Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa
File:                     f11448a6-a06a-3ba1-854f-63ab44df87ab.roa (raw, json)
Hash identifier:          7PZ1IxIMwTedt0qY6XXDU6hg9R5XLUl592bnGtO4Xmg=
Subject key identifier:   E5:03:7D:28:09:6D:3B:00:41:57:B5:A5:CD:E6:54:D6:6A:41:99:63
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A9AE9B3FB6DD089623480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     397198
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:9a:e9:b3:fb:6d:d0:89:62:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=ad15622d-b103-4410-b623-e5cf14e9ca99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:63:10:2b:62:c9:11:c2:de:b1:97:eb:9e:
                    1f:c2:d8:e3:73:6b:5c:4b:c1:80:57:13:13:0f:a9:
                    3d:47:b0:5f:0e:37:ed:e0:f9:e4:49:a9:ff:b2:0d:
                    5a:8b:e4:ee:b2:97:78:60:a2:a9:c3:37:06:95:16:
                    f6:67:78:68:a4:2e:dc:14:db:02:46:81:65:9a:2c:
                    9e:d0:da:31:7e:35:70:bd:d3:6a:c9:4f:c1:e2:64:
                    0c:76:6d:28:eb:18:07:22:d0:da:26:1c:27:cf:db:
                    5d:4e:2e:e1:b0:e2:5a:44:99:e2:de:69:01:ac:ce:
                    37:68:97:39:ce:5d:86:6b:7a:0e:ca:97:e5:14:18:
                    53:bd:a2:8f:23:cf:7e:dc:68:97:91:9b:83:e1:b3:
                    57:9f:0c:92:82:09:b3:2b:8f:64:f8:79:6a:ad:a4:
                    49:98:b5:76:0d:64:8e:08:41:ce:10:0d:fb:48:40:
                    46:92:9c:ee:4b:e7:34:60:f1:48:d1:c7:99:cf:74:
                    37:87:03:7b:01:9e:d5:a1:5b:49:c1:a2:8a:25:5f:
                    8a:e1:3e:57:bd:cd:cf:1c:9d:58:a1:3c:fa:f8:a6:
                    6d:18:51:90:4c:78:d5:f8:48:b4:4f:37:a2:c7:16:
                    8f:07:43:a0:10:f1:62:4f:bb:93:38:24:c5:68:03:
                    31:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:03:7D:28:09:6D:3B:00:41:57:B5:A5:CD:E6:54:D6:6A:41:99:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f11448a6-a06a-3ba1-854f-63ab44df87ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a6:04:13:48:e1:d4:41:6b:30:2d:94:db:91:a9:db:1c:5b:
         f1:0b:27:29:bf:07:90:57:f5:03:27:e2:f1:ba:b3:4b:1a:70:
         51:fb:65:8f:90:17:71:16:69:9b:6f:99:f1:99:f1:9f:bd:b8:
         76:11:50:88:98:5e:ff:1e:78:fe:7a:67:ca:7f:90:ac:1c:d2:
         d5:22:32:c5:9f:a8:74:2b:7a:cd:8d:ce:a2:5e:f5:4a:3f:5a:
         e9:03:f4:78:3c:24:90:a6:7e:cb:4f:ad:97:bd:23:1d:ad:35:
         ef:d6:a4:a4:a1:b4:f6:db:bc:46:6a:34:32:d9:e9:88:e3:14:
         ad:0f:34:26:d1:a0:22:a8:25:f2:c3:ef:40:25:49:aa:29:d0:
         65:17:bb:8d:01:68:83:90:5a:1c:7e:cd:9d:b5:cd:18:5c:f2:
         a6:6e:90:6b:89:9a:63:ab:db:29:c6:27:0c:c7:d2:3e:14:29:
         72:4e:1d:f4:c1:5c:88:48:9a:db:cd:62:71:dc:fd:96:c0:5a:
         fe:cd:8e:2a:6e:47:3d:bf:c5:05:59:43:c3:ca:0d:27:1e:2f:
         b1:ce:39:65:71:81:33:1f:af:2c:72:ed:ee:5f:24:dd:92:f8:
         5c:47:31:90:01:5a:15:83:ba:5e:55:3c:81:4e:6b:6e:f6:0a:
         64:78:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:47 2025 by rpki-client