Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa
File:                     dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa (raw, json)
Hash identifier:          /MF17ZWeEgWZ+iy2mIh3vpD29YaKVTeSvjUeDzg/5oE=
Subject key identifier:   9B:D7:00:C0:CA:87:9B:F4:F3:AA:28:E6:70:2B:88:6A:98:00:1C:3D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584847E02FCEDD452827E91D34C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa
Signing time:             Sat 21 Dec 2024 14:00:52 +0000
ROA not before:           Sat 21 Dec 2024 14:00:52 +0000
ROA not after:            Fri 21 Mar 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:3c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:47:e0:2f:ce:dd:45:28:27:e9:1d:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 21 14:00:52 2024 GMT
            Not After : Mar 21 13:00:52 2025 GMT
        Subject: CN=078de93e-9659-46d1-966d-e7193f157376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:fa:cc:59:7d:39:fa:91:3f:85:58:b8:7c:
                    52:76:0f:fb:9d:34:c2:70:da:6b:44:19:19:a4:2a:
                    3e:3d:bd:fb:62:86:dc:df:e9:7a:df:31:7a:42:ea:
                    7b:36:a3:3a:1a:72:30:0a:46:d7:b4:88:46:cc:8d:
                    05:a4:98:81:21:f5:aa:72:f0:51:3f:b1:28:4e:f3:
                    6c:45:b0:4c:03:3e:03:d2:c1:b1:0a:f3:56:08:2d:
                    ac:c1:03:58:05:a3:18:0c:23:79:c0:60:75:d0:89:
                    93:4e:9d:92:f3:73:22:30:4a:2e:91:7e:9e:6d:a9:
                    cf:01:98:0c:d7:68:97:71:ae:98:30:46:24:8e:29:
                    6a:61:af:a4:e9:6b:50:11:0d:d3:56:fc:19:ba:ee:
                    f7:31:07:b3:a3:3a:da:ba:24:85:9d:0b:e2:e0:3d:
                    2c:c0:3d:2b:8c:c4:fd:4f:63:cc:8c:81:f9:14:6c:
                    14:5c:8e:b0:2a:96:13:91:cb:03:01:59:bd:3b:47:
                    5e:b2:8d:1a:89:85:34:df:99:75:82:de:34:e8:95:
                    2a:f0:4e:41:61:98:3e:23:3d:e1:8e:52:c2:c0:95:
                    cb:c9:07:44:e7:c4:88:5e:7a:b9:76:5b:fe:e5:e1:
                    21:37:87:8d:21:02:a5:a0:1c:f0:32:ca:cd:01:89:
                    a8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D7:00:C0:CA:87:9B:F4:F3:AA:28:E6:70:2B:88:6A:98:00:1C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dacc0c61-c6d3-3b2c-b507-f1cef9c969b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:3c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:2a:ef:64:6f:02:5a:30:05:dc:db:ce:45:09:c2:e1:73:28:
         b3:76:50:f7:8b:90:98:4c:cb:ae:31:e1:2e:ce:9a:52:42:55:
         1d:11:93:4b:f4:42:26:4b:0a:b5:28:3d:eb:8a:cd:f6:6a:95:
         77:ef:9f:4a:d6:28:c0:50:37:95:01:fd:de:d3:40:61:19:4d:
         83:3f:24:b0:8e:a8:6c:fd:48:bf:ca:13:d0:03:25:26:bf:67:
         76:94:de:d8:8c:b1:bf:9d:b2:62:57:a7:25:c5:2c:c6:c4:16:
         7c:95:f0:ac:4a:60:d7:f8:54:74:63:03:8f:e5:79:65:c6:97:
         2f:d8:99:3a:71:fb:b9:3c:29:43:4a:44:8a:4b:d7:13:21:77:
         2e:fa:1d:56:ef:b1:89:94:58:e9:f7:71:d9:f0:4f:64:a4:b2:
         b6:0a:a2:76:4e:22:19:7d:98:62:13:74:11:fd:ac:d5:7b:dc:
         9a:fc:64:0a:45:1e:88:cc:4d:16:18:a7:3f:1d:dc:e1:e0:e8:
         c5:d6:85:49:7e:d8:fe:97:cb:1b:6e:1a:0b:32:a7:b1:c8:5f:
         8b:10:01:91:b0:01:67:c1:66:70:ef:e2:e4:cf:b6:63:2e:cb:
         86:e3:b5:c0:ec:d1:b4:0e:32:a9:22:b6:7e:fb:1a:5b:5a:b3:
         63:20:37:18
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEhH4C/O3UUoJ+kdNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTIyMTE0MDA1MloXDTI1MDMyMTEzMDA1MlowLzEtMCsGA1UEAxMk
MDc4ZGU5M2UtOTY1OS00NmQxLTk2NmQtZTcxOTNmMTU3Mzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFn6zFl9OfqRP4VYuHxSdg/7nTTCcNprRBkZ
pCo+Pb37Yobc3+l63zF6Qup7NqM6GnIwCkbXtIhGzI0FpJiBIfWqcvBRP7EoTvNs
RbBMAz4D0sGxCvNWCC2swQNYBaMYDCN5wGB10ImTTp2S83MiMEoukX6ebanPAZgM
12iXca6YMEYkjilqYa+k6WtQEQ3TVvwZuu73MQezozrauiSFnQvi4D0swD0rjMT9
T2PMjIH5FGwUXI6wKpYTkcsDAVm9O0deso0aiYU035l1gt406JUq8E5BYZg+Iz3h
jlLCwJXLyQdE58SIXnq5dlv+5eEhN4eNIQKloBzwMsrNAYmopwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJvXAMDKh5v086oo5nAriGqYABw9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGFjYzBjNjEtYzZkMy0z
YjJjLWI1MDctZjFjZWY5Yzk2OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAA8
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADcq72RvAlowBdzbzkUJwuFzKLN2UPeLkJhMy64x4S7OmlJCVR0R
k0v0QiZLCrUoPeuKzfZqlXfvn0rWKMBQN5UB/d7TQGEZTYM/JLCOqGz9SL/KE9AD
JSa/Z3aU3tiMsb+dsmJXpyXFLMbEFnyV8KxKYNf4VHRjA4/leWXGly/YmTpx+7k8
KUNKRIpL1xMhdy76HVbvsYmUWOn3cdnwT2SksrYKonZOIhl9mGITdBH9rNV73Jr8
ZApFHojMTRYYpz8d3OHg6MXWhUl+2P6XyxtuGgsyp7HIX4sQAZGwAWfBZnDv4uTP
tmMuy4bjtcDs0bQOMqkitn77Gltas2MgNxg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:01:05 2025 by rpki-client