Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa
File:                     aaef397a-8d41-3de4-a846-0161071f4f81.roa (raw, json)
Hash identifier:          q2YyaG2pRduZvGLkafsEbZ4Ww4PC1f0clAgPwLL4DYo=
Subject key identifier:   AD:88:B7:48:F9:93:AF:8E:BB:03:0C:98:67:88:19:A1:77:81:23:B9
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D2110A799232ECCA6B5DFA10
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     397195
IP address blocks:        2620:74:2b::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:0a:79:92:32:ec:ca:6b:5d:fa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=6a9c4759-ca37-4b21-94d0-a5e89aa553c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:05:c7:bf:8b:66:cb:1d:9f:47:bf:77:22:
                    17:c1:19:eb:1c:21:08:91:7c:1f:9c:97:3e:eb:43:
                    84:15:16:78:54:57:09:1c:2c:b1:22:25:62:7b:ea:
                    35:36:db:52:6a:b6:62:bd:7d:d7:56:99:f4:1d:76:
                    7f:2c:f3:4a:20:e9:b9:76:a6:c7:03:99:87:f3:79:
                    28:d6:3e:35:ba:e1:04:66:ad:68:26:81:82:35:4d:
                    b5:83:f5:cc:f5:58:97:db:6a:76:e2:93:86:76:4c:
                    63:6d:90:72:25:9b:f0:a4:93:8a:1d:37:6b:84:22:
                    3c:5a:4d:80:4c:e7:89:99:75:3e:14:b7:c9:9f:53:
                    a6:64:cd:f7:8a:e5:f0:07:33:d7:d5:a1:a1:a9:53:
                    11:ec:c8:c6:77:ae:2e:59:d6:f1:58:c5:83:fd:75:
                    23:0c:2b:f8:df:04:5c:d8:87:2b:78:f7:0e:76:da:
                    ac:41:79:d7:01:7d:07:84:73:d1:3e:2d:ba:d1:10:
                    a3:c0:bc:66:9d:5f:09:51:99:54:0f:73:5b:64:f3:
                    92:13:be:55:d0:0f:1c:de:68:99:b3:cb:21:ec:ed:
                    86:4a:09:f3:c2:ef:54:d1:15:8e:f2:7d:9d:71:15:
                    76:3a:b5:22:03:59:68:51:aa:e8:2e:f8:8c:c1:f5:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:88:B7:48:F9:93:AF:8E:BB:03:0C:98:67:88:19:A1:77:81:23:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aaef397a-8d41-3de4-a846-0161071f4f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1c:57:20:4e:1b:37:a4:29:ba:15:5a:c8:63:9d:7f:79:62:
         a0:19:9a:db:19:b8:c3:23:3e:ec:b5:6f:94:fe:24:3a:53:eb:
         62:1f:f5:73:9f:76:e8:79:ed:57:4d:ce:39:b0:83:30:b5:aa:
         60:ee:a3:e4:ac:c7:71:10:d0:b3:4b:4f:14:96:19:8e:08:89:
         f1:24:4d:b1:8c:f6:53:6a:53:e5:14:91:93:59:41:1b:57:c3:
         8b:12:21:54:5f:5e:ed:1f:15:ac:7e:b7:cb:f9:d2:1e:ee:87:
         d1:70:6c:16:ac:25:7e:8c:d0:e8:29:44:19:38:83:4e:55:2b:
         26:f1:e6:11:0b:ac:06:e5:36:d0:b4:f1:86:6a:13:37:8c:76:
         20:04:22:b7:da:f7:19:64:de:c7:74:d1:b1:1b:93:e3:f5:ec:
         ff:b7:40:1e:53:f3:f6:9a:58:c5:3c:12:32:37:97:6e:81:ba:
         77:d7:93:41:eb:e3:e3:93:2c:d9:2b:6a:40:e3:d7:ff:79:52:
         7c:ea:cb:2b:9a:18:6a:db:06:d8:95:f2:0d:de:f9:69:9d:02:
         dc:b2:de:24:e0:94:88:2f:3f:6b:4f:4a:1b:c0:7d:44:82:a0:
         4b:53:02:c8:e6:82:89:47:40:56:95:2b:3c:bf:00:f8:83:fe:
         da:a7:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:34 2025 by rpki-client