Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58810a98-0867-34d7-91ab-d587f7e42c6d.roa
File:                     58810a98-0867-34d7-91ab-d587f7e42c6d.roa (raw, json)
Hash identifier:          aYMZdRonj8ELP60NdR4NBYU7531vFOLCGXrnnLrFNX4=
Subject key identifier:   F1:46:54:05:47:A8:AD:8E:C9:85:CD:2E:1A:36:8F:ED:F0:E6:91:73
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D211150995D7DF2B934CB1C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58810a98-0867-34d7-91ab-d587f7e42c6d.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     22547
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:15:09:95:d7:df:2b:93:4c:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=91e0d853-8f1e-41a1-be74-7f9176a7ac6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:8e:0d:64:dc:e0:51:cd:12:5f:00:03:69:
                    1e:5a:67:cc:45:87:cb:85:ff:97:1c:ba:81:41:2a:
                    06:46:51:f6:96:25:73:a2:83:e6:2a:99:d4:aa:87:
                    f1:14:f1:92:4d:39:59:b4:0e:cd:b7:32:8c:ab:4e:
                    c4:b1:b9:c5:11:55:9a:27:13:37:99:f5:a0:51:42:
                    b0:d7:a5:02:44:46:1b:0f:1b:9e:1f:08:2d:a0:f1:
                    9d:59:f4:41:6c:6c:5e:72:14:a9:c8:d5:9d:8b:49:
                    2d:7c:e5:75:58:e5:0a:20:09:d0:64:20:dc:5a:ad:
                    b8:55:dd:fc:da:ca:55:a3:01:21:db:c3:4f:a1:4a:
                    3c:74:37:82:5f:e9:16:78:c0:3f:fa:2e:4b:c0:84:
                    0d:53:cf:94:45:4a:ba:c1:a5:34:5a:6e:8e:17:8b:
                    1e:15:b7:e2:b1:7d:ce:d8:3b:3f:7c:e5:f6:b2:29:
                    45:81:e4:20:a8:76:73:a7:f8:39:8c:40:51:37:11:
                    83:8a:86:12:5f:07:76:bc:b3:27:04:53:cd:dd:89:
                    67:01:56:b5:4e:6a:fe:5a:e9:c1:46:8d:3a:48:c5:
                    90:f7:6f:8f:43:dd:3a:68:34:8a:2f:b0:e2:bb:17:
                    41:75:e3:70:66:c4:2f:d9:e4:50:e5:7b:7f:db:fe:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:54:05:47:A8:AD:8E:C9:85:CD:2E:1A:36:8F:ED:F0:E6:91:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/58810a98-0867-34d7-91ab-d587f7e42c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:22:8b:30:9b:de:24:ee:37:19:f9:e9:b8:b8:58:19:80:
         11:ec:59:15:f2:af:41:d8:ce:14:38:c0:7c:b9:ef:0f:6a:71:
         ea:76:57:ad:14:2f:1c:12:a2:ec:1f:a0:e4:f1:04:27:7f:7d:
         7c:12:8d:73:7c:db:07:74:dc:b1:38:2d:9e:78:e3:be:0e:41:
         c4:e2:3f:8c:c1:98:47:a0:d7:38:fa:09:cd:4d:f9:dc:f9:28:
         8c:22:a0:ef:a6:71:ac:5a:a0:fb:eb:8e:61:d7:87:97:1f:86:
         5e:b6:2c:49:81:bf:ca:7d:f5:47:92:39:b3:ef:6c:2c:8c:2d:
         81:18:59:ef:54:01:e6:42:11:87:5b:9a:36:f5:30:47:a2:bb:
         06:7a:19:a5:8a:fe:c8:96:7f:22:3b:00:5b:e5:09:35:68:9e:
         8f:7b:65:b4:4d:c9:2d:02:c2:e6:dd:94:8a:b3:5b:6b:28:21:
         49:e8:81:4f:ff:27:93:e5:cd:4c:a4:f2:eb:17:34:46:ed:db:
         a9:02:91:90:eb:85:a5:20:6c:63:f8:f9:a1:b7:b7:2d:a8:de:
         22:a1:9a:1f:bc:1e:1b:76:c1:20:10:eb:96:3f:07:94:91:de:
         55:b9:62:f9:98:3d:ad:46:be:eb:6e:8c:52:e1:b4:72:64:2a:
         99:80:d3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:49 2025 by rpki-client