Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa
File:                     c853e1d5-13ac-351a-9d88-98dde451d814.roa (raw, json)
Hash identifier:          nxMpjOzPFDij03oF7Uo9oi0m1IIOyDex4kbsJiAdpcM=
Subject key identifier:   CA:2A:A1:74:1F:2D:CD:4A:C2:44:0E:AB:26:5E:F6:09:5D:1D:F6:FB
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858482EC012E742D1125549EB37E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     7342
IP address blocks:        2620:74:47::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:12:e7:42:d1:12:55:49:eb:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=1b204c1f-500f-43f5-8983-146db1a7a74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:b0:bb:e2:88:ca:c0:a0:3f:74:ae:db:f7:
                    38:c8:0f:75:f2:94:a2:69:ef:9a:40:fb:87:69:d8:
                    17:69:48:ba:17:43:64:6d:91:92:89:50:c7:af:e1:
                    1e:49:ef:ac:1a:0f:a2:b6:62:63:64:a3:ce:5e:9a:
                    f9:28:c1:e1:73:d4:62:cf:3f:87:03:f6:a4:f6:ad:
                    fb:44:e9:97:eb:4a:8b:11:c1:99:f2:8e:60:cd:23:
                    1c:61:d0:53:f8:b8:1f:d8:83:90:a2:eb:cd:9c:e3:
                    14:24:8e:5b:88:13:bb:07:fb:a1:7b:c9:cc:48:aa:
                    fb:9e:af:5d:ca:ab:25:fe:5a:d5:03:45:2c:f5:c6:
                    5f:4d:54:bf:a7:e6:67:c9:98:5e:cb:95:75:85:a5:
                    e2:29:3a:ea:1a:a3:61:be:27:44:4d:b1:ed:45:d5:
                    b1:d7:c6:bb:88:78:e6:a2:79:8b:b9:41:05:6e:db:
                    9a:67:af:8f:2b:6e:90:f9:3d:89:56:f0:68:43:6d:
                    24:7e:1e:33:18:c0:8a:1d:fb:7b:2b:8b:53:77:68:
                    10:3f:12:27:61:6b:e3:3c:e1:52:a4:94:e8:8d:9c:
                    b8:26:5e:af:f5:76:06:b3:4b:32:1a:f9:09:92:b0:
                    1c:63:ad:28:98:f4:40:9e:49:1f:e0:f4:c7:d9:1b:
                    b0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:A1:74:1F:2D:CD:4A:C2:44:0E:AB:26:5E:F6:09:5D:1D:F6:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c853e1d5-13ac-351a-9d88-98dde451d814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:0d:81:8d:b6:38:33:72:8b:77:50:97:07:48:d0:5b:c8:
         6e:37:d5:f0:1f:23:c2:d1:ce:a3:a4:2f:27:70:04:45:80:88:
         bf:6c:b6:05:75:2b:2d:37:af:b0:7b:dc:88:04:75:92:7b:dc:
         e1:e1:bb:ce:4c:43:b8:8c:0b:85:3a:fd:59:6a:16:c1:cf:f9:
         92:15:1a:7e:85:17:67:0f:6b:49:d3:4a:08:37:8e:e4:2e:8f:
         2e:8d:ff:68:32:15:b4:4b:96:62:17:68:1d:7b:d9:89:be:f6:
         b0:c8:ed:a9:65:29:2f:8a:89:a6:c6:bc:67:1a:45:c9:38:ab:
         89:08:06:50:62:67:27:14:1b:b8:08:db:98:49:2c:e1:95:f7:
         33:6d:2b:4c:85:80:da:ff:7d:19:f3:28:1f:15:8f:e5:f4:9d:
         ff:3d:e3:0c:e7:04:5f:93:3e:26:db:d4:ca:c6:5f:df:c0:90:
         65:08:63:cc:66:32:b3:54:d2:e7:33:e8:52:6e:1e:21:9b:60:
         c1:26:b0:27:57:3b:7d:fa:00:0a:cf:42:a6:c8:d7:48:d9:46:
         38:27:13:c3:53:0a:52:d1:15:0a:c7:e6:cb:93:2d:b1:f0:6f:
         c2:63:f8:ed:a4:f9:48:2e:57:42:30:e7:37:64:1a:47:53:54:
         28:67:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:57:19 2025 by rpki-client