Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4b186d2-0846-36c6-b156-321c94c9e275.roa
File:                     b4b186d2-0846-36c6-b156-321c94c9e275.roa (raw, json)
Hash identifier:          /8PCpX/8nUZewhD+utM5gPJvZwjC60myk4xvfcRotmg=
Subject key identifier:   C4:8F:98:85:5C:C7:7D:72:F3:17:30:C8:27:57:43:36:A1:89:26:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285847E4C4A88B999F822811569880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4b186d2-0846-36c6-b156-321c94c9e275.roa
Signing time:             Sat 16 Nov 2024 02:00:28 +0000
ROA not before:           Sat 16 Nov 2024 02:00:28 +0000
ROA not after:            Fri 14 Feb 2025 02:00:28 +0000
asID:                     7342
IP address blocks:        2620:74:4a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:c4:a8:8b:99:9f:82:28:11:56:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 16 02:00:28 2024 GMT
            Not After : Feb 14 02:00:28 2025 GMT
        Subject: CN=6dd100e8-92ce-4252-a1dd-558d0f3f61c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:39:c2:da:bc:e6:d5:33:96:c4:04:ac:e7:
                    15:25:b8:f1:24:17:1d:84:7f:96:ce:4c:d3:62:9d:
                    de:a2:46:ca:39:88:54:b3:96:7e:4f:25:63:9f:86:
                    25:a5:ab:d3:fe:41:39:de:cb:4c:42:84:07:ed:ef:
                    86:77:2b:1e:32:39:56:d9:2c:7a:a9:06:a3:52:53:
                    a8:52:5b:8d:25:f7:45:03:26:f3:87:65:aa:f9:72:
                    64:26:c0:9d:8f:bb:64:00:57:b0:93:2f:61:9b:33:
                    52:95:09:61:c5:6d:96:24:1c:3b:98:57:85:9f:88:
                    8c:89:4c:6e:e7:ae:9f:7e:60:fa:de:5c:20:8f:29:
                    79:9a:91:0e:00:db:18:bc:1a:3a:38:f9:6e:02:4e:
                    ce:b4:5d:ff:a8:57:06:db:d8:c6:e0:9f:96:7e:69:
                    a4:51:41:3d:0c:8a:ef:c5:7c:7b:a1:73:36:c1:b7:
                    de:66:63:76:ec:f7:24:61:86:66:ec:ca:98:57:00:
                    39:4b:de:61:14:38:f3:89:d6:e1:c5:76:82:49:f3:
                    01:49:42:e1:08:19:c5:53:32:c9:5d:94:b6:3f:3b:
                    58:3c:0a:35:27:59:7b:fb:51:43:73:12:e5:fc:fb:
                    ed:fd:e9:92:1f:f6:5c:14:58:18:9d:d2:d2:c0:f4:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8F:98:85:5C:C7:7D:72:F3:17:30:C8:27:57:43:36:A1:89:26:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b4b186d2-0846-36c6-b156-321c94c9e275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:4a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1c:f9:d8:48:f4:73:83:d8:c7:dc:78:95:f7:dd:18:6d:5d:
         c1:96:6a:14:21:2b:9d:33:11:86:ba:ad:ef:a7:91:c3:95:8e:
         7c:0b:0d:94:90:43:86:92:b5:e9:8b:32:25:00:69:f1:d7:79:
         f7:28:0c:9e:3e:e8:9c:cf:b5:30:64:d7:80:bb:c6:8c:3e:61:
         30:dd:fe:22:69:8c:84:83:e0:88:98:3f:c7:06:d7:0f:8e:0e:
         e1:d7:d5:34:da:98:2a:c8:a0:e3:13:98:27:16:a9:14:c6:0e:
         b2:fe:89:dc:b5:bc:de:c1:a9:47:6c:bf:be:e3:0e:69:a7:42:
         96:e5:f5:f9:28:a6:9a:d9:ad:15:8a:b7:10:a0:a4:a6:98:2d:
         c7:77:ab:38:44:87:9c:0a:74:3d:6f:35:a0:83:39:35:b6:1d:
         a6:32:44:d3:61:67:01:55:4b:84:48:34:9a:49:fb:c7:a8:4e:
         69:83:0c:4b:66:70:c4:ab:18:2a:6c:98:63:5d:32:fd:2d:e2:
         5e:d0:5b:fb:89:83:c0:78:a6:21:32:61:54:d0:03:a1:f9:6e:
         75:cd:8f:a3:e0:b6:3d:b7:5f:b8:6b:58:84:33:bb:83:48:e8:
         82:f4:9e:b9:c1:59:f3:e3:9a:27:f1:dc:5c:c5:7e:87:eb:29:
         c8:6d:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:14:18 2025 by rpki-client