Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa
File:                     1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa (raw, json)
Hash identifier:          X6Il701U2SL+OVCmb3mzsLO3KN7ytz0aVziJ++ql1T8=
Subject key identifier:   62:EC:EB:F2:F7:09:FF:A1:E9:AF:BF:39:E2:0B:3B:8F:55:5F:62:F2
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D21115A5BC53A5BA58911880
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     396549
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:15:a5:bc:53:a5:ba:58:91:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=dbda8604-cd9a-40fc-9a72-703ad45b16f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:57:4d:c3:e3:70:80:a7:45:06:19:4d:2c:da:
                    7b:de:98:0d:cc:f3:06:74:13:22:a6:0d:05:ac:08:
                    f5:49:09:a8:09:ef:4e:dd:05:e9:8f:b8:3e:32:84:
                    9b:19:b0:be:0a:99:02:42:08:5c:e3:6e:93:27:08:
                    01:fc:11:a2:b5:0c:d5:58:1e:85:b8:7b:c9:b7:af:
                    05:b2:9d:d4:27:d3:92:5a:3e:01:96:9e:3b:ae:02:
                    3f:41:8f:3d:e4:3b:79:98:70:41:cb:98:06:8d:f0:
                    df:27:5a:95:6f:2c:e4:49:71:88:ad:69:fc:7e:e3:
                    c6:79:70:c6:8a:17:55:d0:7b:99:09:65:d8:bd:ea:
                    fb:9e:56:aa:79:dd:cd:6d:27:c5:d7:18:66:35:e2:
                    5e:37:d5:dd:bc:25:27:ad:4e:26:2a:4f:29:68:77:
                    41:8f:0e:d9:71:97:53:e2:c2:f5:36:35:8c:ad:7f:
                    81:06:a6:31:08:75:bb:87:09:a3:29:a1:16:3e:1b:
                    2c:77:75:16:87:c0:75:96:fe:37:80:b6:e5:db:c2:
                    59:83:52:d3:ef:d4:c5:c3:18:c0:85:82:ba:3b:89:
                    d9:0c:6e:af:bc:e8:fb:6f:60:b9:35:9d:eb:9e:8c:
                    bf:e3:3f:42:b9:b3:9f:97:98:73:2b:a0:57:dc:74:
                    9f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EC:EB:F2:F7:09:FF:A1:E9:AF:BF:39:E2:0B:3B:8F:55:5F:62:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1e46c044-39b5-3c28-aee2-9338ebd5b95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:15:42:0a:1b:18:4d:56:f6:5e:8e:9e:9f:3a:dc:38:16:
         5b:2e:de:65:8c:75:7e:3b:ee:92:59:a8:bb:b5:1e:0e:c0:48:
         fa:d6:0c:3c:7e:c5:73:11:18:b9:78:d2:39:bc:36:d5:19:72:
         44:f0:c4:a0:60:89:15:0e:46:5d:bb:b9:9f:39:cf:b2:8f:87:
         fd:13:09:04:03:77:78:8d:dc:c8:e5:51:28:0f:36:28:23:60:
         a1:ed:aa:e7:c2:91:18:f1:5f:66:cc:e6:e0:e1:49:69:52:c1:
         2b:fc:fc:26:19:28:36:3b:2b:42:69:0b:d5:b1:7b:20:ee:ed:
         55:d6:ff:ff:88:f4:e0:a6:02:16:f8:51:39:41:cb:23:d4:15:
         5e:f9:40:93:01:37:e1:f2:d5:49:92:c8:16:72:67:98:be:50:
         60:fc:d4:b4:b7:73:4f:72:c6:2a:e9:e4:d9:1a:be:72:b2:91:
         d4:6c:4c:36:0b:a0:ba:6d:3e:7d:88:b9:ab:35:da:d9:25:97:
         d6:b9:fa:29:ba:0d:c8:7e:c5:1e:82:1d:51:e0:f7:5d:11:64:
         91:60:5e:e4:9d:fb:8b:15:39:29:4c:53:21:ea:29:65:a5:53:
         b6:4a:85:a2:3a:ac:3a:28:b7:e1:e7:9a:58:21:33:84:eb:85:
         7f:3e:7e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:28 2025 by rpki-client