Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3346c64-e227-3bb8-b4c1-44875adb34d6.roa
File:                     b3346c64-e227-3bb8-b4c1-44875adb34d6.roa (raw, json)
Hash identifier:          Gv15XxVnkwGAvlnePgTUFgb5cpTSZZGgjJLoEtQ+M+U=
Subject key identifier:   40:EB:66:A0:5F:A9:DC:DA:4F:B3:20:08:E0:3C:76:6C:59:0E:DA:3E
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F432858491941984221C43B3D3848F700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3346c64-e227-3bb8-b4c1-44875adb34d6.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     36628
IP address blocks:        2620:74:20::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:98:42:21:c4:3b:3d:38:48:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=bf2e8c5b-a60f-498c-b2d2-b6269fe497bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:04:5a:78:e8:64:6c:13:b6:80:34:48:97:61:
                    77:99:7b:60:af:f1:bb:89:b2:96:bc:48:a9:84:ae:
                    e7:a6:f8:1b:d1:a4:f3:ba:37:fe:f2:39:73:5e:f1:
                    fb:f6:f9:91:2d:5b:de:9d:52:fc:f2:24:a0:d4:e8:
                    c7:e0:f9:5e:bd:84:0a:c5:9e:e2:a7:37:2e:36:31:
                    2d:2e:42:3c:a9:6f:2d:18:c8:68:4e:47:f1:bc:a7:
                    ca:9a:aa:c8:12:87:ce:4e:09:83:39:5d:02:81:62:
                    2d:4f:eb:38:f5:de:e9:7b:b6:2d:5e:24:31:9d:64:
                    80:41:43:7d:e3:55:74:d9:06:b5:5f:6d:f8:e6:94:
                    98:97:49:c3:ec:8e:05:23:1c:49:e8:aa:37:d4:76:
                    2b:41:dd:3a:c6:bb:8c:91:a8:18:70:86:22:4b:a4:
                    8d:b8:04:8e:99:7a:fd:7d:70:57:b0:14:a6:85:b0:
                    1a:c0:d2:e8:f3:2c:d4:11:33:76:03:32:cc:10:01:
                    dc:30:4c:2d:02:5d:52:52:11:36:2e:87:93:de:6a:
                    6a:6f:0e:df:87:8a:db:0c:33:ee:09:6d:25:6a:3a:
                    64:89:0e:79:ef:58:24:fb:2d:ad:a0:aa:f9:7c:45:
                    60:27:a4:cc:12:5d:61:d1:d3:a7:50:33:16:d5:d1:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:EB:66:A0:5F:A9:DC:DA:4F:B3:20:08:E0:3C:76:6C:59:0E:DA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3346c64-e227-3bb8-b4c1-44875adb34d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:20:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:c2:1f:33:e2:11:82:c0:7c:c5:43:20:4f:02:e1:ae:7d:
         d8:a8:a1:f4:9e:9c:c0:7c:a8:29:4e:86:94:60:92:b3:e6:a7:
         23:58:ab:5a:7c:b9:56:a7:e5:c8:27:74:09:c8:8a:9a:1e:e6:
         37:e8:68:e8:fb:b6:dd:15:b3:d6:68:8b:50:ee:8a:ce:80:fe:
         8d:75:4d:32:63:de:3b:6f:17:88:cc:99:58:24:2d:27:92:b4:
         66:e2:fc:74:b6:be:70:f9:78:8e:86:70:7b:c8:3a:58:b4:b4:
         0e:e7:07:5d:4d:32:c7:44:5d:7b:e7:a7:d6:d8:b1:21:db:c1:
         86:3a:f6:d3:05:53:2d:e9:71:c6:71:3c:1c:1e:d7:7e:57:9e:
         d8:15:45:00:d4:56:77:10:06:04:a3:ad:14:b1:30:6e:21:2f:
         5a:1c:9a:cc:5c:77:f7:a8:79:24:e9:10:a2:40:70:31:7e:5c:
         7e:7d:99:cc:73:e9:91:70:ee:7b:9e:52:69:a6:4e:34:a0:3e:
         7d:9c:d8:13:75:b5:e3:00:f5:da:84:4f:c7:0a:72:c7:a5:36:
         af:15:a1:3b:fc:c3:83:43:ff:7a:89:e6:e3:0e:2a:85:b6:dc:
         dc:ea:a3:ad:26:21:c2:ce:dd:ff:47:65:28:92:b2:78:98:67:
         eb:72:56:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:57 2025 by rpki-client