Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c7cb097-8c6f-3714-91c3-935c909e3e37.roa
File:                     8c7cb097-8c6f-3714-91c3-935c909e3e37.roa (raw, json)
Hash identifier:          tT1l7m17daXrXeCOCwHEbOII2ByxyiZO8ore84WSUjM=
Subject key identifier:   8E:A2:FA:D8:0A:C5:2C:40:25:EF:0C:FF:3A:9E:D8:9F:97:58:E6:94
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584832F0015958CEC75834777280
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c7cb097-8c6f-3714-91c3-935c909e3e37.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     397241
IP address blocks:        2620:74:1b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:01:59:58:ce:c7:58:34:77:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=568aaaae-9f58-46a2-9786-c8137fac3d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:a4:17:3d:53:76:88:6c:ff:32:a8:93:62:
                    7d:db:ae:8f:5e:b4:ae:9f:b7:3b:f1:f3:19:77:dd:
                    f7:33:82:5e:c7:c5:00:22:9b:2e:1b:a9:8b:ed:9a:
                    92:f1:d7:d8:f7:00:7e:3d:fa:4b:1c:9b:5c:87:8c:
                    33:36:38:fa:56:d5:0e:ed:57:1a:d5:34:f4:75:e8:
                    dc:18:b6:5a:f0:51:ff:0f:b9:40:a5:0d:24:47:33:
                    8a:b2:68:93:44:a4:04:9f:e5:f8:be:3f:1a:b7:57:
                    e4:8a:4c:b7:ed:0c:70:4a:e0:57:b0:10:c0:a2:00:
                    01:0e:f6:9c:15:37:4f:fc:cf:7e:a5:00:1c:20:ed:
                    2a:60:91:e2:11:5f:75:29:68:f2:0b:92:c9:80:8d:
                    e4:c1:5b:98:39:e2:63:f4:7f:af:24:e5:45:35:10:
                    7b:b5:2e:29:b1:3c:fe:83:2b:c3:d3:2c:75:63:49:
                    7c:c8:d4:8e:da:63:3c:bc:ad:04:eb:4c:5b:7a:c9:
                    37:48:46:00:c6:38:b8:24:24:ac:75:7b:77:da:82:
                    56:b5:98:06:d4:71:d9:24:64:b2:cf:ef:3b:24:cf:
                    a3:c4:58:23:8a:22:a3:26:eb:39:fc:f5:3f:6f:29:
                    a9:a2:72:bc:b2:b1:36:ff:f8:25:6b:b5:12:bc:c3:
                    a3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A2:FA:D8:0A:C5:2C:40:25:EF:0C:FF:3A:9E:D8:9F:97:58:E6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/8c7cb097-8c6f-3714-91c3-935c909e3e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:1b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7a:80:89:ef:df:93:a4:a9:c1:98:6c:9a:c0:b4:4c:63:48:
         ef:85:ec:b8:d5:12:da:52:32:77:de:e3:c0:4e:19:ba:c5:4d:
         95:9d:7e:62:fb:20:1d:75:cd:92:0c:a8:02:9a:0a:4b:33:e5:
         fc:01:bc:8b:b9:b2:97:b7:26:e9:56:5b:eb:8e:fc:27:c2:04:
         cb:87:14:07:5e:56:20:d9:ba:ad:80:35:f5:85:2c:d2:1b:4d:
         4f:af:0a:de:fd:fc:07:9b:64:0d:75:68:7f:3b:8c:75:11:5a:
         99:6d:e3:43:57:52:a0:2e:50:a7:fd:e2:96:0f:cf:f2:39:30:
         d5:8c:fb:a2:c7:a1:28:e0:89:d2:07:67:06:47:40:3a:b8:e5:
         7d:c4:29:be:13:5f:51:ad:5b:48:4b:3f:38:64:d0:1f:80:e9:
         8f:d9:27:29:d2:ff:18:c7:d4:54:84:8e:cf:a6:67:88:e8:20:
         8b:4e:cd:3a:79:67:4a:f4:ed:55:39:41:78:d7:2e:00:b5:cd:
         92:3d:c2:fe:48:d7:b4:0b:b3:71:15:2d:5a:89:dd:ac:d9:66:
         a9:45:80:7f:11:f8:dd:e7:34:3c:8f:66:ca:4f:67:72:e4:38:
         01:45:33:ab:1a:e5:98:7d:f7:5e:77:81:76:66:d8:12:8b:d0:
         06:03:c8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:50:33 2025 by rpki-client