Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e584f045-e682-3896-9c7b-daa4136e544c.roa
File:                     e584f045-e682-3896-9c7b-daa4136e544c.roa (raw, json)
Hash identifier:          fUBhp91sFaGj2TlPSGDFjrewmKaQe4ldEKT6ZiEYhtg=
Subject key identifier:   DB:38:DD:4B:8D:AD:E0:82:CF:8E:E4:92:E1:AF:33:43:AD:CA:0D:63
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A9A8EA641B9CF741D2F80
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e584f045-e682-3896-9c7b-daa4136e544c.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     32651
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:9a:8e:a6:41:b9:cf:74:1d:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=272069ea-038c-4a32-98e4-22b61cd3c238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:fe:5d:dd:15:b6:24:b3:d9:42:b0:cf:79:
                    25:ed:9c:1f:1c:48:1f:18:c1:8d:04:b5:88:b6:8b:
                    f1:48:5d:20:00:49:f5:98:ca:c1:95:b0:db:c9:5c:
                    72:65:9a:28:1d:8c:85:f6:6e:c0:e4:f6:09:b2:98:
                    d3:39:00:94:df:7d:55:db:11:92:0d:4a:aa:62:75:
                    97:e6:9c:a4:72:ae:dc:dd:ad:55:62:5d:0f:3c:c2:
                    6b:27:9a:bb:15:44:3e:c0:d5:85:6c:48:a8:d0:f4:
                    bb:a6:4c:3c:7f:dc:df:05:a1:00:33:8f:57:7d:56:
                    66:2b:bb:3e:86:81:34:51:00:7d:99:a5:7e:41:d8:
                    0b:30:f4:f0:ea:56:a8:24:07:29:9f:12:13:e2:89:
                    2b:37:8a:5b:3c:c1:4d:51:46:81:99:04:69:88:d8:
                    d1:c5:ec:a3:a1:0d:22:e0:84:57:94:e8:a6:74:d1:
                    5b:d1:87:65:be:63:3b:d4:4e:c0:32:a1:e5:a4:22:
                    b6:64:14:a2:b0:82:7c:bc:26:61:7c:c8:68:67:81:
                    af:97:e1:23:ed:88:7f:58:ed:ae:db:bc:59:fc:b3:
                    16:9a:8c:8f:19:36:b9:b6:62:9d:e4:75:6c:c6:1a:
                    9b:cb:0c:39:ad:81:c1:95:00:3c:bf:bc:35:c3:32:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:38:DD:4B:8D:AD:E0:82:CF:8E:E4:92:E1:AF:33:43:AD:CA:0D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e584f045-e682-3896-9c7b-daa4136e544c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:70:8c:c2:87:22:0f:55:ba:7e:de:2d:04:2c:b2:d9:47:b7:
         87:85:91:aa:5f:7b:f5:62:45:21:8b:38:98:76:07:15:ee:f9:
         5d:c4:d9:8b:dd:5d:ab:f1:26:40:14:e0:25:81:c4:62:ae:a3:
         a0:9e:09:39:5b:41:b4:c9:e3:ab:39:1c:04:0e:ed:6d:35:9e:
         07:95:a5:5a:46:4d:3d:cc:61:0d:e5:1a:5a:95:a7:ca:f3:69:
         c0:78:4c:59:de:d7:9e:09:c8:5f:e4:4d:ed:86:82:af:4a:8c:
         aa:a7:0b:42:37:30:3b:17:d7:51:c9:fc:cd:b8:6c:a1:ac:39:
         3f:cf:b9:d9:2a:26:5d:f3:10:48:3b:e1:57:3d:56:2b:af:ac:
         f2:55:d5:2a:4b:2d:ef:2f:4a:67:4e:10:3b:e5:53:ee:a4:f5:
         ec:00:ff:18:6f:07:94:c5:20:7f:6c:47:4f:9e:2a:eb:b1:46:
         8a:ce:eb:10:a3:fc:01:9f:85:09:b1:74:7f:60:a6:fd:9d:ca:
         e1:05:ac:94:6f:c0:55:ad:1d:09:ac:ee:27:75:44:24:a6:f1:
         9e:29:a8:d7:b2:dd:33:0e:f7:2a:fe:d5:5b:37:a8:ff:ab:93:
         fa:fd:2c:9a:99:e7:b9:51:cb:57:63:c1:c2:2b:e4:9d:6e:c3:
         31:36:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:53:32 2025 by rpki-client