Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee213b76-4298-3351-97a2-f6ced8601ec0.roa
File:                     ee213b76-4298-3351-97a2-f6ced8601ec0.roa (raw, json)
Hash identifier:          LGbTZbTS+SvtYeou0A91i6cBg3VVaKlZ08W4CAb47eo=
Subject key identifier:   65:59:4C:55:9B:22:94:31:90:F5:16:C7:87:AE:1B:3C:21:BE:92:37
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858480645161FB7E973667DBC6AD8
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee213b76-4298-3351-97a2-f6ced8601ec0.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     396594
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:45:16:1f:b7:e9:73:66:7d:bc:6a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=68f6b529-5694-450b-8407-0f2ab3cb069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:3d:d2:c2:07:15:86:0d:13:f8:c4:8e:37:
                    1a:f4:e9:fb:9f:ca:63:0c:30:9b:ff:60:51:7a:ea:
                    e5:ee:4c:46:21:ac:e3:c1:61:7e:c6:2d:38:41:f6:
                    1c:33:a9:45:8c:83:ef:63:0b:49:27:53:22:51:df:
                    c8:45:05:c8:4a:54:31:99:37:fa:e3:ce:9c:b3:6b:
                    b8:42:af:03:5f:01:3d:e6:00:34:e8:e4:35:87:ab:
                    b3:74:18:60:d4:7e:23:af:0b:61:42:fb:01:7b:de:
                    dc:1b:27:2c:62:79:86:ec:29:a4:c1:77:40:2d:95:
                    58:78:56:3f:1a:28:78:b5:63:67:9d:70:95:b6:6d:
                    b1:74:6b:34:b3:4e:70:2d:2f:ac:47:fb:ec:0f:f9:
                    93:0c:4f:83:22:83:da:c7:95:6b:cb:06:b2:ec:04:
                    ba:b8:3a:9a:02:46:aa:e4:89:79:dc:13:9d:5b:c3:
                    83:74:7d:1b:91:92:be:0a:c4:68:c8:e8:2d:61:b5:
                    a2:e1:8e:0e:95:ea:88:e0:1c:ca:39:59:52:db:3d:
                    97:ce:0a:5b:78:3b:b0:6f:e0:cc:8a:5d:4d:dc:47:
                    82:26:ee:04:a5:82:fc:2e:a7:75:8b:ab:62:46:2d:
                    4a:c0:ad:6a:9d:f9:26:91:f0:66:5f:8f:96:3d:40:
                    5e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:59:4C:55:9B:22:94:31:90:F5:16:C7:87:AE:1B:3C:21:BE:92:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee213b76-4298-3351-97a2-f6ced8601ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3b:b3:7a:94:e7:95:55:61:7e:51:e2:ad:93:01:cf:85:cc:
         5f:19:23:de:c5:49:d7:32:7b:a5:67:04:ee:28:55:2a:85:6b:
         6f:ce:83:d2:48:38:77:90:a0:eb:4b:39:3b:5b:13:28:a9:58:
         08:62:b8:3b:a6:a1:59:3a:ff:78:05:49:8a:54:32:8e:8b:cf:
         ca:94:17:b4:12:f7:11:ce:2a:de:12:7a:7a:d0:84:c6:e1:28:
         8e:e4:4e:a1:50:94:cc:59:3f:8a:a2:92:33:02:86:6e:df:8b:
         5a:b8:af:e2:14:42:87:a8:f9:12:71:17:47:22:99:f2:70:be:
         e2:0c:01:fb:da:f3:c0:66:27:7d:af:cc:68:54:4f:8b:2e:da:
         98:16:d1:c3:23:f3:44:d0:73:48:5a:ed:00:ab:c2:f7:c6:86:
         6b:16:8d:a4:91:5b:5c:eb:f9:8f:ee:d5:9d:78:79:2d:93:71:
         eb:82:61:e0:93:96:48:61:9e:85:c7:b1:62:d2:f1:aa:70:f9:
         db:4d:cb:8d:ad:63:f3:75:33:a7:d0:75:46:7d:6c:38:73:d7:
         1f:9b:11:e7:37:02:5e:ee:95:a1:61:98:fe:9e:bd:cb:99:02:
         dc:0d:60:ee:17:e6:96:2b:0c:6c:a1:76:ce:7b:93:6e:be:0a:
         24:a5:95:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:04:28 2025 by rpki-client