Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce83665c-1475-3d85-8819-639419715352.roa
File:                     ce83665c-1475-3d85-8819-639419715352.roa (raw, json)
Hash identifier:          ivAfehrUm71rC3nXXNuOIMcwRegic7kTeIeA45zK1fU=
Subject key identifier:   CF:4A:BF:FA:E1:BD:5E:D9:6B:B7:18:38:DD:75:73:2B:E8:FD:7C:73
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858480645137422BAB8D560F37EE0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce83665c-1475-3d85-8819-639419715352.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396579
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:13:74:22:ba:b8:d5:60:f3:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=99ea97fc-188f-4664-b796-9c159cd7b73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:61:48:43:45:e6:14:b9:8f:e0:51:d0:5e:
                    46:b9:5f:bf:44:3c:b8:92:e2:2e:48:00:3c:96:88:
                    bd:8c:4c:b5:ba:bc:18:88:17:b2:1e:5f:1e:3e:ac:
                    e5:58:a9:ff:ed:d3:b0:5c:9f:78:47:bc:29:f1:01:
                    d5:1a:b9:99:ad:05:28:7a:58:66:5b:98:19:c3:74:
                    7b:65:f6:2f:2a:33:a7:cf:cc:ba:08:33:56:d6:b4:
                    dc:c7:16:42:74:17:22:50:ed:70:4e:c7:bc:8b:1a:
                    96:66:da:fb:0d:19:37:f0:0e:ba:02:f8:bd:20:57:
                    e2:84:11:00:d8:ee:2b:b5:d3:2e:2b:64:46:ba:d5:
                    a3:4c:84:92:97:fe:40:7e:96:7d:69:96:1e:a0:14:
                    52:9e:67:06:e6:d5:9c:3f:9e:64:42:d0:6b:90:bd:
                    a2:79:fb:e4:57:59:70:e0:d6:3a:a0:04:61:20:21:
                    cc:12:6d:fd:e5:e4:f6:ea:1e:b2:63:c4:34:26:c6:
                    2a:0b:e3:9d:be:5b:52:50:f0:19:c2:c8:fc:40:60:
                    4c:db:ef:73:11:64:de:fb:70:a5:5b:b4:52:03:d4:
                    29:b9:3b:7a:e1:ad:3e:a9:39:b8:cd:dd:f6:d1:8c:
                    50:20:eb:c7:7e:b2:b5:b8:7b:a1:ab:c6:3a:b2:12:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4A:BF:FA:E1:BD:5E:D9:6B:B7:18:38:DD:75:73:2B:E8:FD:7C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce83665c-1475-3d85-8819-639419715352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ec:e1:16:67:fe:b5:1e:5a:79:14:54:f1:1b:e4:83:32:e8:
         7f:16:f3:18:82:a7:4a:f3:da:b6:e9:82:8a:b6:16:b8:41:ac:
         d5:78:cb:62:eb:26:59:0f:6e:ef:3e:c5:89:17:c7:ae:00:07:
         b6:4f:83:55:e7:28:14:1e:51:35:76:54:94:61:b2:51:3b:1e:
         01:e3:71:34:6f:cc:c0:1b:f9:43:fe:49:47:91:55:67:9e:74:
         6d:88:31:d4:43:6b:3e:c6:c1:b1:c8:0a:29:f4:0f:35:f7:81:
         f3:f4:07:9c:7b:89:60:aa:e0:4a:85:f3:cb:10:c0:6f:f6:9e:
         e5:05:4c:49:96:52:5e:45:aa:c9:b2:41:09:a2:29:ea:1a:d2:
         a6:3a:aa:3c:51:f5:f1:fb:3c:1f:d7:ed:89:10:89:15:3b:0f:
         73:2d:1b:29:03:8a:88:09:08:19:66:a1:0b:c7:08:00:95:dc:
         98:38:d1:84:e0:be:4f:f1:1b:67:d3:bf:2f:d5:e8:2d:59:e0:
         bf:8a:64:20:9b:81:9e:60:cf:2f:b1:b7:b0:d8:e5:83:23:a1:
         a1:9c:0d:7c:f8:e6:53:c2:b7:72:32:98:e1:fc:1e:02:2e:02:
         e7:05:7a:16:c0:0a:b1:68:b3:80:f7:cf:16:d5:5a:41:5c:ef:
         6e:f4:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----