Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa
File:                     b295b1e9-136a-331f-9518-a3269178352b.roa (raw, json)
Hash identifier:          aHbjlZY2UH8UaYBN0icV++iH1pg5ZgaDF1pBWg/E4Nw=
Subject key identifier:   1B:E7:8C:4B:0A:6F:AD:AE:90:33:AB:0E:BF:7B:50:C0:BB:45:F3:65
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858485B6B0A1A7065655FD60C8F40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:55::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:0a:1a:70:65:65:5f:d6:0c:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=7fa2a4f4-aded-47a4-af95-c9036ab32af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:87:03:32:4f:95:32:5a:16:2d:b8:3c:26:
                    25:92:8b:d3:76:93:2d:c1:1b:1f:88:41:3b:79:ff:
                    b1:94:38:88:97:62:e4:22:9e:93:fe:4d:08:aa:13:
                    e8:e0:84:99:b0:cb:e8:34:c9:81:67:6b:83:92:e6:
                    e9:61:61:94:33:e5:5d:d2:c0:33:81:88:21:8b:48:
                    44:10:4a:47:f5:6d:a8:cc:ce:1e:4a:5d:cb:40:07:
                    ad:0b:62:57:d6:e5:53:17:4a:8e:ed:02:ea:49:50:
                    32:ae:a4:3c:d8:e8:56:66:11:64:24:48:a8:7f:9a:
                    11:a2:3f:98:02:e8:3c:9f:cd:09:b0:36:5f:29:25:
                    b0:e3:4c:d8:36:0a:e8:5c:9d:d9:3f:db:d5:8b:12:
                    a7:52:1d:c6:6d:b7:c2:26:d8:c9:66:0f:1e:e8:be:
                    5f:24:c3:dc:ce:4f:c8:69:84:2a:13:bf:97:a7:2e:
                    40:98:a9:90:18:d7:67:1a:76:fe:c3:49:b6:24:c6:
                    9a:fe:b9:c9:d9:2e:2e:02:bd:bc:a5:d2:27:6f:4a:
                    14:ca:98:2c:3f:ad:46:0f:e8:32:70:89:ec:d9:af:
                    5b:f3:76:40:61:eb:37:af:96:41:3c:ec:25:58:88:
                    5d:a5:88:08:28:0e:cf:c7:f0:5b:ec:85:6e:23:79:
                    8e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E7:8C:4B:0A:6F:AD:AE:90:33:AB:0E:BF:7B:50:C0:BB:45:F3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b295b1e9-136a-331f-9518-a3269178352b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:55::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:15:a0:66:b6:f1:ff:ca:8f:67:a8:37:23:ef:38:a4:a5:ec:
         a1:13:15:28:5b:02:fc:35:88:e9:97:e9:84:c1:d9:8d:60:98:
         94:d7:3b:f6:69:8c:33:a8:45:94:0c:79:75:95:76:41:3c:c5:
         f2:54:01:50:2a:74:e1:40:f8:a1:c1:f5:87:70:c2:ba:30:ff:
         20:bb:73:a9:5e:73:e8:07:e8:03:85:f6:b6:51:c1:f2:66:ee:
         c0:00:1c:6f:67:fc:b6:84:d3:39:17:65:d6:93:00:38:3d:74:
         27:4a:25:06:37:16:61:56:25:e4:41:0b:32:57:d1:f8:87:f4:
         48:77:3f:61:d9:53:09:92:b8:1a:03:1a:80:e3:19:e5:30:fd:
         12:98:be:7f:82:68:f0:27:8c:f4:eb:c5:72:4b:31:11:46:58:
         17:3d:81:2f:aa:7a:e7:05:5d:6e:6e:33:39:4d:1e:01:ec:8a:
         63:7f:91:ad:07:9d:02:ac:cb:be:ae:8f:62:1e:05:6d:66:95:
         52:c9:4c:67:5e:e6:13:d7:03:33:6a:75:55:4f:9b:d7:3e:b5:
         ca:33:0e:06:a9:57:51:b4:fc:d4:39:45:23:c4:b6:b9:8b:ac:
         ab:9d:26:cf:4b:f9:3d:d2:fb:ff:fd:c7:8f:13:f7:64:45:21:
         b7:1c:40:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:46:19 2025 by rpki-client