Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa
File:                     924a3ec1-874c-311e-9203-35d1f1b5b990.roa (raw, json)
Hash identifier:          Q/rDtvWsl7I0UyzH2+yZCIQP+c4kgGDcs6fupC8uU3g=
Subject key identifier:   E2:79:90:9E:98:65:7F:CC:11:19:6A:BA:A3:90:0D:5D:19:91:98:D2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858493C09378C89CED474729AE180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     7342
IP address blocks:        2620:74:6f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:37:8c:89:ce:d4:74:72:9a:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=2419980b-6532-4bd4-bc28-7e50f90c11ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:70:41:a2:34:de:84:6f:9d:06:3a:70:99:
                    ba:cd:73:18:b0:c7:c0:7f:ca:a7:43:af:15:af:da:
                    94:42:75:ad:1b:df:7d:66:3b:a8:8d:05:81:2f:fe:
                    26:e2:12:62:01:bb:b0:0a:a2:7e:50:6c:7e:17:af:
                    87:0e:0c:fe:ab:64:fe:af:ad:11:d6:0c:cd:6b:ce:
                    b6:13:88:c1:13:54:7a:92:b7:b5:ac:b0:51:55:0c:
                    a1:ab:98:98:6c:63:aa:18:62:d4:ec:c2:47:4d:34:
                    57:46:20:83:02:1e:e7:da:d0:ca:26:e3:ba:9a:ca:
                    72:d9:01:68:81:77:45:05:6d:95:6c:21:8e:9b:fa:
                    e5:3d:6d:46:92:fb:fc:c7:72:00:59:6e:23:26:a9:
                    99:de:15:c0:04:a7:c8:de:91:27:8c:86:f9:47:09:
                    93:ab:d7:a8:b0:93:b8:77:e1:9a:37:90:3b:5e:36:
                    cf:b9:ee:a0:0d:8f:30:37:3c:50:7a:06:09:8e:36:
                    6b:c9:76:66:d2:02:9f:74:4a:ec:fd:4a:a5:5e:ab:
                    c3:82:1b:97:2e:ec:d4:e8:72:9e:ed:79:0f:c0:2d:
                    c2:4e:5c:83:e8:c8:f6:d5:80:39:f0:5b:ea:e8:79:
                    67:88:0c:09:1b:67:b0:92:fb:1e:9f:56:0e:93:27:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:90:9E:98:65:7F:CC:11:19:6A:BA:A3:90:0D:5D:19:91:98:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/924a3ec1-874c-311e-9203-35d1f1b5b990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:a3:dd:f9:17:39:1c:4d:7a:e1:fb:82:91:f2:a3:b4:02:
         b9:63:18:02:18:94:94:92:99:8c:c3:9e:ad:77:96:0a:de:67:
         b0:e9:18:bc:fe:0d:d3:67:07:6d:1d:e4:36:0d:10:ec:50:00:
         0e:45:b7:dc:3f:0e:51:41:85:8c:c6:50:f2:dc:49:48:10:fc:
         e8:d8:41:4a:d6:74:7f:ed:1d:cd:32:ea:92:86:7b:64:92:af:
         4a:0d:7f:8d:ca:c7:d1:a3:5c:44:ff:9d:bb:ee:45:5b:b8:46:
         74:5d:ba:60:8a:56:c3:00:e7:42:d2:3f:c7:77:b7:6f:44:a8:
         3f:69:de:64:cb:a4:5a:3b:86:f2:e0:e3:c1:4f:4d:20:df:11:
         c2:6c:60:1b:6e:48:d7:b5:c2:f1:0d:af:76:83:b6:ae:b1:16:
         01:fc:7f:a7:cc:af:52:7b:14:6b:a0:2c:19:6d:a3:4e:df:32:
         17:ae:f5:8a:72:3d:49:06:a6:26:19:1a:4e:9d:a2:c5:9d:32:
         09:a3:1a:3d:35:89:56:42:38:0e:69:72:33:c4:bf:97:8b:33:
         68:b6:0a:91:ef:03:52:06:cd:12:fb:6b:51:55:e0:b0:2b:a5:
         9b:ab:15:e8:ca:63:97:59:b6:cf:4d:1d:7f:9d:9c:94:dc:cc:
         96:a6:18:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:24 2025 by rpki-client