Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad77cfbf-165b-3e32-b325-d2d29ae03cb9.roa
File:                     ad77cfbf-165b-3e32-b325-d2d29ae03cb9.roa (raw, json)
Hash identifier:          m4o0hBhUoctjx4lS5aAGyQbNN1SKUFau4wKUUdWwRK4=
Subject key identifier:   3E:B0:66:82:91:BC:A3:96:28:F1:07:10:F3:B6:CF:CE:5E:96:E9:3B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858480EA520A734DEBEAEFE7E52C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad77cfbf-165b-3e32-b325-d2d29ae03cb9.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     7342
IP address blocks:        2620:74:83::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:20:a7:34:de:be:ae:fe:7e:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=c251f1cc-80b5-46d7-8356-fafb9815ad0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:1d:22:e0:09:91:d6:c9:d9:9b:c3:95:c1:
                    58:95:48:3a:e0:32:58:08:02:c7:f7:48:64:90:96:
                    86:b4:bd:dc:98:f1:93:5a:d1:75:ea:59:31:cf:fe:
                    36:c0:e5:f4:86:cd:1d:15:c6:16:35:d5:f4:7b:4f:
                    0a:12:cb:3b:ec:39:4c:0b:da:81:44:68:b8:74:0b:
                    5b:28:32:2e:0c:93:92:60:99:3b:54:e8:1a:ed:4b:
                    e4:63:fe:28:e6:95:0a:68:c1:85:83:f0:9e:a8:0b:
                    47:4d:c5:5a:a2:12:70:02:5f:dd:a1:8d:79:60:6a:
                    37:75:e9:70:88:01:7f:51:f6:7a:c3:ed:c9:87:91:
                    73:9f:44:ca:e9:f8:51:27:37:e7:24:41:bd:9d:fc:
                    bd:28:7b:d1:d4:66:7b:45:0f:3b:b2:be:4e:ff:62:
                    ee:4c:32:2f:0f:72:dd:33:4a:dc:c9:d0:1b:3b:a1:
                    2e:5e:38:8e:dd:47:0d:4f:bb:61:21:4f:10:54:4d:
                    36:eb:2e:eb:77:7e:e0:5e:df:4e:13:ab:94:fd:a6:
                    22:5b:01:09:58:d8:72:20:6a:46:12:b8:cf:b8:e6:
                    36:40:59:0f:9a:a4:3c:6b:8c:2d:4e:5c:18:ee:85:
                    56:9a:6d:c8:f3:c5:0a:e5:3e:fd:c5:9c:20:b9:aa:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:66:82:91:BC:A3:96:28:F1:07:10:F3:B6:CF:CE:5E:96:E9:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ad77cfbf-165b-3e32-b325-d2d29ae03cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:83::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:86:17:b0:dd:23:32:fb:a3:9b:63:85:52:23:40:1a:f3:
         65:77:22:a0:14:07:bf:44:78:b8:50:8f:62:73:b2:cc:13:65:
         00:a8:05:cd:c1:47:6c:65:2e:42:3e:c3:7a:4d:d2:28:ee:75:
         76:c2:6e:98:de:6d:8d:c0:bc:32:e7:36:cf:99:70:2e:4f:10:
         7d:3e:5f:3d:9b:97:25:bd:07:79:c0:09:62:aa:db:5b:63:83:
         43:2d:60:2b:1a:fd:aa:8e:11:97:c2:cd:54:78:65:b2:4c:4a:
         49:e8:3c:e8:ce:72:c2:f0:7d:59:12:e3:12:11:3b:79:7e:40:
         47:96:78:5d:40:87:b9:98:e8:3e:7f:1b:38:d2:48:22:b9:6d:
         ce:c2:6a:fd:c9:fa:e7:5a:d3:93:e8:da:6b:d1:77:66:f8:9a:
         46:5b:f3:8e:da:92:c4:9e:60:d4:ab:28:d0:3a:f5:c5:f0:bb:
         3b:cd:da:25:14:e6:b7:84:39:0d:26:a6:11:60:68:1b:de:bf:
         6d:7d:c0:a2:0e:5a:15:5d:f9:6b:61:0f:a2:fc:5b:b2:bc:ac:
         2b:d4:26:16:49:00:6c:29:97:ad:69:08:58:8f:e1:d2:04:82:
         36:67:4c:c0:8c:e3:b4:44:ee:3e:9f:db:ff:8f:ca:3d:5a:97:
         df:ae:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:58:19 2025 by rpki-client