Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb76202-4658-3738-8de2-3ed24527fb1d.roa
File:                     fcb76202-4658-3738-8de2-3ed24527fb1d.roa (raw, json)
Hash identifier:          FvYKE+0h//7eAoe2Wm2tJr9YQBztfLTn9F2jTgj3XE0=
Subject key identifier:   76:F5:0D:18:AE:BA:BF:EA:EC:6F:95:F8:37:17:00:77:E4:38:9E:A1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584839EAD53F945C2256CA2F4880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb76202-4658-3738-8de2-3ed24527fb1d.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     396578
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d5:3f:94:5c:22:56:ca:2f:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=f274016d-757d-489c-87d0-5245198112cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:69:dc:9f:fb:d1:73:e1:48:80:44:34:a2:
                    af:4d:ae:d7:ef:95:7f:c5:e5:91:71:1e:e7:03:2f:
                    24:bf:9c:0d:e2:3f:7d:6e:02:3e:64:e7:9f:2c:a9:
                    72:54:f3:45:26:cf:1d:b1:d7:2f:60:82:fb:58:68:
                    32:e4:e0:d9:bc:81:f0:7d:d0:5e:bd:a2:14:b2:f3:
                    00:5b:db:e3:59:2c:97:14:b9:9b:8e:99:cf:15:9b:
                    c3:04:69:9c:61:f8:b4:32:bf:6e:80:f7:31:93:48:
                    eb:66:15:4c:6e:54:81:eb:5f:5a:78:54:e7:3b:23:
                    1a:82:8f:7b:51:c8:94:9e:0f:40:02:04:ad:24:11:
                    95:66:06:47:04:3e:c2:4d:f8:dd:71:87:f8:d4:11:
                    9c:b4:21:94:b0:96:e8:97:f9:e1:0a:df:cc:40:2e:
                    b2:75:89:bd:44:21:4b:4c:ef:a2:94:b2:e2:f2:87:
                    40:bf:51:a7:db:57:29:70:65:a3:01:e5:11:c4:76:
                    29:fe:94:dc:45:3d:ae:ae:64:32:9f:2b:4c:58:3f:
                    f5:ee:61:3f:8e:41:ef:de:41:34:96:6f:b8:53:25:
                    52:5a:92:6d:a7:0d:72:f1:f4:2f:a9:99:81:3d:ad:
                    cc:18:a6:6f:8e:a9:0a:7d:62:c4:1d:f0:03:95:71:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F5:0D:18:AE:BA:BF:EA:EC:6F:95:F8:37:17:00:77:E4:38:9E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fcb76202-4658-3738-8de2-3ed24527fb1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:5b:31:26:55:c1:0e:d6:3a:9d:42:fc:43:42:53:5e:5d:
         55:36:c7:19:83:8e:5a:2f:28:95:c6:f0:d9:4d:df:bd:2a:77:
         a6:ce:6a:b9:93:74:ef:f3:04:9f:c5:9c:c1:41:b3:c7:d3:3e:
         5b:0d:2c:02:33:ce:b6:cb:b3:d5:ed:2c:c0:f4:a5:81:ee:bd:
         c5:b0:5a:bb:0d:46:c9:ae:6c:a8:6a:61:44:03:2e:7b:e8:a0:
         95:e5:04:3a:a8:49:bb:7c:31:87:b4:f5:10:7a:7a:a8:f7:f5:
         95:57:bc:46:71:8f:53:96:2f:83:b4:6f:19:f5:43:9c:ef:e9:
         67:46:fb:da:bd:43:1d:d7:49:d0:d8:0e:c5:a7:e7:5d:54:06:
         cd:28:f2:c0:9a:6e:a0:20:ac:a0:72:0d:42:a1:1d:1e:64:58:
         4c:c1:7a:50:0b:c5:2e:24:bb:d5:43:74:ab:54:06:5f:e8:45:
         92:03:ec:f4:93:56:0c:bc:f0:b1:f6:9d:7d:74:65:2d:66:da:
         71:73:30:6a:b8:b4:61:64:98:98:ce:c4:10:46:1c:3b:dc:d4:
         64:a2:42:bf:6a:8d:98:bb:7b:67:d8:0b:cf:15:cd:7d:94:93:
         73:02:65:ce:55:9c:4b:99:47:86:ef:26:0b:17:24:fa:2d:6b:
         2c:1c:84:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----