Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa
File:                     1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa (raw, json)
Hash identifier:          wxpWmjp8EmuobBGsyQhYpkwb5B/m5Y2ZX87lQYfCSco=
Subject key identifier:   A1:ED:EF:4E:ED:CA:E5:5C:51:D6:29:E3:EE:EB:FD:F2:05:E1:CC:9D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848960B6D9D6382CC64098DD600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     396587
IP address blocks:        2620:74:2c::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:6d:9d:63:82:cc:64:09:8d:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=39121317-bac3-4342-8092-18304d75c5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ec:66:4b:38:61:bf:71:18:48:30:92:61:52:
                    f2:fc:62:da:87:07:02:fa:40:51:0d:5d:42:80:29:
                    cd:ed:3f:e1:f7:20:2e:16:6c:03:4f:24:fb:92:f6:
                    1f:48:0e:d9:f6:af:7f:b3:2e:00:ba:de:ed:8f:62:
                    79:b5:4a:19:1e:c3:3a:12:d8:ad:a9:5c:37:c5:f0:
                    7f:66:8c:78:96:a5:3d:48:e9:b6:ec:66:cb:ef:18:
                    04:48:57:8d:df:bf:98:6e:9f:6d:f9:de:0a:dd:ba:
                    09:0d:b0:f9:95:71:6c:f6:48:f1:32:b0:be:57:bb:
                    45:b2:02:d5:b3:d8:b5:75:08:aa:4e:27:83:0e:5c:
                    1c:b1:29:f5:3f:ea:6b:05:db:fd:93:e3:7e:26:9f:
                    cc:b8:6c:74:13:77:34:49:78:f4:69:99:19:aa:02:
                    62:90:9c:b2:7d:a2:0c:97:35:a3:eb:03:56:ca:47:
                    20:b7:b6:b5:a1:28:0f:a4:8f:d7:46:1e:28:27:9d:
                    c7:6d:80:a1:9f:97:4b:eb:0b:97:76:a3:c4:6f:18:
                    80:12:0d:11:ce:f6:ec:3f:ac:ee:f5:74:a2:bd:d4:
                    bb:0c:b7:4b:4f:86:2c:08:f3:5a:50:dc:53:0f:9a:
                    c1:e6:0c:43:d8:14:1d:b0:3d:1c:8e:20:89:46:29:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:ED:EF:4E:ED:CA:E5:5C:51:D6:29:E3:EE:EB:FD:F2:05:E1:CC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1fce2299-c2a3-3eca-9d22-8a73919abcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2c:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:ab:82:33:29:66:fb:58:7f:86:0e:53:3b:b6:ae:c5:76:
         15:2b:8f:81:30:dc:44:fb:2a:05:36:be:d4:39:77:16:5d:da:
         8a:32:5c:32:74:1b:d6:30:d1:c3:19:6e:94:73:b8:f9:bd:0a:
         a3:9e:19:68:de:d7:12:4d:6f:5c:93:58:87:02:7b:93:86:b4:
         b1:49:bd:d8:e0:ec:10:bd:17:f4:fa:21:0b:d3:e8:32:4d:cf:
         1e:17:41:e9:48:b6:04:84:42:d8:e9:12:61:0c:b5:73:35:54:
         83:f6:94:c7:84:22:cc:85:34:15:47:81:61:5d:82:b2:23:a6:
         a8:ee:43:84:1b:9b:70:be:aa:5b:94:a7:0c:2f:e1:cb:d1:90:
         f6:0b:ee:55:5d:86:0c:da:be:75:b3:90:ec:84:99:07:d3:54:
         d4:f0:b5:41:bc:90:51:41:c1:1c:15:9e:c0:97:4c:f0:39:4e:
         ba:24:65:53:ba:f7:22:e6:30:29:41:04:40:72:12:0b:dd:7c:
         c1:8f:98:3b:3f:c7:9a:10:2b:e7:97:b0:0d:d4:93:c9:11:61:
         98:b8:d5:5b:42:6e:1d:73:1e:68:55:18:9c:b7:16:b2:7f:13:
         4f:de:6b:9e:8a:75:91:7a:f5:dd:c5:52:3f:a4:03:1f:29:fd:
         9f:f8:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:07:39 2025 by rpki-client