Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee529153-0508-3470-a286-7590520d45db.roa
File:                     ee529153-0508-3470-a286-7590520d45db.roa (raw, json)
Hash identifier:          amy3E9PhPljk0egUW9J6azjBzCchTZOKIIWKq1Eo1Hc=
Subject key identifier:   DE:8D:1A:E8:57:60:51:66:8E:B1:B6:A0:49:6A:52:75:D5:FA:0D:D6
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858486D905857EA1DB79E20E67400
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee529153-0508-3470-a286-7590520d45db.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     0
IP address blocks:        2620:74:35::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:58:57:ea:1d:b7:9e:20:e6:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=a9b907ba-2367-40c0-8be2-1e8f54e9232b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:81:90:66:18:c0:9c:bb:86:51:79:85:e6:
                    0d:ee:58:f4:0b:9a:6b:2b:4c:97:50:36:89:67:b0:
                    8c:72:a4:29:7f:5f:71:8a:63:42:3d:20:88:9a:ef:
                    1a:75:8b:bc:62:95:4f:f4:32:65:3c:ed:ca:66:be:
                    25:3a:52:b4:c0:21:5a:5e:3f:49:b6:fc:d0:24:d5:
                    2f:3c:82:00:ed:19:d5:07:5b:9b:73:2e:cb:db:90:
                    85:34:5b:97:45:9e:bc:83:9c:80:b6:ac:68:68:9c:
                    99:26:57:6d:7a:d5:61:48:cd:e6:bf:76:64:df:95:
                    b4:bb:3a:f6:cb:91:b0:cb:79:4e:43:7f:97:b2:6b:
                    78:bd:7f:cc:97:d2:97:5f:42:7c:16:b7:01:f5:bd:
                    c7:1f:89:c2:dc:41:48:bc:71:9f:26:fd:a6:22:65:
                    94:c9:c0:30:af:d2:47:00:7b:40:4e:e9:55:76:e5:
                    dc:31:71:69:8b:42:e2:94:c7:d4:8b:e5:00:02:ee:
                    19:03:5d:e9:b9:00:8d:36:d1:55:0c:10:32:69:d3:
                    3f:f9:a4:75:80:e0:a2:09:b1:9f:07:5a:4a:88:a4:
                    b0:1f:f2:36:24:d0:8d:23:e0:0c:25:f5:4d:bd:49:
                    9e:c8:b5:82:9d:36:75:44:d0:36:69:92:88:6d:6b:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:1A:E8:57:60:51:66:8E:B1:B6:A0:49:6A:52:75:D5:FA:0D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ee529153-0508-3470-a286-7590520d45db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:35::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:53:0e:53:8d:9e:29:61:bf:ed:81:a3:41:a2:d8:cc:b6:29:
         6d:a9:78:81:c7:8a:61:10:31:8f:b7:24:7d:90:a7:0b:b8:c1:
         37:a1:1e:28:97:bf:01:02:b3:e5:1e:3b:e8:31:27:b9:5b:37:
         d1:70:a8:9b:52:31:bd:7c:08:2a:f6:83:7e:bc:b3:0a:81:20:
         74:8f:11:81:19:72:ba:bb:b7:ac:04:cc:20:f2:81:ac:c9:80:
         c6:5b:89:bc:c5:a6:5a:d7:87:03:72:b2:e5:f4:d0:79:8e:0e:
         18:5e:1e:3c:85:97:f8:22:07:ce:63:d8:c7:60:6d:13:d1:ff:
         6a:f5:e9:9c:63:f3:15:d5:4d:b9:67:37:91:de:d4:3d:c8:1d:
         99:e1:af:ca:67:70:7b:7e:5c:cd:c7:df:2a:36:f9:57:0a:11:
         40:b7:23:a0:41:c5:31:f2:4a:a5:a9:fa:6d:54:76:9a:1f:01:
         83:76:b4:99:b8:5d:22:36:0c:b0:4f:be:90:a9:33:32:23:53:
         0f:02:f8:c2:45:09:53:09:3a:f0:f9:72:75:7d:cc:b3:bf:57:
         7e:76:b9:3e:c2:90:4c:3d:f0:e6:ac:70:ad:49:46:77:c4:3b:
         e6:32:90:1e:28:5b:10:17:5f:e7:80:08:cb:17:36:0e:bc:bf:
         de:8f:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:08 2025 by rpki-client