Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35c39014-6934-3036-af12-4079bb0d9397.roa
File:                     35c39014-6934-3036-af12-4079bb0d9397.roa (raw, json)
Hash identifier:          iIgsGTn8DtJT4lGv7V1UKK8gutUi9MnztPsicBH1dWg=
Subject key identifier:   FE:84:03:37:0F:0B:EA:AF:75:9F:DE:2F:7A:EC:F7:4B:1C:5B:57:87
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD9999652ED7F3447E780
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35c39014-6934-3036-af12-4079bb0d9397.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     36622
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d9:99:96:52:ed:7f:34:47:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=17694872-52ef-4baa-82a6-c1b7afec87a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:58:4c:9d:a7:68:22:58:4c:25:be:cc:fb:
                    21:97:ad:d3:4f:ce:04:c3:32:66:76:e3:ec:53:d7:
                    aa:76:99:e8:d5:63:a0:a4:31:ae:0f:ce:23:08:8b:
                    71:54:43:05:57:ab:58:d2:c4:fa:4d:a9:4b:ef:cc:
                    18:8f:ea:69:13:23:60:ea:fb:b3:95:09:56:09:06:
                    7a:8a:ad:6d:41:a5:72:d0:e4:31:22:a6:65:21:55:
                    fa:e0:fe:d0:14:97:e9:17:77:6c:11:23:6f:75:a8:
                    61:d8:01:4d:e9:5c:d1:b4:11:ce:b4:af:73:56:79:
                    f0:75:fd:8b:a7:00:98:c3:88:e0:b5:5d:cf:cf:ba:
                    f4:36:b3:4c:92:18:39:89:b6:6e:5e:e2:59:55:20:
                    41:70:1f:59:55:ce:b8:d0:2b:69:bd:69:80:a4:4e:
                    76:87:c5:54:09:a3:80:e0:d4:45:42:f3:93:4f:7d:
                    ce:88:97:fc:e2:8b:c4:25:d3:46:91:f0:c3:a4:4c:
                    6c:4a:af:16:cd:ba:7b:0f:13:51:e5:d0:61:a4:60:
                    3e:a3:d0:e2:7e:f4:3b:03:9c:e7:7e:b7:14:1c:4a:
                    4c:bf:21:68:a0:2a:20:35:39:40:1a:bc:ab:39:a1:
                    b6:37:71:6f:28:cb:4b:98:cb:92:c9:f1:64:4b:52:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:84:03:37:0F:0B:EA:AF:75:9F:DE:2F:7A:EC:F7:4B:1C:5B:57:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/35c39014-6934-3036-af12-4079bb0d9397.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:78:5a:10:c9:45:37:a6:87:65:34:9a:02:50:a9:d7:55:5b:
         8b:ed:b9:b0:31:44:d7:36:36:65:83:4c:86:81:15:3d:93:c2:
         03:bf:3c:b6:26:7c:bc:4e:5e:25:44:80:a9:d1:1c:8f:ab:81:
         89:47:18:02:01:61:0a:10:9f:7a:a5:55:39:15:90:e3:09:37:
         33:72:2c:10:13:f2:41:78:c3:5f:c7:6a:e0:de:7b:d1:07:63:
         22:ed:ac:d0:20:4c:d3:c5:49:7d:5a:64:f0:38:bd:3b:a2:8d:
         2d:83:6a:8a:04:fe:86:7c:a2:ae:89:9c:38:05:0a:87:43:11:
         c6:4e:4c:ba:47:ce:f4:d1:e4:e6:f8:49:f7:d8:4e:45:ed:61:
         f8:09:38:5e:4e:36:a9:18:4d:ef:5f:0e:03:14:75:35:8a:0b:
         86:f3:68:98:cd:96:b0:e6:ad:97:96:78:82:14:46:29:94:95:
         32:62:95:5a:57:67:b6:79:3d:ca:f8:fa:e0:78:b9:fd:10:5e:
         dc:66:52:22:22:2f:c2:91:66:80:2d:20:4f:7d:bc:d5:3c:af:
         11:f3:a5:db:25:9f:7b:a5:03:5a:82:38:81:60:f2:a9:2e:3d:
         86:cb:a9:07:a9:fd:b4:93:87:3e:47:a3:31:d0:fc:92:0e:ea:
         c5:a4:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:14 2025 by rpki-client