz1IGJSwFQPLW7YJBGVHmn1YEJCN/E3XQUAk
uQjIAj0MoHTi/czWCUqSfEXMNkQGbfrVOOv5GqbaI+SB4hafrh/sVSnhcavljxuH
4zrrhG0riXboxgD8vIfAEyVO76zuvAyf5Zc+1tdponK83Vm6/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM/3vx/+xjaXcNmzQHMXgJPTPwvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTE1NGU3NWItZWZkZi0z
YTZiLTkzZjUtZWEwNTEwYzg2NjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAs
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAScZaqp5ei/7KkBNLARmcSIol9dLB0KN7o/1sn
uAGyjSSNNddeO4Xt8sRa5GwDmydSgN0TbIO8hYLYwsWUsR1K3/G+jF7sBb3mTaty
jiSyFgFsTjPeWSniZnMepgxwonDoLkgUB+DFsdR5IZt6k/dOu/Xr1M2DCx4ovOPo
F3zI+LFccr2t5nH1Zg4IA8Ad7ycMqV7eh1KL716ExgvberNUo61UsPKooRUv9Sxu
PXcgRI8VQkkEk8qTFoevN7g+1Nr7l+N08/Go1aiqE/wBmvtLimmFawMU9kevCLpU
KmwWBAVqAdRDQ0/OeoL+8Lwq48Q0MzwpStwTh2CQcOGI7tE1
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:20 2025 by rpki-client