Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa
File:                     f2770efb-18a7-3ba4-acb5-61c9722570f1.roa (raw, json)
Hash identifier:          khwbCafI7ffKeQpvQj3lhl48z6eSkUgkEKX5hrIizlU=
Subject key identifier:   B7:79:42:2E:B1:C2:84:76:C0:A3:07:C0:EA:B5:C3:0B:80:19:90:F8
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858486D9058870785FA95EAE9ABD0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     0
IP address blocks:        2620:74:59::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:58:87:07:85:fa:95:ea:e9:ab:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=8577f426-d33c-49e2-b495-5697dd813803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e8:65:4b:1e:52:5e:18:50:82:df:8f:50:5d:
                    8e:da:55:75:ff:01:08:d5:93:68:72:af:1d:87:ec:
                    d1:25:34:93:64:d7:e7:48:12:9d:de:43:ea:6a:10:
                    5f:6e:38:a8:ad:35:ff:39:da:9d:a6:de:b1:15:68:
                    e5:ad:ff:6f:bb:58:66:f8:03:80:65:5f:3e:8d:3c:
                    36:49:ee:9d:ee:a1:05:58:9d:ee:3b:54:97:22:d0:
                    be:49:2e:39:4d:a2:5d:a1:05:63:4f:2d:4d:c4:f8:
                    ab:1f:a1:09:5e:55:c8:69:4d:8f:c7:7c:67:92:8e:
                    85:b8:e1:06:50:62:e4:ea:f8:69:fe:ae:5c:3b:6f:
                    c4:71:00:be:c9:91:53:b3:d2:f9:1b:e0:d5:f7:51:
                    36:86:a6:f7:af:ef:21:1a:d3:50:f6:03:a9:cd:5a:
                    c5:b7:78:a2:39:1b:ec:9f:42:39:28:a2:79:83:65:
                    be:89:cf:52:7b:05:ea:c6:a4:14:96:a7:33:a3:80:
                    0c:3a:3c:80:a5:ac:b4:17:7e:6d:2e:1a:b4:d9:b3:
                    77:59:65:05:7b:ec:bf:a3:ee:a7:0b:f3:51:e2:94:
                    e8:f1:5a:03:46:d3:97:6e:5c:e6:cf:a7:82:a4:7d:
                    3e:ea:23:0d:87:e0:30:76:a0:0c:68:a3:f5:fb:e8:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:79:42:2E:B1:C2:84:76:C0:A3:07:C0:EA:B5:C3:0B:80:19:90:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f2770efb-18a7-3ba4-acb5-61c9722570f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:59::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:8c:1f:cf:55:9f:4c:96:b9:77:fa:bd:da:b9:f4:ab:f5:
         99:44:17:b0:4f:1e:87:cc:f2:85:4d:0c:50:da:e4:6d:0a:b0:
         2b:71:c9:4c:db:ed:ba:f9:51:eb:41:a4:12:29:51:0e:7c:ed:
         40:09:86:c6:a4:ef:15:27:91:1d:35:4d:01:9c:f1:c1:8f:95:
         c0:52:85:00:18:83:6b:9b:10:d4:6f:72:87:61:89:b8:c2:3d:
         48:3a:77:e8:b3:97:51:b4:f4:b3:e9:7e:f8:b6:59:72:5b:f4:
         72:cc:1b:f5:d4:72:9e:1f:b5:cc:51:a5:28:31:db:a8:f7:bd:
         03:21:81:5d:55:59:ae:5c:4f:d1:35:84:6a:95:5a:f2:da:02:
         69:f8:c5:66:e9:1d:23:0a:9e:e9:dd:f4:2d:e9:f7:3f:0e:08:
         0a:1c:b3:14:ff:cf:d6:0c:89:1f:3d:74:fc:e1:3d:f1:c9:a4:
         8e:dc:b8:bf:00:6a:0e:b4:26:8f:81:44:f4:19:45:49:50:9f:
         a4:0b:c6:e5:53:1a:9a:a8:f0:9b:95:ab:51:0e:1e:5b:8e:92:
         8f:2e:83:e8:57:1c:c3:1d:d3:93:0b:62:a0:f3:8c:57:4c:c6:
         2e:e4:9e:79:f8:78:be:c5:98:75:8f:da:57:e4:b1:de:13:7e:
         c2:7d:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:22 2025 by rpki-client