Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e3a30ea-2c68-3804-a6be-196623297b62.roa
File:                     0e3a30ea-2c68-3804-a6be-196623297b62.roa (raw, json)
Hash identifier:          OaNROvHh440CsZpZY0C2sMEH2XHvoTpq1g0xqkMCkxY=
Subject key identifier:   FD:13:D9:E5:91:C3:5C:42:EA:C0:0B:6F:88:9F:96:A0:ED:1A:82:A0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D21115C416D14204A135B680
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e3a30ea-2c68-3804-a6be-196623297b62.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     36620
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:15:c4:16:d1:42:04:a1:35:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=1af9b0f5-e486-47c2-8983-904cb690def0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:e8:90:f6:59:4a:f4:60:2b:51:24:68:2a:
                    dd:75:71:43:83:eb:32:f0:bf:7e:c8:c8:35:12:13:
                    31:b4:67:7f:ed:c4:eb:8c:73:c7:ba:3d:76:67:a2:
                    50:ce:2e:3e:fd:6e:34:bb:16:89:a1:71:19:ba:79:
                    bf:7a:73:45:54:96:f8:86:be:f6:19:a1:6b:df:4c:
                    0a:2f:34:3c:dd:61:28:3c:8b:89:ff:de:5c:cb:34:
                    bd:90:c9:1f:3e:8f:89:a8:3f:22:52:70:ce:51:aa:
                    25:d8:a7:9a:98:17:98:5b:3a:0f:e0:77:ae:97:35:
                    9e:c2:d3:cf:40:0b:23:52:30:97:24:39:4e:9e:60:
                    1d:3e:1f:8b:09:ac:a1:4d:9d:39:3b:74:ea:2c:cd:
                    b9:4a:01:58:43:11:ac:b9:a0:f2:64:b7:4e:15:ba:
                    cd:8d:fa:46:67:0f:24:af:e5:93:a2:f6:74:94:3a:
                    1f:9f:9a:db:9a:6a:f8:70:4b:ab:ee:48:4f:83:38:
                    4c:1e:51:54:7b:67:44:45:f4:3c:39:33:55:c8:8b:
                    b6:d3:20:af:45:d0:b4:05:e1:0b:ac:60:25:ec:a8:
                    fb:bf:6a:16:99:d8:ef:bc:66:2d:f9:b8:e0:1b:6b:
                    b8:81:1c:ff:1e:1f:99:a2:d1:3e:86:b1:00:b8:3b:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:13:D9:E5:91:C3:5C:42:EA:C0:0B:6F:88:9F:96:A0:ED:1A:82:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0e3a30ea-2c68-3804-a6be-196623297b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:64:c5:1e:b9:bf:3c:da:07:90:25:fa:f0:a7:04:fb:2c:6c:
         1b:23:99:dd:0a:41:82:78:f0:66:db:62:6a:4e:b3:e9:5d:64:
         0b:f7:98:bd:31:03:8d:bd:9b:26:b4:38:c0:d7:3c:2f:5a:b7:
         07:2f:97:01:d4:b7:ce:37:5d:b3:2e:94:11:6b:34:94:51:e9:
         02:18:2b:87:fb:6f:fd:ed:fa:a7:5e:1c:ef:de:63:9f:f9:e0:
         77:d6:4a:4c:1b:ba:06:a6:85:95:f6:84:34:99:23:b1:b2:9c:
         9e:db:35:99:c4:52:41:18:7e:e1:f1:b0:85:ca:f4:fb:4e:00:
         c7:22:4f:20:42:a7:46:af:f1:f8:77:40:a5:50:76:ef:f6:ce:
         5a:0e:3b:93:de:e3:0d:cd:89:50:2c:54:74:4a:3e:8d:25:65:
         7b:67:23:13:51:92:17:7c:b4:55:56:9d:a2:26:1a:28:7e:9a:
         8b:b6:c6:76:77:60:f7:41:bf:ac:2e:44:a9:78:65:cf:49:a2:
         16:68:0f:6a:cf:e2:a1:e1:38:3c:65:7d:58:7d:a6:d6:cd:96:
         1c:96:80:85:83:15:5f:e2:68:0c:05:d5:5b:1a:06:26:a9:38:
         01:39:e8:c3:af:80:0c:95:e2:d2:81:98:52:97:4c:62:a0:c0:
         b0:24:8b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:06 2025 by rpki-client