Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa
File:                     8e31ec23-a710-3224-8cde-ff28da3fd155.roa (raw, json)
Hash identifier:          0/F185+XDfALwRhBjrLJOneYPuoN65/4MLc5vijFasE=
Subject key identifier:   B1:79:8C:DD:F6:91:F1:8A:C0:B2:6F:6C:53:B6:C6:BE:EC:AE:EE:EA
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D211118E63C4663792AC5200
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     396543
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:11:8e:63:c4:66:37:92:ac:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=206df96b-8039-4c23-9c12-566ef0ba1b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:00:65:f9:e5:88:d9:a7:3e:06:72:6a:07:
                    9f:ff:1e:2a:e8:5c:22:a6:99:d2:4a:40:56:12:86:
                    84:91:03:32:82:0e:a1:fd:5e:7f:ce:f0:71:8f:96:
                    0a:c4:14:2d:0b:73:e2:cd:22:a4:45:21:7f:0f:be:
                    37:4f:e8:22:5c:af:54:9d:7f:46:29:4f:18:51:22:
                    45:9d:e4:32:97:39:c2:11:0e:50:f7:97:aa:4b:ee:
                    fa:74:66:57:87:6f:22:c0:2a:42:12:88:ad:a4:fb:
                    ff:11:22:21:d4:ac:30:4f:2f:24:aa:1f:fd:1a:06:
                    28:f9:09:6a:01:7c:0b:53:23:1d:e6:d2:73:49:67:
                    c3:70:0d:d2:34:a7:92:b2:1a:35:ad:bb:3f:3e:dc:
                    48:d6:4c:08:f4:0c:a9:f2:d0:ac:6b:bd:96:39:89:
                    d8:57:08:61:57:cd:52:f5:c5:17:4a:da:1d:86:a8:
                    12:91:f5:f0:4d:37:3a:a9:5d:a7:75:a5:85:2c:fb:
                    fe:b8:5b:70:25:46:74:f3:dd:5e:72:44:fd:83:14:
                    03:85:13:d9:11:3a:78:c0:86:fd:e0:1d:bd:46:11:
                    89:0a:b4:4a:f7:c3:e8:4e:20:e5:99:8a:31:2f:ef:
                    1d:f9:7b:4a:f8:1b:ad:a6:ef:32:0a:b5:00:34:4c:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:79:8C:DD:F6:91:F1:8A:C0:B2:6F:6C:53:B6:C6:BE:EC:AE:EE:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/8e31ec23-a710-3224-8cde-ff28da3fd155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7a:34:de:dd:e7:ab:6f:8e:ec:96:dc:91:27:1d:1b:bb:c5:
         ef:d3:1b:6a:5a:92:05:42:70:bb:24:20:61:8a:ee:e2:47:c3:
         a8:c8:18:77:d9:0d:86:0b:5f:85:0a:3b:9c:90:c7:e3:6a:9b:
         7d:fa:33:14:60:1e:df:12:2a:a6:5b:97:5f:4a:2a:a6:06:59:
         e1:7b:5a:2a:c1:6b:fb:d3:56:90:2d:92:db:f7:90:e6:35:49:
         55:96:e3:e0:04:46:b6:88:87:8c:49:ab:bf:64:0d:22:f6:c4:
         94:11:e8:b0:af:04:c0:d3:b4:bf:9e:fd:c3:7c:37:24:5b:24:
         37:91:b1:8b:3f:a1:d1:ce:d4:39:e8:74:1b:86:77:7e:8e:ad:
         98:ee:cd:3f:f8:b0:b3:21:f5:ad:cc:f8:e2:7f:48:f3:a3:ba:
         0a:a1:5b:3c:08:2a:1f:bb:27:95:3a:59:72:74:d8:06:42:22:
         7b:08:c3:f3:e1:c7:7e:b5:4a:9b:e3:76:c1:6a:49:94:b6:24:
         cd:a2:08:ad:04:c4:07:41:ec:e4:12:be:5e:ed:60:c3:ee:8a:
         c0:70:77:ac:23:4e:b2:c8:b8:ed:96:a8:f9:7c:9a:da:1d:da:
         85:48:5b:40:73:c9:d0:63:bf:ee:5d:91:17:b6:5e:6a:17:0b:
         45:e3:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:58 2025 by rpki-client