Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0ba5769-97f5-35aa-b8b3-09aea4ff3918.roa
File:                     b0ba5769-97f5-35aa-b8b3-09aea4ff3918.roa (raw, json)
Hash identifier:          d5hmehjRbmq5Tcr7oCoH02p9/cgrwVWBcdrAdsOYmjY=
Subject key identifier:   17:AA:6E:64:2F:BE:82:F7:34:11:8C:01:4E:C0:64:C1:C0:40:A0:16
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858488280A214C6FAB0FD3C38F200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0ba5769-97f5-35aa-b8b3-09aea4ff3918.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     396559
IP address blocks:        2620:74:2c::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:a2:14:c6:fa:b0:fd:3c:38:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=94870bbd-f138-492a-af3f-3059749c4e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:59:db:71:53:2c:4c:fd:d2:2f:8c:f2:36:
                    ae:15:42:dd:ff:2f:ed:6e:97:bb:77:6e:15:21:03:
                    66:91:77:d1:c1:aa:05:b7:24:ba:15:3d:93:f9:f4:
                    db:ca:4a:26:50:f8:0b:3d:ef:33:8c:ba:c5:05:53:
                    0e:72:b4:9d:78:e8:79:5f:60:12:c5:5c:0b:04:17:
                    e2:50:27:49:cc:21:20:b3:14:13:13:38:cd:e7:1b:
                    58:5c:9c:c1:a2:60:bf:fb:8e:dc:15:21:37:e5:55:
                    b5:05:b1:23:21:de:b4:b2:70:f7:e9:71:61:34:dc:
                    8d:65:58:d7:1f:ec:e1:05:f5:4d:b5:c6:bf:d0:38:
                    60:37:8a:be:5d:80:62:c9:85:d7:12:dc:4f:cc:c4:
                    86:d8:fc:13:20:52:72:7c:ba:c3:71:f7:38:f2:fe:
                    f8:ab:5e:7c:77:4d:b8:a3:a9:c4:d2:60:b8:02:ca:
                    09:3c:de:2d:34:67:73:0c:c7:82:e9:74:80:2a:0c:
                    34:0d:82:06:53:9c:cb:da:9f:e7:74:c9:78:67:69:
                    25:3a:b0:a9:fa:8e:45:85:04:2f:df:a9:5c:20:a0:
                    20:71:b3:a7:31:49:15:3e:b3:b0:f2:28:c5:83:14:
                    d4:a3:34:97:42:96:a6:8a:31:e1:a7:0a:e9:c2:de:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AA:6E:64:2F:BE:82:F7:34:11:8C:01:4E:C0:64:C1:C0:40:A0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0ba5769-97f5-35aa-b8b3-09aea4ff3918.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f7:b5:05:fd:65:38:a1:a0:3c:8b:d2:8f:42:58:81:c2:53:
         dc:52:2f:60:ad:39:7e:23:5e:64:ed:4c:80:68:33:e2:7d:fe:
         1e:50:e7:72:78:3f:8c:00:68:e5:5e:ba:8e:a7:ef:3c:47:04:
         6d:2c:20:1b:30:6a:7c:00:75:f1:f2:07:1a:9c:2f:c9:d9:3a:
         c3:08:e9:1b:ab:bb:f9:07:f6:28:3c:17:ba:67:b7:e4:2c:7e:
         67:dd:24:be:2f:eb:be:74:91:6f:b2:c0:b0:8d:08:4f:02:cf:
         2b:70:2d:80:86:b6:8c:5a:57:12:c7:ba:28:90:5d:f0:28:24:
         48:00:ce:e0:d5:12:16:9d:cc:f1:7a:e8:a6:a9:a7:be:15:13:
         ca:ae:d3:19:bf:0a:f7:b7:71:29:b7:b6:64:9b:78:4b:b6:0f:
         ac:14:02:73:ca:a7:b7:3e:2f:0c:e9:99:1f:f3:44:38:35:e4:
         b9:10:a7:18:23:d5:e9:3b:77:eb:db:0e:77:8f:bc:84:b8:0e:
         39:46:1e:9f:ba:d3:0d:33:f0:b7:fd:4e:64:57:a0:60:d9:7e:
         4f:22:0b:04:52:11:c8:f7:f4:31:ba:07:0f:50:46:b3:23:e8:
         d2:c6:32:db:08:6f:9d:f5:82:27:c8:50:5a:e4:ad:f0:7d:5f:
         79:a1:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:43 2025 by rpki-client