Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa
File:                     be8b0ba4-4c98-3879-8103-ca1a55408f51.roa (raw, json)
Hash identifier:          bqlIeD/afNnQfpfD7JZGj0FQJkHvf6yWSR00rwkvl+4=
Subject key identifier:   49:94:D7:1E:CA:CF:7A:6B:33:A2:08:AF:B0:8B:2C:7E:37:1F:14:EB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848424B1513BD42AE1AC484B580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:62::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4b:15:13:bd:42:ae:1a:c4:84:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=e3af8df0-8120-4f88-94a9-03ca689fac7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d4:fb:39:16:ba:8b:d8:91:14:77:97:f9:e4:
                    16:f6:9b:3c:86:c1:b9:c3:e1:db:a7:0e:64:8e:c0:
                    c2:1a:91:ff:76:19:e0:6d:22:0e:9d:b1:13:8c:88:
                    aa:e6:f6:df:e0:57:53:28:16:b5:9c:46:8f:52:de:
                    3e:c9:e6:27:ee:55:31:f4:b1:57:61:61:0d:9b:4f:
                    87:1a:a9:04:ad:a1:d8:84:f5:d7:8e:47:95:8a:7d:
                    bf:2c:ba:19:3e:4c:0d:53:3a:17:f7:36:24:ad:d4:
                    7b:e9:0b:be:09:b8:4a:1e:38:2f:7a:e6:e7:2b:4b:
                    60:46:98:5c:47:f6:ef:0c:31:b5:3f:cf:da:7a:29:
                    2d:c0:e9:3e:33:bd:dc:43:5d:d5:27:79:f3:ec:f0:
                    c1:3a:3b:4a:af:54:3b:c4:aa:4d:f8:ea:c8:44:94:
                    25:5e:fe:e9:b6:13:23:c7:41:e7:e6:4c:92:e9:f6:
                    65:2f:33:76:24:da:cd:38:1c:46:71:45:f6:58:fe:
                    34:a0:ea:33:e0:be:d9:7d:24:e2:73:b7:92:4e:82:
                    65:d2:6a:57:4c:83:39:53:4a:5d:85:a1:be:c3:8a:
                    3d:a0:3a:99:1d:3f:85:d2:6c:e2:6e:13:d9:8d:fd:
                    b5:21:84:2e:55:cc:7a:a0:26:db:5b:0d:6d:10:e7:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:94:D7:1E:CA:CF:7A:6B:33:A2:08:AF:B0:8B:2C:7E:37:1F:14:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/be8b0ba4-4c98-3879-8103-ca1a55408f51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:d6:40:25:78:89:3d:ff:9e:36:85:57:6e:11:70:79:3e:b3:
         e8:a7:f3:00:3f:a4:ce:8d:a0:95:61:e1:ef:9f:9d:7d:7a:52:
         07:de:64:85:10:11:d1:01:7c:b2:59:2a:7f:9a:f2:71:e1:23:
         b1:8a:2b:21:37:3d:4a:d2:c1:dc:cb:0c:16:61:6c:c6:c4:df:
         17:ad:53:98:38:63:d1:c5:1e:f3:6a:48:c5:d4:a4:5c:6a:6a:
         bd:e3:81:f0:11:80:9d:dc:2b:24:5a:7e:df:c3:35:8d:ee:f9:
         54:a5:83:f0:3b:63:9f:51:64:fe:63:55:1e:4a:24:5a:38:72:
         00:5d:ce:81:eb:ea:a1:9b:e7:17:d2:a4:5a:fe:32:45:87:16:
         0e:99:20:48:f7:58:c4:4c:68:88:70:9c:6d:15:b8:cf:a3:26:
         11:d8:1b:ff:0f:02:82:6b:56:03:d0:93:67:4e:eb:58:0e:07:
         c4:15:15:17:e8:29:13:9c:fd:6e:4a:c0:ad:78:fb:4b:70:f6:
         0e:80:e5:80:8a:7b:a2:0d:45:c3:02:82:20:17:e1:53:c0:d6:
         92:52:bb:a0:10:8c:12:92:80:08:cb:07:37:69:17:4f:24:37:
         00:27:e6:c5:40:b1:a5:dc:80:04:e2:73:89:9c:58:23:1a:f3:
         4d:ce:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:37:38 2025 by rpki-client