Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa
File:                     6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa (raw, json)
Hash identifier:          +nYWyPbPORhrSjTONJUXksrZApz2q8kBiPbZErfunOo=
Subject key identifier:   F4:C4:09:32:7A:68:2A:15:8C:24:F9:D3:3E:72:8C:0E:B8:39:24:7D
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD6B73C50ED9C41AEF290
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396549
IP address blocks:        2620:74:2a::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d6:b7:3c:50:ed:9c:41:ae:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=afca1789-954e-43c4-91b8-bb7a54b00da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:46:3f:b7:d3:0b:17:1a:67:7b:3b:1d:ca:
                    99:10:43:b0:b5:1a:0d:fb:9f:e0:4e:20:c7:b6:7c:
                    95:0e:30:d4:26:6c:08:37:48:3b:eb:fc:c7:a9:a6:
                    3b:1a:1a:0e:18:17:ec:e7:75:4b:4a:72:73:a6:9c:
                    02:ae:57:23:ed:25:02:50:03:32:b9:77:b9:ea:d2:
                    78:1d:73:f4:6e:c0:4e:43:c2:9c:f2:33:ae:64:38:
                    62:14:60:80:67:6b:25:56:cf:c4:6b:d6:fa:38:f8:
                    64:27:89:fc:91:e0:9e:96:9b:6b:6a:15:88:4b:14:
                    e2:0d:c1:0a:de:bb:45:3d:a5:fb:bc:26:22:34:f6:
                    2e:2f:5c:58:c6:3f:17:b5:e7:00:56:86:71:65:1d:
                    fc:8e:2f:70:1e:8b:da:db:97:c6:e8:c4:0a:e9:4c:
                    3e:3d:c4:5b:db:68:53:01:16:34:52:4c:f9:5e:10:
                    1c:aa:88:a8:ec:cc:15:c6:3f:e4:81:cc:0f:f4:19:
                    a8:84:97:38:0e:50:71:cd:d3:69:92:cb:79:e7:ec:
                    d9:cf:77:b7:fc:e2:ed:2a:95:00:86:36:01:66:9c:
                    04:b3:11:34:37:87:5f:08:c6:a5:9e:84:7f:a3:bb:
                    aa:f1:dd:7e:5b:bb:9e:6b:af:57:aa:69:77:a7:29:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C4:09:32:7A:68:2A:15:8C:24:F9:D3:3E:72:8C:0E:B8:39:24:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/6a97e4c5-4ce4-3184-9513-ca37e0a6f719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:26:a4:6e:2a:87:29:72:98:ef:6a:3f:48:85:6f:d3:98:a5:
         78:47:77:f9:b5:49:f5:af:d4:44:1a:02:c1:2e:1d:56:01:1b:
         9b:84:0d:52:e7:7d:52:43:59:cb:2a:c2:f4:56:78:dc:e4:93:
         59:16:78:b5:f7:eb:0f:10:d5:3e:47:c3:0c:d2:99:14:cf:d1:
         04:06:9c:bd:0d:10:53:66:68:b3:c3:33:84:62:53:da:72:7f:
         6b:2d:cd:6a:0e:c2:5a:fb:43:03:0b:b2:73:40:d8:ad:ab:08:
         2a:39:0c:ae:bc:4e:a4:bb:31:b5:bb:11:f7:1b:dd:91:12:e7:
         ab:d9:35:ef:49:a3:40:18:ce:fb:4e:42:3e:20:3f:8a:aa:85:
         15:d2:a6:cd:3a:2b:08:92:92:fb:42:47:ee:a2:79:d7:ad:6f:
         ef:57:de:82:c5:3a:9c:29:ab:ff:ef:b3:0a:2e:97:0a:da:b7:
         fd:49:3e:39:c1:07:6d:dd:ea:d9:f0:16:46:4a:23:2f:23:13:
         78:a1:8c:19:26:20:26:1a:5b:1e:3a:42:43:b7:0d:83:57:b0:
         ea:23:6b:fd:e0:ec:85:e8:85:99:82:ad:09:2f:ba:32:5a:11:
         c4:b9:02:83:c5:fc:e9:9d:bc:34:68:91:57:64:e4:e7:69:30:
         bf:1c:04:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:13:46 2025 by rpki-client