Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa
File:                     cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa (raw, json)
Hash identifier:          /RLrc79BFW268D8K8USHGBjCqC+8J9cDIHJjFr8h3yA=
Subject key identifier:   B8:B1:84:E6:91:C4:3F:AF:35:82:5D:56:49:74:A3:17:06:1A:CC:87
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A93A5C49C00C4EE7A1980
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     40647
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:93:a5:c4:9c:00:c4:ee:7a:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=cda04ed3-81c2-48a3-96e2-bbb03c7dede3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:7a:de:35:a6:db:c2:7a:fc:0b:1a:b8:90:
                    9c:df:1f:4c:c6:98:ba:c7:2a:de:aa:80:a8:25:f9:
                    19:19:36:61:8b:16:95:2d:b9:24:77:8e:6f:8d:4b:
                    65:35:e6:ae:b4:90:4c:04:7b:1b:91:7a:25:97:76:
                    8c:e9:f4:4d:0e:44:e5:b4:d5:be:e1:6e:bc:0f:35:
                    f0:8d:05:f0:c6:3e:e9:68:a5:45:05:de:26:3e:8c:
                    88:de:c6:d7:a8:d9:45:ba:96:e1:9f:04:a3:81:86:
                    6b:7f:18:9b:90:17:b6:f1:1e:5f:93:08:be:9c:31:
                    6e:3d:79:f8:e0:7f:67:25:3e:7c:37:79:2f:92:c9:
                    f9:28:05:4c:dd:60:43:9b:ec:b2:84:eb:67:75:75:
                    50:32:d7:fb:6a:af:f5:6b:f8:83:4a:38:aa:c5:54:
                    2f:e8:0f:a8:0b:48:bd:57:92:57:f1:98:38:1e:1b:
                    cd:af:3d:20:3f:82:62:fd:77:8b:cb:12:e3:4e:93:
                    5d:fe:f5:7d:a8:50:04:23:00:83:e5:21:c7:ff:ea:
                    2a:eb:a3:e7:2f:03:54:8c:8c:8a:3c:5f:1a:70:77:
                    e8:71:e9:ee:72:11:a7:c9:ae:46:0d:aa:33:10:81:
                    f2:79:14:bf:b8:99:b8:1a:2b:b3:8e:70:c8:3d:1a:
                    35:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B1:84:E6:91:C4:3F:AF:35:82:5D:56:49:74:A3:17:06:1A:CC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cdca7cc9-4b6f-3860-99f1-9b351d8a618a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:98:21:5d:c1:e0:d3:b4:0b:a1:6f:f9:64:8a:c2:08:48:a5:
         34:78:f4:75:d8:52:47:b9:1a:0f:2b:b0:17:64:54:6f:04:41:
         0c:6e:b6:50:b9:66:17:98:96:d0:24:7c:b3:a9:10:6b:18:55:
         e4:a6:c4:a1:a4:25:ed:46:6c:b9:f6:ff:9e:6b:11:f9:f4:0b:
         5b:f9:85:93:0f:50:7e:e9:ba:1a:df:73:75:59:20:60:e6:03:
         0d:70:ad:5c:98:20:9b:2f:7c:55:4a:33:88:02:f6:25:13:1e:
         79:3d:88:8e:f7:d9:39:ff:62:de:5c:dd:bf:e3:f0:64:67:c7:
         08:11:c5:31:0c:de:b9:45:a9:e4:a9:83:6f:d7:22:f5:a9:bd:
         65:8b:f8:e6:3a:5f:2f:9f:89:a8:be:cc:9b:5b:96:13:cd:9e:
         99:78:a4:5f:bb:93:31:28:1e:fe:d3:01:6c:51:aa:94:fa:ac:
         30:6e:0a:a2:04:60:ac:9c:aa:75:8f:7b:31:c5:17:a2:98:ca:
         bc:25:db:81:9b:0c:06:8d:d5:35:6c:d9:bb:aa:2b:02:78:f4:
         be:6e:1b:e0:eb:76:89:d2:a0:17:10:9e:c1:d1:34:fe:10:41:
         9d:a5:e4:7a:9d:b9:64:10:96:74:06:78:43:27:86:37:81:9c:
         b4:c7:ec:35
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgYapOlxJwAxO56GYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIwNDE0MDA1MloXDTI1MDMwNDE0MDA1MlowLzEtMCsGA1UEAxMk
Y2RhMDRlZDMtODFjMi00OGEzLTk2ZTItYmJiMDNjN2RlZGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttR63jWm28J6/AsauJCc3x9Mxpi6xyreqoCo
JfkZGTZhixaVLbkkd45vjUtlNeautJBMBHsbkXoll3aM6fRNDkTltNW+4W68DzXw
jQXwxj7paKVFBd4mPoyI3sbXqNlFupbhnwSjgYZrfxibkBe28R5fkwi+nDFuPXn4
4H9nJT58N3kvksn5KAVM3WBDm+yyhOtndXVQMtf7aq/1a/iDSjiqxVQv6A+oC0i9
V5JX8Zg4HhvNrz0gP4Ji/XeLyxLjTpNd/vV9qFAEIwCD5SHH/+oq66PnLwNUjIyK
PF8acHfocenuchGnya5GDaozEIHyeRS/uJm4GiuzjnDIPRo15QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLixhOaRxD+vNYJdVkl0oxcGGsyHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2RjYTdjYzktNGI2Zi0z
ODYwLTk5ZjEtOWIzNTFkOGE2MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBmmCFdweDTtAuhb/lkisIISKU0ePR12FJHuRoP
K7AXZFRvBEEMbrZQuWYXmJbQJHyzqRBrGFXkpsShpCXtRmy59v+eaxH59Atb+YWT
D1B+6boa33N1WSBg5gMNcK1cmCCbL3xVSjOIAvYlEx55PYiO99k5/2LeXN2/4/Bk
Z8cIEcUxDN65RankqYNv1yL1qb1li/jmOl8vn4movsybW5YTzZ6ZeKRfu5MxKB7+
0wFsUaqU+qwwbgqiBGCsnKp1j3sxxReimMq8JduBmwwGjdU1bNm7qisCePS+bhvg
63aJ0qAXEJ7B0TT+EEGdpeR6nblkEJZ0BnhDJ4Y3gZy0x+w1
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:32:26 2025 by rpki-client