Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa
File:                     c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa (raw, json)
Hash identifier:          6kKQGufTAGFfuELqCGiNxZPvtMDhZvGjU17XedSj7nM=
Subject key identifier:   FC:1C:0F:6A:41:65:B0:CB:82:E8:EB:5A:25:34:48:4F:50:38:DC:A2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD6F367FF11F024A798C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     397205
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d6:f3:67:ff:11:f0:24:a7:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=f5dc088a-51ea-4b92-8c65-20ef28615d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3b:ea:f8:20:04:e0:b8:a1:53:68:b6:4e:16:
                    fb:84:52:17:b2:49:7e:22:12:e5:3f:c0:0a:2b:93:
                    5b:66:f7:c9:53:5d:c3:54:b9:3f:40:0c:5d:59:51:
                    ec:69:b9:00:f5:bd:b7:d4:e9:59:52:22:96:72:fa:
                    df:57:9e:a1:41:4c:94:ee:01:65:e4:94:7d:a4:10:
                    c1:00:db:37:f4:d1:a4:fa:2f:da:90:03:48:95:d5:
                    81:3e:0d:70:9e:98:43:db:ee:a7:66:a4:db:8a:25:
                    50:39:b2:10:6f:08:7e:86:df:18:1c:d9:2e:b1:f8:
                    c8:b3:be:ed:a4:6a:10:6a:67:cd:d0:d2:d7:02:4a:
                    a4:ee:5b:fd:b7:7f:35:32:20:e0:01:93:f5:95:f1:
                    bf:42:7e:ff:b5:b8:a6:e8:6d:b5:d8:79:a4:b7:3a:
                    52:2e:50:e0:94:f8:49:a7:1d:f3:d0:db:e0:81:e1:
                    0b:c2:6e:ca:08:f2:30:00:02:d6:7a:d8:8b:e6:c4:
                    8c:c4:18:1d:83:4a:43:b1:6e:68:dc:8d:80:e3:b6:
                    f3:4e:99:cb:b0:56:69:90:1c:27:f8:84:9f:a4:d4:
                    cc:8e:7e:f6:07:a4:9d:e3:b0:cc:11:fd:5c:b0:a1:
                    b8:e4:e3:73:53:2c:0d:6c:c7:f2:71:39:14:70:bc:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1C:0F:6A:41:65:B0:CB:82:E8:EB:5A:25:34:48:4F:50:38:DC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c1a3f9c8-5f64-3c93-9f10-a584ca9077e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c1:98:41:94:89:a4:3c:e7:9b:33:28:61:a5:eb:2e:74:38:
         88:4e:3b:0e:fe:b5:96:ee:ce:12:b6:3b:0d:10:26:40:72:4e:
         09:0e:df:28:eb:a2:33:41:f4:02:2a:5b:71:09:9e:c0:5e:08:
         bc:9f:11:9f:8c:bd:63:61:3c:60:14:b7:85:35:d1:8e:c7:73:
         1f:c1:4b:9e:c2:06:8b:2c:9c:b1:b8:e6:97:80:ca:13:d6:3e:
         33:26:04:de:70:7f:a7:cb:1a:79:10:62:32:e4:f2:77:fe:2e:
         1c:d7:43:1e:1c:e0:9a:06:a2:1d:c6:a0:13:b8:12:9a:36:b9:
         3b:13:b4:fb:62:0e:cd:cf:b1:f8:38:ac:00:94:8b:4f:59:36:
         82:ed:81:64:40:04:ed:21:34:21:26:6f:b9:ff:37:14:bb:31:
         cd:9d:c4:9c:ad:3b:76:77:d4:74:23:f6:43:68:9c:d3:c4:1b:
         68:c9:ec:98:d4:71:25:d6:2b:eb:39:96:7a:4b:8f:c3:52:d2:
         6d:ba:c3:09:f7:c5:7e:3c:2f:a5:70:fe:74:6d:85:ab:c7:76:
         86:09:ef:67:30:ee:25:8b:89:6b:d5:6d:e7:50:de:02:00:83:
         99:3c:af:79:72:3b:f9:59:cb:3e:1f:1e:a9:30:29:ac:0a:ff:
         2b:3a:57:72
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEg56tbzZ/8R8CSnmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
ZjVkYzA4OGEtNTFlYS00YjkyLThjNjUtMjBlZjI4NjE1ZDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Tvq+CAE4LihU2i2Thb7hFIXskl+IhLlP8AK
K5NbZvfJU13DVLk/QAxdWVHsabkA9b231OlZUiKWcvrfV56hQUyU7gFl5JR9pBDB
ANs39NGk+i/akANIldWBPg1wnphD2+6nZqTbiiVQObIQbwh+ht8YHNkusfjIs77t
pGoQamfN0NLXAkqk7lv9t381MiDgAZP1lfG/Qn7/tbim6G212HmktzpSLlDglPhJ
px3z0NvggeELwm7KCPIwAALWetiL5sSMxBgdg0pDsW5o3I2A47bzTpnLsFZpkBwn
+ISfpNTMjn72B6Sd47DMEf1csKG45ONzUywNbMfycTkUcLyOvwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPwcD2pBZbDLgujrWiU0SE9QONyiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzFhM2Y5YzgtNWY2NC0z
YzkzLTlmMTAtYTU4NGNhOTA3N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBQwZhBlImkPOebMyhhpesudDiITjsO/rWW7s4S
tjsNECZAck4JDt8o66IzQfQCKltxCZ7AXgi8nxGfjL1jYTxgFLeFNdGOx3MfwUue
wgaLLJyxuOaXgMoT1j4zJgTecH+nyxp5EGIy5PJ3/i4c10MeHOCaBqIdxqATuBKa
Nrk7E7T7Yg7Nz7H4OKwAlItPWTaC7YFkQATtITQhJm+5/zcUuzHNncScrTt2d9R0
I/ZDaJzTxBtoyeyY1HEl1ivrOZZ6S4/DUtJtusMJ98V+PC+lcP50bYWrx3aGCe9n
MO4li4lr1W3nUN4CAIOZPK95cjv5Wcs+Hx6pMCmsCv8rOldy
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:37:07 2025 by rpki-client