Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa
File:                     e35475da-2649-3c6e-bb91-4a2795a1be68.roa (raw, json)
Hash identifier:          Yg2j4YkrY2JLN11ae/5u4zGGiLwRr8GRHir8/o+wrOY=
Subject key identifier:   6D:36:C7:DE:FF:9A:E3:FD:52:3B:D6:6E:56:03:08:83:95:A6:75:B5
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848064511AA9D29B75DA970D380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396562
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:11:aa:9d:29:b7:5d:a9:70:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=7cc5049b-c14b-4599-8b27-dfeffb15fdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:2f:c4:ac:4a:ee:bb:80:9b:5f:80:a9:2f:
                    96:8c:f0:c5:bf:1a:6f:a1:b9:e7:fa:5d:05:4b:88:
                    2d:45:8d:f9:c6:bd:3e:31:23:24:cb:55:60:90:61:
                    0a:b4:cf:33:4d:1c:a0:91:68:71:9a:1b:fd:4a:62:
                    d0:95:5b:0a:56:3f:17:ac:6d:9e:82:16:c1:c5:8f:
                    5f:f8:de:f7:e1:71:a1:a9:47:4b:11:23:f1:91:c6:
                    a1:bc:43:98:15:bd:84:c3:da:8c:b4:57:6a:1b:09:
                    5a:1c:73:ce:72:cc:5e:54:82:a3:7b:7f:fb:ef:21:
                    c7:2a:0e:c3:d0:46:ef:95:25:db:79:1e:c9:3b:06:
                    55:0f:ac:0d:c0:84:2b:26:ae:05:5c:7e:03:93:ba:
                    01:35:d6:0f:99:50:aa:0a:ce:85:1d:ec:dd:f0:36:
                    76:00:e8:1f:72:eb:cd:36:5e:9e:b4:b9:42:1a:44:
                    82:cf:03:75:92:2c:7e:1d:3d:6d:c6:17:63:65:25:
                    95:ca:e4:9b:7d:65:e6:ab:31:5e:ca:da:1c:e6:19:
                    bc:5e:da:9f:af:cb:e2:41:a4:41:1f:1e:4d:b8:37:
                    98:3f:3b:05:39:9b:7e:ef:dc:0d:7a:2d:11:53:35:
                    5f:f9:4f:40:14:33:3b:0e:fe:e0:cd:b0:ec:ad:88:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:C7:DE:FF:9A:E3:FD:52:3B:D6:6E:56:03:08:83:95:A6:75:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e35475da-2649-3c6e-bb91-4a2795a1be68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:19:48:57:dc:6b:36:82:74:17:0d:71:1b:38:ef:13:9a:82:
         3d:52:29:f7:88:82:ad:10:9a:ab:47:2a:39:78:85:9f:dc:44:
         a5:57:31:13:29:63:c0:fe:d9:a0:10:8a:99:6d:29:90:88:ab:
         8f:e4:d9:68:4a:94:fc:d4:9f:3f:18:f8:ae:10:ae:12:40:5d:
         e6:68:2e:69:e1:39:fe:5c:41:29:da:c3:c0:a0:21:08:9e:af:
         f2:03:9d:ae:d5:c4:39:57:41:ac:5f:78:7a:26:9a:e0:69:ce:
         79:2f:6d:41:bd:d2:3c:9a:04:42:bd:12:28:10:69:ea:4c:65:
         a8:0f:9c:fa:10:6f:39:20:e4:b8:95:2e:b9:5c:eb:8c:60:bf:
         5d:ea:d7:19:19:ca:8d:8f:5d:42:d6:f9:a4:8f:53:57:62:41:
         61:56:a5:38:90:a4:8e:c6:8d:31:90:27:b8:8a:5b:26:9f:3e:
         b0:0f:4e:3c:f8:c5:8f:47:41:73:d0:9c:c6:e2:1e:82:f0:52:
         44:e1:c7:8f:b8:98:57:16:b4:9c:fa:c2:44:6a:7b:ee:ae:06:
         8e:b9:cb:f5:d1:93:7d:de:2e:1d:66:94:2c:c0:83:61:09:8b:
         2c:78:22:df:cd:5f:47:b4:a9:fc:76:ff:1d:d5:f6:69:02:1f:
         af:dc:f8:db
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgGRRGqnSm3Xalw04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI0MTEyODAyMDAzOFoXDTI1MDIyNjAyMDAzOFowLzEtMCsGA1UEAxMk
N2NjNTA0OWItYzE0Yi00NTk5LThiMjctZGZlZmZiMTVmZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh4vxKxK7ruAm1+AqS+WjPDFvxpvobnn+l0F
S4gtRY35xr0+MSMky1VgkGEKtM8zTRygkWhxmhv9SmLQlVsKVj8XrG2eghbBxY9f
+N734XGhqUdLESPxkcahvEOYFb2Ew9qMtFdqGwlaHHPOcsxeVIKje3/77yHHKg7D
0EbvlSXbeR7JOwZVD6wNwIQrJq4FXH4Dk7oBNdYPmVCqCs6FHezd8DZ2AOgfcuvN
Nl6etLlCGkSCzwN1kix+HT1txhdjZSWVyuSbfWXmqzFeytoc5hm8Xtqfr8viQaRB
Hx5NuDeYPzsFOZt+79wNei0RUzVf+U9AFDM7Dv7gzbDsrYhuRQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFG02x97/muP9UjvWblYDCIOVpnW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZTM1NDc1ZGEtMjY0OS0z
YzZlLWJiOTEtNGEyNzk1YTFiZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAZGUhX3Gs2gnQXDXEbOO8TmoI9Uin3iIKtEJqr
Ryo5eIWf3ESlVzETKWPA/tmgEIqZbSmQiKuP5NloSpT81J8/GPiuEK4SQF3maC5p
4Tn+XEEp2sPAoCEInq/yA52u1cQ5V0GsX3h6Jprgac55L21BvdI8mgRCvRIoEGnq
TGWoD5z6EG85IOS4lS65XOuMYL9d6tcZGcqNj11C1vmkj1NXYkFhVqU4kKSOxo0x
kCe4ilsmnz6wD048+MWPR0Fz0JzG4h6C8FJE4cePuJhXFrSc+sJEanvurgaOucv1
0ZN93i4dZpQswINhCYsseCLfzV9HtKn8dv8d1fZpAh+v3Pjb
-----END CERTIFICATE-----
Generated at Wed May 14 07:19:11 2025 by rpki-client