Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e3be905-8cfc-3523-b71e-0d5d0333b3cc.roa
File:                     2e3be905-8cfc-3523-b71e-0d5d0333b3cc.roa (raw, json)
Hash identifier:          Xh6Zbmx22HdMG4kKuKzHIaGL5/6XlAAKuH/zKvZZPdk=
Subject key identifier:   5A:C1:1C:DF:10:3C:D1:D2:70:49:89:F5:CE:F1:5E:4C:80:36:B5:AC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D211139C356A1170358E4340
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e3be905-8cfc-3523-b71e-0d5d0333b3cc.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     36623
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:13:9c:35:6a:11:70:35:8e:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=9f473735-b33b-40d1-8003-b44b7c659f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:b0:2e:f3:6e:2a:cb:a5:ee:c6:b5:a1:c9:
                    f9:71:99:73:08:85:05:26:bf:9e:5d:63:a0:4a:84:
                    59:86:d5:8a:f5:9c:a0:7d:8d:cb:6b:1a:c5:dc:9e:
                    72:ba:25:71:7e:e3:bf:6e:4d:11:e8:5d:61:bf:a3:
                    65:fe:07:32:0e:cf:a7:6a:e7:0b:a2:c7:46:e2:48:
                    81:a4:c0:32:b7:58:4d:4e:5a:87:0f:7d:0d:e4:bf:
                    cd:c9:38:53:2d:83:ca:66:7f:9d:23:0e:45:b9:95:
                    da:73:ee:17:e7:d5:99:b3:24:60:3b:a8:3f:b4:17:
                    a3:b3:2f:e2:3d:0d:7d:62:aa:ff:0a:2e:a7:c2:c4:
                    f9:51:43:45:c2:5a:ce:98:8d:b4:63:30:a1:16:6c:
                    68:9f:73:ac:77:09:d4:92:03:0c:b9:f7:aa:0e:65:
                    ef:4b:5c:3d:4f:12:5b:f9:8d:47:c4:d7:23:86:22:
                    6d:13:17:37:33:b5:44:47:b6:30:fb:54:1f:d1:4d:
                    e5:b8:14:a2:fb:4e:0a:63:c6:67:ee:99:f1:21:2b:
                    f7:53:b7:b9:e5:c0:0a:38:67:dd:82:01:86:f8:f0:
                    50:7e:31:e8:ae:15:7a:1b:cc:67:43:b1:6b:b4:74:
                    77:d3:cd:33:eb:44:5c:59:5c:8f:8c:f5:01:10:82:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:1C:DF:10:3C:D1:D2:70:49:89:F5:CE:F1:5E:4C:80:36:B5:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2e3be905-8cfc-3523-b71e-0d5d0333b3cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:80:1e:0f:98:f3:ac:a7:1f:ac:23:d9:cc:29:23:a1:36:a0:
         7d:02:de:28:4d:30:d5:50:6e:b0:cb:04:b2:c9:57:cc:cd:f1:
         e2:d3:f1:2d:3d:97:06:2b:0e:20:08:7c:39:32:8d:74:4a:8e:
         ba:ff:6d:ae:b0:b1:e4:9a:8d:28:b7:97:d1:76:15:6b:bc:b5:
         e4:e3:61:3c:55:4a:3b:d0:92:1b:00:19:51:80:56:4a:ab:ad:
         a1:35:07:7f:87:e7:b7:c4:3c:4d:ff:9b:00:66:df:37:0b:c3:
         04:c5:de:97:82:49:29:0d:4a:ed:9c:b4:0a:50:32:26:e4:f8:
         c7:04:a4:05:76:49:6f:97:46:dd:0d:19:67:a3:35:5c:a3:53:
         09:6b:a1:fe:aa:45:38:41:b1:bf:09:8d:41:3b:54:c1:7f:da:
         17:72:24:1e:f5:3c:ca:3f:b8:75:25:cc:b6:34:29:0e:a8:e8:
         23:01:59:4d:ff:95:ac:96:6a:d7:d8:ce:13:fe:98:9e:42:96:
         44:92:97:e6:4e:87:d8:e3:f9:fd:3c:dc:f0:b9:04:4b:18:b2:
         66:38:2b:28:21:1c:45:2c:47:08:a4:a6:37:24:1e:4d:14:55:
         53:26:ee:20:76:53:42:82:ee:e8:fc:95:51:84:91:28:30:e5:
         86:a0:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:27 2025 by rpki-client