Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa
File:                     90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa (raw, json)
Hash identifier:          omUgqPQ4MyapXZ3EgiwJ9iKanLusRyCxCXYpjw6f/nU=
Subject key identifier:   B6:E2:FE:82:EC:4B:EB:2F:4F:F6:B3:99:68:02:E0:13:69:30:7E:3C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD5273222A4EAF3EDA500
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396826
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d5:27:32:22:a4:ea:f3:ed:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=e425f929-e140-41d3-907b-5e4637f753ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:65:d4:1e:80:90:05:69:9a:5c:fc:de:3e:
                    05:fb:7b:2b:34:92:8d:fe:c7:bd:e5:23:5f:8f:24:
                    2e:2a:54:af:9a:18:74:a5:b8:92:a2:30:ad:cd:ef:
                    93:e8:12:ac:ee:44:3e:d3:57:d2:f5:84:6a:7c:db:
                    e9:ab:ac:1d:9e:5e:5e:cb:3e:15:9c:f8:ef:ff:11:
                    c1:c6:03:6f:f0:b5:ff:e9:53:cd:7a:ee:b9:d5:17:
                    8a:96:9b:de:45:07:b0:76:d7:a7:02:fa:c4:36:4b:
                    31:3b:63:ea:34:ab:98:80:8a:ab:43:9b:2a:f3:10:
                    1a:32:cf:71:82:49:37:8e:e4:5b:32:aa:e7:33:9b:
                    34:46:50:77:f9:63:1f:95:1b:6a:90:26:c8:70:6c:
                    ed:31:6f:29:ba:30:bb:d6:4a:71:06:52:98:90:8f:
                    f2:8d:6b:cc:7b:83:a6:72:63:70:bf:4d:84:3b:d6:
                    a5:61:a5:c9:1e:4b:51:1b:45:86:2d:96:ce:05:dd:
                    94:24:da:dd:04:0d:55:4b:e7:b8:55:02:56:85:e2:
                    31:41:ee:f5:e8:46:a3:1e:7d:57:2b:a7:66:38:fb:
                    0e:17:17:34:08:fa:5c:92:28:f5:11:92:05:cc:bf:
                    c2:44:4d:22:0c:0f:a3:16:e6:9e:92:5c:e5:29:3b:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E2:FE:82:EC:4B:EB:2F:4F:F6:B3:99:68:02:E0:13:69:30:7E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/90ba2b4a-1d63-3d21-9d0d-7ca65dcad9d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e9:f2:48:03:52:c1:d9:37:bc:63:d8:20:89:b4:d5:b0:3f:
         f8:59:4f:b9:c3:83:40:fd:a3:ac:9a:a3:ba:fa:a1:64:ae:9f:
         87:86:22:a0:3f:9e:60:a6:ec:bf:4c:54:94:eb:51:3b:7a:16:
         8e:bb:1b:6e:b5:a2:6d:95:58:5c:8b:01:bd:a1:f4:49:6b:24:
         dd:92:47:5b:4c:04:c1:00:82:dd:b8:f9:db:f1:ec:dc:d3:36:
         c3:9a:31:80:f1:a0:d3:24:77:fb:b8:8b:91:97:70:86:e5:ed:
         4a:ff:e2:78:57:22:9d:04:ed:89:a8:f7:8f:5d:26:84:60:5a:
         0e:df:82:b2:f8:07:9a:e3:48:a1:7f:29:a2:34:cb:8c:ff:fc:
         20:f0:9e:cc:ae:71:dd:51:cc:aa:29:86:e2:50:09:1a:1b:2b:
         6b:7f:de:6c:86:56:f6:88:cf:c2:b8:6c:69:c5:30:fe:7a:0b:
         da:06:ff:0d:23:35:c0:1d:89:27:67:13:c7:97:53:f8:c3:ce:
         26:96:b9:de:d0:c2:92:bd:5b:e4:c2:36:e1:c6:21:77:63:48:
         48:49:fb:16:d6:06:51:a3:2d:3a:a7:d9:bf:c7:2c:aa:36:17:
         03:9e:94:09:7b:a4:ac:77:de:40:95:b9:46:bc:ac:54:c9:30:
         ff:cb:96:56
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjlm9UnMiKk6vPtpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZTQyNWY5MjktZTE0MC00MWQzLTkwN2ItNWU0NjM3Zjc1M2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWBl1B6AkAVpmlz83j4F+3srNJKN/se95SNf
jyQuKlSvmhh0pbiSojCtze+T6BKs7kQ+01fS9YRqfNvpq6wdnl5eyz4VnPjv/xHB
xgNv8LX/6VPNeu651ReKlpveRQewdtenAvrENksxO2PqNKuYgIqrQ5sq8xAaMs9x
gkk3juRbMqrnM5s0RlB3+WMflRtqkCbIcGztMW8pujC71kpxBlKYkI/yjWvMe4Om
cmNwv02EO9alYaXJHktRG0WGLZbOBd2UJNrdBA1VS+e4VQJWheIxQe716EajHn1X
K6dmOPsOFxc0CPpckij1EZIFzL/CRE0iDA+jFuaeklzlKTuV/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLbi/oLsS+svT/azmWgC4BNpMH48MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvOTBiYTJiNGEtMWQ2My0z
ZDIxLTlkMGQtN2NhNjVkY2FkOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq
AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCO6fJIA1LB2Te8Y9ggibTVsD/4WU+5w4NA/aOs
mqO6+qFkrp+HhiKgP55gpuy/TFSU61E7ehaOuxtutaJtlVhciwG9ofRJayTdkkdb
TATBAILduPnb8ezc0zbDmjGA8aDTJHf7uIuRl3CG5e1K/+J4VyKdBO2JqPePXSaE
YFoO34Ky+Aea40ihfymiNMuM//wg8J7MrnHdUcyqKYbiUAkaGytrf95shlb2iM/C
uGxpxTD+egvaBv8NIzXAHYknZxPHl1P4w84mlrne0MKSvVvkwjbhxiF3Y0hISfsW
1gZRoy06p9m/xyyqNhcDnpQJe6Ssd95AlblGvKxUyTD/y5ZW
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:51 2025 by rpki-client