Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82483106-3a10-3535-aa57-8b70f5962145.roa
File:                     82483106-3a10-3535-aa57-8b70f5962145.roa (raw, json)
Hash identifier:          LY2auRA26NIbq92UFQ2otovo5c5Phou+h60ot2LADa0=
Subject key identifier:   11:A2:E1:B0:57:71:EF:13:3E:B5:76:5D:D5:BE:B1:29:7C:7B:79:6B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D2110CD358D0D0D801E00F00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82483106-3a10-3535-aa57-8b70f5962145.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     36624
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:0c:d3:58:d0:d0:d8:01:e0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=a34f12a9-7797-4fa9-a454-336d7a7ba6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:49:7c:42:3d:65:f0:dd:3c:db:41:2b:d2:ae:
                    af:86:f4:e8:3b:9c:af:2c:e0:8e:d3:72:f7:97:4c:
                    ce:0d:0a:d7:02:e0:b1:35:5c:b1:04:70:f8:67:4a:
                    06:ad:17:3a:f4:ea:8c:8f:d4:ae:77:3f:25:42:f9:
                    48:0e:a6:08:46:0f:39:c4:fc:32:5a:c3:5a:aa:bd:
                    a8:fd:d8:10:ea:50:8a:91:82:b1:1c:f4:0c:34:3b:
                    6f:a6:b0:7d:0b:1c:2a:b6:87:63:b2:39:56:d3:5e:
                    e5:48:35:e2:17:8f:5e:fa:14:9b:3e:3c:6b:2e:6c:
                    8b:87:1d:b9:1c:bc:9d:4e:70:5d:9a:91:f5:a6:47:
                    5d:56:14:55:b2:ab:03:7a:e6:3e:74:28:95:c3:6a:
                    39:6c:69:74:9a:6b:a2:fd:61:95:47:37:e1:f4:8d:
                    91:4f:c6:c4:b7:a7:f0:fd:eb:56:76:fb:1f:69:44:
                    63:43:e7:26:5d:46:bf:ce:3c:ff:4b:0f:83:11:7d:
                    9c:74:b7:46:db:75:e7:16:0f:fe:04:2c:32:6a:5a:
                    41:6f:29:04:b1:42:1b:f9:65:fc:36:66:b0:1c:19:
                    26:4d:0e:4a:71:c8:56:84:8f:94:d6:9e:35:86:f3:
                    6b:d0:2e:15:68:76:20:1a:33:4d:9f:78:4f:ee:48:
                    d3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A2:E1:B0:57:71:EF:13:3E:B5:76:5D:D5:BE:B1:29:7C:7B:79:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/82483106-3a10-3535-aa57-8b70f5962145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d0:47:5a:93:ff:59:fa:51:97:37:9e:62:88:bb:29:67:c9:
         cc:ed:20:40:8a:7d:06:01:10:54:85:00:19:5f:19:85:9b:b2:
         74:23:fd:3f:9b:70:32:25:1d:7f:6a:d5:a4:02:fb:6b:3e:85:
         1d:3e:25:c4:09:bf:0c:17:8a:2a:c8:fb:bc:77:18:0c:84:fb:
         12:e9:6a:16:93:97:4d:4b:cc:c2:c1:7a:74:cf:68:90:ff:88:
         2d:23:44:d3:b4:56:12:94:a3:55:d7:b5:72:09:3b:ed:26:0c:
         86:a5:26:de:87:38:dc:30:0b:48:c0:13:a2:d8:ad:12:50:bc:
         6f:1f:50:b1:a8:be:34:62:5b:9a:93:12:92:08:13:93:65:59:
         ee:21:96:b7:84:68:75:65:a3:77:00:45:d3:b6:62:50:b9:46:
         04:b8:4c:fb:cc:0c:2a:d0:4c:2a:8f:49:3c:1c:ce:2d:d0:6c:
         04:0f:7a:7b:0d:92:c6:c1:15:a7:9a:81:d3:80:89:84:91:f9:
         29:59:8c:1f:c6:e0:a5:2c:fe:1a:19:8c:53:be:2a:34:44:0f:
         6d:3d:a0:fd:e7:cf:6a:8e:b8:53:bc:bd:0f:da:76:03:cb:7b:
         ed:6d:02:0b:37:31:ee:f3:3c:87:f3:b9:78:2c:c5:e9:d5:68:
         6c:d8:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:42 2025 by rpki-client