Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
File:                     af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa (raw, json)
Hash identifier:          DZTrBvqyxQgeaKkyy//j3E4kObHjDeSI+2R6tw3Gscc=
Subject key identifier:   14:FF:94:3E:C1:78:A0:EE:F6:21:AA:86:D3:2C:5A:2A:11:20:EF:88
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285849287E56DB373772287542C3C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     7342
IP address blocks:        2620:74:7e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:56:db:37:37:72:28:75:42:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=859abda8-e6d2-4d7a-b16f-5523440465bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:6b:a1:3f:d0:fc:1d:0a:81:d3:57:73:0f:
                    36:b8:54:8d:de:a5:6b:e6:b8:3a:cd:41:b5:41:06:
                    f9:c2:ed:3b:88:66:bb:89:7c:98:2c:31:f0:bc:97:
                    7e:43:49:36:f6:c5:79:23:ed:4e:35:6c:ae:5e:d6:
                    83:09:21:bf:74:22:dd:a1:68:01:97:19:33:d2:91:
                    a9:33:65:e2:c7:e3:03:61:af:d7:6d:c5:33:cd:4a:
                    0a:a3:f0:02:60:ac:1d:a8:2c:a7:93:d2:86:36:b7:
                    95:d2:d5:6f:66:ec:a4:f3:89:bd:0e:5b:8c:92:64:
                    e8:2a:19:31:3a:ac:b0:97:9f:52:e3:1a:29:b8:b7:
                    cf:bc:d4:12:c5:ad:90:c0:71:10:7d:2e:ac:d1:49:
                    7a:b2:81:b8:d8:df:79:7b:c2:42:32:69:f2:df:bf:
                    9b:f5:a9:78:9b:0b:a7:df:00:9c:02:7b:a2:2f:01:
                    45:70:39:2c:b6:7c:97:fd:72:06:72:ea:92:72:ce:
                    bb:4e:ee:66:c0:16:43:ad:bd:80:75:57:d3:be:a2:
                    86:df:68:be:92:5c:88:d5:6b:94:bf:93:f1:ec:60:
                    bd:32:95:f4:36:e2:68:86:25:df:76:d5:96:17:07:
                    f3:65:7c:3b:c0:a5:5a:d1:8f:f4:2a:ac:c4:62:e2:
                    5b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FF:94:3E:C1:78:A0:EE:F6:21:AA:86:D3:2C:5A:2A:11:20:EF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af88d837-e4a3-3b05-8fdf-8b0eddc93aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:7e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:b6:e3:11:ea:82:2c:42:26:e1:54:92:c4:7d:90:63:2f:
         fa:28:e0:58:18:e0:6f:d9:16:61:33:13:e6:b3:3c:e4:cb:5a:
         c9:38:6f:30:2d:88:ec:28:98:51:e9:8a:85:c4:06:50:7b:86:
         fa:8f:78:c3:4e:b2:21:a0:40:b0:61:36:66:05:1e:f3:2c:56:
         ff:a9:cd:b1:ca:a0:74:e3:40:27:f1:b7:ef:cf:a7:e7:90:70:
         cd:75:3c:6d:84:26:dd:0a:98:76:1d:10:1e:68:c7:41:64:8e:
         47:3a:e1:25:03:55:85:25:80:b6:6d:5f:18:67:d8:46:53:02:
         b6:18:60:e6:e0:9e:0e:a0:9e:7f:a9:f8:0b:04:ce:48:3d:09:
         3e:f5:e8:24:5f:73:63:f0:f6:37:17:a7:ae:41:87:56:63:0d:
         aa:2d:41:12:80:96:ce:08:72:72:d8:2c:90:1a:b0:c1:df:72:
         9c:ab:82:7a:f9:e9:b9:03:2e:25:93:c0:77:42:33:90:32:6f:
         95:e1:06:97:cc:6a:90:b0:eb:6c:47:56:30:dc:5d:ca:4a:10:
         ae:59:bf:9d:83:32:c7:48:f3:9b:84:ed:e2:7b:10:9a:8f:02:
         a0:df:8f:aa:12:a1:c8:5f:41:24:5c:9f:e1:4d:71:02:a3:56:
         31:f6:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----