Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bba29c6-9266-3101-bf5f-fbacddb352a6.roa
File:                     0bba29c6-9266-3101-bf5f-fbacddb352a6.roa (raw, json)
Hash identifier:          tsr8/dNy9oPyHJr5Y1vFpLnJTj/HqQyfZ3KfnB59Ysc=
Subject key identifier:   D5:45:B5:C1:A4:6F:3D:C2:6B:BA:F4:04:D6:E2:4B:85:46:6D:28:FC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849287E5766872D478AC711996C
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bba29c6-9266-3101-bf5f-fbacddb352a6.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     7342
IP address blocks:        2620:74:70::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:57:66:87:2d:47:8a:c7:11:99:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=ec672a3f-01de-4817-b777-af46a7ca4209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:0d:83:66:48:72:22:6b:76:07:e7:86:a5:
                    3f:de:57:9f:ab:59:93:c3:e2:c4:5b:f3:be:d3:15:
                    76:6e:6d:58:f7:ce:b3:dc:59:ba:ca:8c:77:c4:e0:
                    ef:7b:44:5f:55:cb:df:01:6f:35:c2:09:b4:af:7f:
                    63:8d:ca:d7:ca:f7:e3:2e:36:83:88:fa:ab:c5:88:
                    5b:7b:67:f1:0c:36:34:bc:6b:bb:55:a9:03:5e:83:
                    ec:e2:14:1b:c8:62:15:96:25:88:36:5b:5f:ea:b2:
                    61:00:25:f2:39:59:49:7f:d3:4f:0b:9c:3c:58:00:
                    35:9f:be:28:97:c2:c5:aa:91:99:31:9a:bd:72:ce:
                    1c:af:0e:d0:01:13:c4:b7:8a:7c:a7:5e:90:93:89:
                    6f:13:5e:51:7b:c4:42:a2:3a:02:90:57:b8:fd:7e:
                    a6:0f:b3:b0:5c:64:12:71:e1:23:1c:40:66:0a:12:
                    40:3d:b2:32:53:9e:66:0d:d3:b2:79:07:12:a3:6c:
                    92:98:86:65:cc:4b:d5:38:72:98:64:cd:e3:2e:fd:
                    54:c0:7a:44:3d:b3:3c:b2:7c:be:9f:15:f5:38:59:
                    82:52:c7:e4:80:70:c6:a2:2a:95:1d:32:6f:37:20:
                    9b:89:59:fa:7e:75:dd:30:ff:b9:5a:06:9e:8d:39:
                    39:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:45:B5:C1:A4:6F:3D:C2:6B:BA:F4:04:D6:E2:4B:85:46:6D:28:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0bba29c6-9266-3101-bf5f-fbacddb352a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:70::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:17:6b:ae:ca:7d:b7:6f:39:39:a4:07:85:57:53:c6:fa:3a:
         72:ff:87:7b:6b:4a:36:f2:0d:09:f3:31:34:b8:d0:3d:c2:f2:
         cb:40:49:11:30:90:22:3b:53:28:43:a7:0c:87:8d:01:13:09:
         04:0b:2f:36:7e:fd:34:74:64:b0:90:c7:ee:ea:cd:5d:86:d1:
         a5:a6:2f:02:c4:e3:7b:d7:1c:ad:29:7d:d0:3f:d6:a4:2c:94:
         ab:e3:62:24:56:3e:19:a0:47:1b:ce:0f:42:cf:b2:42:d1:52:
         fb:c4:b3:d9:08:36:ef:d7:da:9f:e7:26:bf:a6:5b:43:a2:e3:
         52:de:59:3a:43:94:0d:21:d1:dd:73:30:ee:e8:0d:77:97:46:
         ce:a8:40:68:18:c2:2c:39:8c:8a:75:b4:6c:3b:c1:06:14:3d:
         0f:35:05:57:5b:37:f5:82:6a:a9:36:e9:30:a2:15:fc:43:96:
         50:b8:7a:48:55:04:84:cb:cb:42:f6:2b:9b:74:65:fc:bd:52:
         47:98:1b:bd:1f:fc:54:87:88:71:20:0b:68:70:1d:4a:a7:20:
         eb:ac:f1:cb:c7:9c:bc:6b:4d:b0:b7:53:e0:37:24:40:f5:c3:
         54:3a:99:61:78:cf:b8:7a:f4:ff:5d:9b:ac:ac:5f:77:60:c2:
         20:31:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:16:13 2025 by rpki-client