Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28250785-b4c2-377a-b300-cc4084ed656a.roa
File:                     28250785-b4c2-377a-b300-cc4084ed656a.roa (raw, json)
Hash identifier:          3qmVnuuftilmhaCBe0HjSlHfHFpGpjbRMyuRPFWTXTU=
Subject key identifier:   1E:51:B3:E4:61:BB:E1:66:D5:1F:AD:72:64:A1:24:49:9C:98:38:11
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D2110D08FBA8FC11E79B7600
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28250785-b4c2-377a-b300-cc4084ed656a.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     397201
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:0d:08:fb:a8:fc:11:e7:9b:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=3cf69a99-eecb-4a56-b79d-123408c31c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:6d:41:f6:c1:8f:87:ef:a5:f0:1a:70:e1:
                    2d:a6:2e:a0:6f:be:37:ab:19:07:81:df:08:f7:d8:
                    d8:1a:ce:fa:12:84:63:cf:d8:be:22:13:1f:8d:1c:
                    21:21:83:fa:a1:28:bd:03:94:28:18:0f:f8:38:a7:
                    cf:6e:e9:ea:73:e4:9e:59:e1:b1:b4:a3:e0:22:3e:
                    f9:31:1d:5e:1a:2e:49:4e:79:80:54:9f:22:a9:a8:
                    05:06:fd:60:19:60:ad:74:04:7d:68:6c:1e:ff:c0:
                    16:49:9e:34:5b:0e:8c:47:39:ba:1b:d6:8b:d4:31:
                    ed:58:eb:46:6a:60:1e:a7:f9:91:18:9c:43:6a:6b:
                    fc:0d:23:a6:85:97:0c:65:eb:07:77:4d:15:b2:a9:
                    c7:63:b3:0b:e2:83:e2:0c:fa:27:1e:46:7f:9e:98:
                    7b:b9:d9:9a:1d:07:bd:60:fe:ff:ea:d2:dc:9a:c1:
                    01:23:62:4e:73:48:ec:d7:b4:ca:cc:e2:d8:36:fa:
                    e6:80:f4:39:0f:21:3f:9a:ad:8b:8c:ff:ae:71:91:
                    05:de:cf:99:9d:f5:ca:81:4a:be:d0:3f:c4:0c:78:
                    96:d4:9d:b5:d7:a2:22:e1:88:f6:2a:13:54:69:1d:
                    df:71:8d:f8:ba:8e:a0:55:05:70:de:6c:6f:cd:f9:
                    55:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:B3:E4:61:BB:E1:66:D5:1F:AD:72:64:A1:24:49:9C:98:38:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/28250785-b4c2-377a-b300-cc4084ed656a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:12:91:49:c8:09:46:f8:63:1b:2a:d0:59:43:4f:97:76:38:
         cd:6c:56:79:73:b4:79:a0:7b:57:00:3f:69:fd:04:78:f7:78:
         72:77:5e:d5:54:0a:04:bc:7f:9c:df:4f:43:24:45:84:b3:cb:
         ea:4a:65:49:aa:57:9d:b5:ed:bd:ae:29:1b:7c:87:aa:8d:f0:
         a9:91:4c:01:5d:9a:5b:4b:1b:c3:71:40:fa:2e:e2:88:25:46:
         25:96:ed:6a:97:de:38:23:29:a2:60:76:82:0f:68:95:2f:db:
         f8:fe:df:5b:9e:00:24:c1:cc:89:7b:8b:12:de:31:5a:fd:7d:
         66:c0:e6:b3:5c:eb:33:4d:f5:03:a8:d4:c2:1e:99:a9:89:66:
         4e:12:28:9d:28:f5:99:99:ea:b8:f3:93:bb:9e:67:a6:c3:9b:
         c6:be:eb:63:58:d8:0c:03:63:8d:c3:a5:11:74:3e:5c:e3:ad:
         cc:83:81:24:9d:c1:c0:d8:05:dd:37:8e:59:6d:cd:a1:15:0f:
         2e:99:6c:30:ec:96:2d:63:25:0f:46:08:58:e4:e8:e1:c2:75:
         b6:c3:a4:4b:8b:8f:54:01:ca:c9:ad:a9:84:8c:8c:0e:82:41:
         d3:f6:67:50:f0:fa:fb:b3:42:c1:dc:f3:3b:58:18:72:f7:e7:
         93:24:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:59 2025 by rpki-client