Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa
File:                     ca5ee824-d35b-357a-a812-50300fae06e0.roa (raw, json)
Hash identifier:          D7phuYu8hmrzPxVp7+6M7+Svrh9kwzhUUPRHlDo/ABQ=
Subject key identifier:   9C:9C:1D:CF:E9:E2:61:59:6E:A6:31:CB:B6:B3:B7:A5:C3:46:4A:6A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD83F2C61418A3F7CA580
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     396541
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d8:3f:2c:61:41:8a:3f:7c:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=0caff6d0-ea78-473a-a3d0-b7c33a102fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:80:69:ba:40:32:a0:f9:c1:77:71:a8:36:
                    2b:ab:24:5f:98:1e:6d:71:40:5d:62:46:73:38:05:
                    73:13:b0:e1:c3:6b:0b:af:f8:9d:38:10:a9:c4:e0:
                    ee:62:25:8a:b5:88:af:be:a0:e2:af:d6:c9:5e:ce:
                    46:84:38:3e:41:14:f0:b3:c7:fa:dc:09:51:50:5e:
                    50:10:a2:18:01:c6:e6:bc:37:ed:c3:d7:0a:57:2a:
                    71:0c:b2:4f:e6:46:7b:82:93:31:59:7b:89:fe:70:
                    ca:2e:34:79:bc:2a:f5:98:7a:85:3c:01:a8:38:f4:
                    81:6f:42:82:3f:61:43:1b:01:3e:52:ea:a7:2a:6f:
                    9b:9a:01:80:a6:57:1b:03:4f:61:6c:4a:33:96:c1:
                    95:e6:f2:23:4e:3e:cf:0a:c5:a6:6a:32:48:a3:38:
                    3f:82:6a:c5:14:8a:d4:b1:cb:0e:da:da:e9:1c:fd:
                    47:c8:97:24:32:8e:cd:e4:b8:27:1e:9d:f7:53:3a:
                    c0:1b:b9:55:1b:df:9b:bc:96:f4:f8:00:42:d6:66:
                    39:80:c4:0d:c6:66:2f:e6:ed:7d:84:4a:10:a9:17:
                    b6:b0:b8:d0:bb:0c:cf:b7:a8:69:9e:77:6d:54:87:
                    58:32:eb:ce:80:3c:02:14:ae:7e:90:ee:c0:fa:72:
                    40:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9C:1D:CF:E9:E2:61:59:6E:A6:31:CB:B6:B3:B7:A5:C3:46:4A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ca5ee824-d35b-357a-a812-50300fae06e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:67:2e:aa:14:4e:ad:cb:b4:20:36:c4:6e:19:0a:ac:d1:62:
         0b:28:86:f1:16:c5:60:19:e4:c1:c7:fa:d6:79:f3:bc:b6:99:
         96:b0:c2:5a:86:b4:f7:ae:21:a4:f7:1f:d0:ca:bb:20:52:90:
         ab:40:1d:d3:66:51:23:39:20:c6:f4:15:e6:0f:55:44:4b:38:
         0c:08:5d:79:09:70:d8:3e:2b:a8:f6:84:7e:8b:38:e1:2c:85:
         0a:06:77:f6:a9:cf:58:e9:11:dd:1d:8d:87:c4:4e:88:02:37:
         fd:35:51:54:50:8a:89:85:d2:98:ce:5a:21:7c:2f:3f:ff:99:
         8b:d5:79:4b:69:73:59:87:e5:5a:a0:b0:53:b4:71:8e:7e:92:
         5d:77:23:b5:54:0b:ce:fe:80:d3:7a:1c:9d:3c:7a:0e:39:8e:
         1f:70:83:42:d8:ab:0f:1d:15:98:70:e0:e5:63:26:af:bc:27:
         27:fe:b7:e7:d6:c2:9c:93:48:6d:83:cf:c8:99:c8:e2:21:e0:
         78:03:77:71:37:d8:89:f9:24:76:81:4d:21:2d:a4:22:19:c8:
         38:a8:b9:3c:69:6c:67:f2:95:c9:cf:4d:e6:ef:eb:f7:1a:f8:
         15:dd:80:ab:37:22:c4:5f:a5:9c:f6:75:26:5c:66:a5:9c:93:
         33:0e:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:19 2025 by rpki-client