Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa
File:                     ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa (raw, json)
Hash identifier:          4vws1COBT4VuJxodPEx+v8+rgSacU7NHb5NmeKTXRGc=
Subject key identifier:   6F:68:96:E2:C0:7B:7B:04:9A:1A:7B:7B:4A:B4:57:77:7A:79:50:C2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584913AC43B57E7C4D00EDB0B600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2620:74:30::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:43:b5:7e:7c:4d:00:ed:b0:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=c6ec1005-c0e0-45e7-b011-0a61172061ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:9b:23:50:db:3b:96:6f:21:7e:9e:02:8d:
                    5d:46:de:00:e9:b7:65:5a:6a:1c:5b:7b:1d:8f:a5:
                    d2:5b:e3:37:a7:5b:6c:d4:35:2d:3a:d0:d7:09:0e:
                    9b:64:9e:69:cb:12:75:3e:34:e8:20:d4:ff:4c:03:
                    cc:92:d1:70:9d:19:90:d5:34:da:7b:cc:92:7f:f3:
                    56:14:4f:0b:3a:a1:bb:a4:bd:78:f5:05:f0:9b:c9:
                    54:4c:c3:79:8e:81:2c:6a:e9:38:5a:37:59:60:c0:
                    fd:3e:9e:bd:a8:92:ce:70:03:45:8e:f2:8c:22:bc:
                    69:67:47:83:bb:d2:ef:d9:4a:19:56:af:89:7b:9a:
                    5c:66:28:ff:8f:7b:ad:bb:be:19:d3:23:8c:c8:05:
                    32:55:50:9b:a7:9f:23:ac:35:f0:c7:31:fa:4e:87:
                    05:fa:b6:6c:c4:47:12:d2:0e:4d:2f:79:97:6d:9f:
                    84:35:d0:ef:0f:82:39:47:0a:9e:70:88:41:9e:f5:
                    f0:33:6f:3a:79:71:a5:71:fa:59:04:4a:a1:a1:b9:
                    7b:ba:0a:f9:7c:6f:64:36:c1:d6:ef:0c:af:0e:66:
                    83:7b:37:bc:08:bb:09:1b:c1:b8:f6:14:07:04:28:
                    8b:fb:c2:23:37:2d:06:97:69:ba:cd:61:fa:64:29:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:96:E2:C0:7B:7B:04:9A:1A:7B:7B:4A:B4:57:77:7A:79:50:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ba273c4a-d8b9-32b8-b7e1-189ff536f4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:30::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:ca:7d:1d:55:a4:39:1a:d5:c3:4c:ce:6a:d3:4e:fb:52:
         aa:3c:ec:bc:ee:9d:f5:56:ab:df:76:21:38:a2:2a:7e:c4:3a:
         db:03:30:22:61:13:15:85:3f:e0:b1:44:5a:a2:8b:00:65:3e:
         f5:2e:14:13:e9:13:c5:13:92:27:b4:c6:7b:81:e5:e4:62:b9:
         5e:cb:7a:b6:56:e8:b4:5a:28:f6:17:e4:1a:aa:c1:cd:26:b3:
         1e:f9:8f:55:37:c5:3c:ca:e7:f9:89:cb:57:f6:ae:ee:fc:75:
         80:e2:03:b3:5c:55:a8:16:c8:84:9d:b4:ad:85:a3:41:8d:4a:
         0c:c4:01:11:13:3c:16:a0:73:67:da:18:aa:fe:e2:a5:0c:33:
         a0:4c:5f:fd:59:1b:ff:c0:aa:c6:bc:ef:c4:e1:e3:3b:b5:22:
         68:63:2d:b1:d6:56:ee:df:6a:7d:47:4b:ba:ab:73:57:d5:c6:
         3e:2f:92:27:1e:16:6f:08:6b:ed:90:a9:df:af:cb:94:37:d2:
         2d:23:09:da:8b:b2:37:64:26:43:66:6e:25:78:2b:7f:4a:8f:
         10:6e:ef:65:1a:82:5d:32:04:74:ca:ef:32:0b:f6:84:da:cd:
         e2:77:37:a3:e6:e3:75:a2:bf:be:13:22:88:b7:95:e2:b0:6a:
         c3:2c:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:10:29 2025 by rpki-client