Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa
File:                     e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa (raw, json)
Hash identifier:          xKg9maNdd5u2xgZ69T/QzeSwwNnZ5ICYbTKOKMKBRuE=
Subject key identifier:   40:FA:E4:86:7A:F1:32:80:03:AA:42:54:C3:49:32:12:E1:9A:5D:2A
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A99B90B36A7DA53999040
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     396563
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:99:b9:0b:36:a7:da:53:99:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=2f1abfc6-fafc-4d18-863c-51d007154b41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:62:d7:f5:bd:b0:04:8d:12:a3:e0:f4:e8:
                    36:23:44:0c:50:67:62:e9:fa:67:28:f7:79:9b:8b:
                    06:61:df:ef:54:92:93:83:41:ef:8a:16:84:0c:6f:
                    4e:b6:da:08:31:02:a7:17:c9:6c:bf:07:32:c4:dd:
                    24:05:e7:b7:25:14:c5:fb:bb:62:d4:1c:ec:be:bf:
                    8b:38:a0:ca:28:fe:b4:e7:49:7b:2d:ab:eb:d4:5b:
                    d0:00:81:53:22:4d:be:1f:a7:60:cb:67:4a:cc:75:
                    ff:f4:49:a5:c7:a3:d3:4f:ce:d3:27:1f:fc:8a:3c:
                    3d:c6:fd:62:da:4f:e6:cf:1a:6c:8d:1c:ce:aa:27:
                    15:10:af:92:4a:4e:7f:6e:24:47:5e:ce:1a:73:72:
                    e8:1e:5c:4b:e9:60:33:0f:15:5e:b3:54:36:5c:6f:
                    cf:44:35:76:0c:8e:5d:55:37:85:73:ef:2b:44:4d:
                    92:3a:53:dc:08:62:07:48:04:97:b2:d6:bb:d4:22:
                    b8:65:f8:c5:18:b3:c8:61:04:ca:bf:0e:96:7c:2e:
                    74:41:a5:c1:47:52:1f:7c:09:a7:d0:a2:55:ac:08:
                    d0:2c:5a:77:ac:19:24:f3:26:42:d1:32:03:db:34:
                    24:88:8c:42:1c:f9:17:e4:10:fc:13:16:70:42:8f:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:E4:86:7A:F1:32:80:03:AA:42:54:C3:49:32:12:E1:9A:5D:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e374fd7a-6ea3-3e5c-9b8f-b7035a1a13b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:e8:72:5c:24:49:8d:3a:4a:e4:b9:dc:f3:d0:fc:65:29:
         e3:00:78:15:97:a3:22:61:b5:32:2c:84:79:41:42:64:7f:f3:
         28:a0:e2:ba:d1:82:2a:2a:7c:bd:c2:a2:c6:43:1a:b6:96:cb:
         b1:b0:f7:b6:93:20:2c:27:72:f5:9c:2b:8c:4c:3e:d8:6a:a2:
         1a:98:59:6d:d9:56:08:29:10:72:0a:49:fd:3e:e3:5e:5b:36:
         ee:6a:0e:d6:35:65:eb:02:70:65:b7:84:af:06:7e:bc:01:38:
         a1:d2:54:dd:ce:45:b4:6f:ec:c2:08:33:0a:f0:c1:79:e5:c8:
         fd:43:a4:c8:12:71:8e:65:ee:d9:26:b4:a2:07:bf:7d:c8:e9:
         29:b6:e0:97:c7:6c:6d:65:04:cc:2d:1c:ad:be:8d:d2:22:26:
         0c:78:a4:47:cf:18:3f:01:0e:8d:31:97:14:61:f4:ae:2d:60:
         f8:4b:b8:08:60:67:af:3b:c7:8c:a1:65:0b:2c:2a:6b:e5:84:
         10:f5:2b:a0:1e:2c:77:21:d6:40:36:8b:c0:9d:64:4f:b2:0e:
         32:0b:9e:76:30:01:81:89:65:a4:24:5c:98:a6:b1:1e:69:31:
         38:06:bb:33:b0:28:91:65:94:48:76:94:c1:e3:50:0d:9b:3b:
         56:0c:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:17:21 2025 by rpki-client