Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f384781b-f33d-305f-b4fc-ef005ef72b7c.roa
File:                     f384781b-f33d-305f-b4fc-ef005ef72b7c.roa (raw, json)
Hash identifier:          uQQw2nN2JQN5prWF3QpLR0qdkbGMFif00hGk6G7tKUk=
Subject key identifier:   CB:80:42:B9:55:57:41:42:C6:7F:9D:66:10:BB:F7:06:46:B4:83:C1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A9A9F68CCFC7612977668
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f384781b-f33d-305f-b4fc-ef005ef72b7c.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     211369
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:9a:9f:68:cc:fc:76:12:97:76:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=11b02fe3-d5ec-4ad9-89f1-b27f63d991b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:4e:2a:34:3a:14:7d:4d:b3:73:a3:8e:88:
                    2f:2a:85:fb:ba:e9:2c:b0:44:6d:2c:a0:f3:7f:09:
                    fb:96:d8:dc:ac:37:23:03:bb:f7:31:d0:08:39:15:
                    f9:35:f4:f1:80:c0:a3:bd:0c:7a:d7:17:49:79:de:
                    03:f8:0f:fa:c1:34:6d:74:c0:2b:a6:00:b6:97:90:
                    29:e8:1e:6d:ea:7c:5b:48:9f:49:94:c0:89:67:0d:
                    24:08:fc:87:12:7c:4d:dd:38:e7:5a:0a:52:35:b5:
                    a0:2f:2f:e1:2c:88:fd:e7:c2:41:ed:4f:98:52:c3:
                    e0:99:fb:82:20:b5:d0:df:25:42:1b:d2:19:34:6d:
                    3e:02:9a:9b:a2:68:4f:ab:75:d5:bf:05:76:74:4f:
                    10:a5:19:82:8e:ba:63:fe:d1:66:2e:a3:99:38:c0:
                    5f:7b:e0:71:0c:6e:7c:e3:3c:d2:f8:22:5a:38:99:
                    ff:a3:4a:14:2b:7d:65:a4:47:1c:2d:17:08:dc:08:
                    4a:5a:ef:cb:86:71:03:47:d2:2b:1f:21:ed:30:e8:
                    9d:2d:9b:7a:d8:76:e6:b0:e7:3e:89:ef:22:d1:36:
                    35:05:67:00:4d:6e:81:e4:ba:3f:9a:e1:47:70:fc:
                    95:0c:fe:b0:5b:59:3d:26:c1:c4:17:3d:04:12:f6:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:42:B9:55:57:41:42:C6:7F:9D:66:10:BB:F7:06:46:B4:83:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f384781b-f33d-305f-b4fc-ef005ef72b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:92:92:82:15:77:ba:db:77:f1:14:6f:a8:16:aa:4a:74:
         fc:ba:fc:d5:6f:a2:56:9f:89:d9:dd:7b:ff:25:68:08:67:55:
         35:8e:65:b6:85:1f:a7:d5:96:af:1c:bd:0e:fa:37:6a:88:3d:
         d3:f7:fb:1e:d8:b9:c7:cb:d4:3a:3a:fa:e8:cb:4e:c4:7c:58:
         0c:26:82:a7:ac:5a:4d:f1:26:f7:ea:8d:e6:02:d7:ff:c7:e7:
         ea:1f:a0:ae:09:8f:67:bb:25:e6:87:a1:ba:80:cf:6a:72:26:
         9e:03:b6:93:db:7e:98:57:f9:db:1a:41:bf:a4:18:74:80:39:
         2e:02:ad:a8:e8:cf:18:2a:b5:29:a2:ff:90:fe:8d:24:f1:47:
         c7:ba:35:9c:1f:0a:9e:08:2f:8d:e9:90:a7:43:71:24:ab:1a:
         78:a0:90:4e:6a:5f:9c:42:5b:d2:f6:8c:41:8b:4b:45:23:c3:
         dc:7b:7b:3a:22:cd:90:92:3c:5e:e6:6d:97:f6:1c:36:60:d5:
         4f:52:16:ff:d0:c6:a9:5b:b0:36:f1:3e:c0:cc:90:b4:f7:c9:
         0c:e2:1b:ae:8b:55:a3:c0:1d:78:f1:bd:0d:a8:c7:d7:cb:4b:
         64:96:67:68:ad:3a:db:e5:88:7b:54:ce:15:78:9d:8c:0f:94:
         2f:41:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:38:47 2025 by rpki-client