Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaabb17-bf12-3f45-aade-66c60fb01f65.roa
File:                     fbaabb17-bf12-3f45-aade-66c60fb01f65.roa (raw, json)
Hash identifier:          Ex7o5IrWbp42Cp0UWocqJlGtDJ4PuhmqkGl4jKI3bCE=
Subject key identifier:   86:C4:C3:8D:C8:DC:0B:2F:50:E3:12:27:AC:15:86:ED:9C:20:D2:9F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848186A996DAE743FA6C314C680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaabb17-bf12-3f45-aade-66c60fb01f65.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     397193
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:99:6d:ae:74:3f:a6:c3:14:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=d0643077-4d81-4b2d-9e49-b157251da92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0a:fe:92:3c:03:79:e5:25:bb:26:93:c9:13:
                    2b:c0:01:d2:75:19:cb:cb:fb:4e:ca:e7:28:cc:1b:
                    35:41:13:81:4f:59:be:00:d5:cc:3d:74:16:38:f0:
                    c3:65:9a:2f:b7:d4:48:d1:88:8b:be:c5:8b:74:a5:
                    ee:9f:da:18:87:03:a8:9f:87:7d:19:e6:e2:ac:11:
                    3b:51:86:de:00:1d:9f:c8:e5:48:6d:a1:91:9a:03:
                    c1:8b:4d:d2:e5:59:b2:0e:90:4c:9d:e2:b6:6b:aa:
                    0c:e5:bf:93:6a:09:af:ee:55:8b:4c:c5:64:e3:7f:
                    28:7a:59:72:55:4d:9f:df:80:39:70:bd:80:54:4a:
                    58:fc:7b:df:ae:cc:69:6a:85:88:93:d6:b8:06:46:
                    62:0b:07:1f:34:27:22:d0:e6:f2:a4:54:fb:ef:31:
                    d9:bf:59:4e:ae:ae:52:79:39:3d:3e:00:8b:40:18:
                    54:57:59:96:ab:c9:75:1f:d4:bf:1b:f5:a9:de:d1:
                    e9:e1:54:2e:ac:74:4b:75:81:8c:36:54:ab:ba:a8:
                    a7:6f:72:12:87:a9:0a:6e:a6:da:3f:22:98:48:3e:
                    e3:1a:9c:d1:18:cd:4c:5b:79:87:25:0e:11:cd:97:
                    e3:fd:f8:5e:78:e0:18:69:1f:36:ab:1a:66:5f:2b:
                    93:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C4:C3:8D:C8:DC:0B:2F:50:E3:12:27:AC:15:86:ED:9C:20:D2:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fbaabb17-bf12-3f45-aade-66c60fb01f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:d4:b5:9e:be:9f:b2:19:73:ff:ce:bc:e0:01:a1:2e:f6:
         30:a9:3e:57:49:ad:ac:a8:7c:85:48:ac:9e:14:d0:9f:27:ca:
         52:31:d7:55:1e:24:9a:33:19:a5:3f:a9:80:ae:02:95:32:c3:
         03:bc:b4:79:04:7c:68:2d:fb:56:68:a2:ef:36:4d:d4:2d:64:
         0d:52:90:3e:58:50:ea:8f:95:98:28:26:71:5b:77:74:39:ba:
         16:ec:21:a6:47:05:16:89:b5:ad:c8:f4:41:1f:76:60:47:44:
         b7:69:d0:6b:40:1a:4c:28:b9:a0:03:6a:bb:49:06:5b:63:bf:
         d5:e2:81:2f:59:bb:ac:8f:96:c9:4a:59:18:b0:39:14:32:2b:
         84:82:d4:46:1a:e6:8e:d9:68:f4:d1:af:2a:c6:1f:9d:c8:3a:
         67:a3:c4:54:ad:8b:2b:ac:44:6f:b0:89:b2:9b:b3:ea:a3:4e:
         f1:bb:77:94:99:a8:d2:34:7c:54:e7:6f:a4:eb:ac:5d:b1:ba:
         54:1b:55:2d:2a:ba:1a:7c:0c:6d:1d:14:f6:18:f4:56:8f:dd:
         af:c9:a5:a2:71:fe:34:00:b3:cc:10:d2:08:a7:93:ad:99:c4:
         04:4d:fe:ff:77:d4:bc:5a:13:2f:f8:19:88:77:0a:ff:ed:0b:
         37:a9:e3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:34:50 2025 by rpki-client