Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a2ea5bb-f550-36d2-9b73-1d57db923cb5.roa
File:                     6a2ea5bb-f550-36d2-9b73-1d57db923cb5.roa (raw, json)
Hash identifier:          I3ImkUBRA3qgl+tyw+ifG6FHyxNt7TnM0cWu0mozk5A=
Subject key identifier:   49:3A:9D:F5:7C:B7:CC:6F:B8:B0:F8:29:FC:DB:59:74:6C:CE:67:FC
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848F926893C8D8730CCF604DF00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a2ea5bb-f550-36d2-9b73-1d57db923cb5.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     397202
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:89:3c:8d:87:30:cc:f6:04:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f5e4c645-8fa7-41f3-9b1a-c6aa3d99aca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:18:e8:7c:68:49:5b:18:23:ec:a4:25:0a:
                    ac:15:e0:75:1a:76:ac:76:48:ca:74:1e:a2:3b:18:
                    42:e3:45:df:cd:95:b7:3f:97:1a:c9:48:dd:73:f3:
                    ea:82:21:10:7f:29:35:f3:44:67:b3:2b:dc:78:37:
                    3d:50:28:6e:ea:fd:c2:f1:4c:c3:f1:ca:61:7c:be:
                    6d:44:44:9d:20:bb:8c:a2:ae:e9:29:f8:c5:f5:c1:
                    8c:21:a3:4f:f2:4c:ce:bc:79:b3:87:86:59:40:6c:
                    b0:14:e2:c2:a4:ae:33:bc:05:f7:a7:c8:70:f0:cf:
                    d2:51:20:40:7c:4f:f8:96:0e:53:fd:c2:fc:78:05:
                    41:b2:cd:9a:44:54:1b:d7:cb:76:8f:1b:70:a2:a2:
                    3f:53:5c:a3:7f:b3:4e:5c:eb:41:32:89:b7:77:be:
                    01:88:d7:8b:92:39:b8:cd:b6:6a:23:a2:56:e3:df:
                    fe:4c:7a:95:dd:10:fa:b0:08:f9:21:7e:7d:f1:b3:
                    30:b3:86:5d:3a:5d:86:41:07:74:2e:d5:54:7d:e0:
                    f5:d4:df:88:20:d9:e7:4d:6f:51:89:63:38:5b:0e:
                    2c:71:f9:b2:d9:59:04:9d:14:de:f8:27:ab:09:1d:
                    e8:b2:25:d9:db:d8:33:ea:26:09:34:10:eb:06:ed:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:9D:F5:7C:B7:CC:6F:B8:B0:F8:29:FC:DB:59:74:6C:CE:67:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a2ea5bb-f550-36d2-9b73-1d57db923cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:93:e1:41:d4:cd:ee:2a:f0:de:87:1a:ff:55:de:74:5d:
         0a:a3:1b:fc:08:e8:9e:5f:f8:e5:b1:f4:c2:de:df:c2:0b:df:
         91:8d:42:56:9f:c1:70:31:b8:b5:96:a7:c3:83:3e:a5:dc:ab:
         56:55:cb:da:12:17:c8:f8:3b:32:76:62:e9:73:7d:a9:c0:3f:
         9f:31:fc:57:74:50:1a:af:4b:b8:c0:11:ec:23:e2:fd:73:82:
         77:52:88:ca:19:b6:18:0e:33:97:68:c5:80:09:04:af:16:e4:
         a2:ec:aa:92:a0:bb:59:dd:93:88:c2:86:99:9c:bc:ad:15:20:
         d6:72:0e:c3:e3:0d:aa:45:fd:07:96:e4:fc:94:2c:88:d9:be:
         2d:cb:89:68:cd:b6:b5:7d:6d:8d:45:ac:6d:94:62:c1:77:70:
         ba:7a:9a:d8:db:2b:84:b5:41:82:74:96:e3:e7:58:32:d7:37:
         38:e8:40:70:8b:00:2b:64:07:70:fe:e2:8d:4b:66:54:eb:92:
         97:6d:47:b2:4a:f4:3e:9c:42:fd:5e:fc:d2:f5:d5:33:28:d9:
         b3:c6:d8:b0:9c:b8:2f:3c:4e:d2:f2:98:d6:e5:19:70:99:34:
         d9:60:eb:b5:d3:e5:19:77:1a:95:2f:9b:7d:9a:a3:a6:3e:08:
         2b:02:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:19 2025 by rpki-client