Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa
File:                     de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa (raw, json)
Hash identifier:          Z2JbJ7IgZoJ9KfCeV15318xKT9lceQ+pQeXtOdfAjrk=
Subject key identifier:   DA:57:10:F6:A1:91:E0:56:7D:67:C2:0F:89:D7:47:93:F9:CE:35:6F
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848E59BD97DEDB05863494A1D60
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     36619
IP address blocks:        2620:74:2a::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:d9:7d:ed:b0:58:63:49:4a:1d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=b7f09ded-25ae-4002-b456-daed71336b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8d:dd:be:93:96:99:4c:56:a0:44:16:dd:ca:
                    f2:1f:68:08:f3:2f:49:0f:2d:d4:48:2a:96:5b:62:
                    f8:33:ae:13:05:41:99:85:bc:0a:a5:70:18:6c:91:
                    24:2a:9d:09:3d:88:7d:00:85:74:c9:58:02:01:24:
                    24:09:91:51:62:b2:90:62:85:bd:56:f0:3d:20:02:
                    45:41:e8:fd:aa:a6:b6:42:47:3e:33:bf:93:08:c2:
                    1e:d7:5d:d6:d8:89:25:62:32:db:0c:c3:67:0d:44:
                    dd:05:d7:d0:17:3d:8d:d0:2d:cc:f6:be:f0:4c:c8:
                    3a:24:1b:94:ba:f5:7a:a2:c2:31:d2:8c:57:f8:46:
                    00:12:ff:97:70:fe:cb:e6:72:a8:38:96:74:6f:1f:
                    04:34:c9:d6:35:a8:af:09:a5:78:c2:67:e7:e9:19:
                    2e:ff:f4:96:ad:a2:fb:9f:fd:06:bf:7f:74:77:c6:
                    de:1a:64:ff:c4:17:4a:58:17:2c:82:9c:6e:a5:7a:
                    e2:1b:bb:ba:cb:c9:70:4f:2f:97:0f:8f:1f:5d:8f:
                    74:41:12:04:ee:a5:22:70:bb:29:df:15:84:ca:62:
                    f6:6f:42:d6:8e:c4:ef:1c:88:a6:91:95:38:9d:58:
                    b1:e9:0c:a6:7e:03:ee:69:17:a4:49:b3:01:d7:69:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:57:10:F6:A1:91:E0:56:7D:67:C2:0F:89:D7:47:93:F9:CE:35:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de032a30-60e9-32f5-a47f-e93fe1f3af5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2a:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:8f:4c:f3:0a:15:3b:f0:19:eb:7c:e2:c3:7c:1b:e2:ba:88:
         74:8d:1b:72:aa:b4:8b:f1:b0:cf:a3:d6:2b:10:f5:4c:74:98:
         5e:91:ad:d7:7c:11:46:dd:04:e5:94:84:78:8a:87:9c:65:52:
         3a:71:62:47:3e:99:c1:41:0f:0c:99:1f:7a:3a:e9:70:a7:b6:
         66:1c:f0:91:30:d5:dc:98:df:4d:62:bc:1c:36:56:a3:fb:18:
         4b:9d:ac:51:7d:66:f9:32:dc:ea:73:c4:32:01:b8:44:14:61:
         68:76:d1:8b:e5:fb:a9:ee:06:2f:0d:5e:19:f6:3b:20:d4:51:
         bf:53:80:79:55:97:4f:74:66:66:61:07:ec:cf:d5:f5:d4:d0:
         96:06:68:2c:60:cf:72:f1:e5:d0:67:1b:14:62:93:58:ab:85:
         ba:72:43:1a:72:76:11:89:f7:01:7b:ab:d9:4d:90:39:9a:04:
         d4:3c:2d:a4:49:46:5b:7a:44:e1:a5:e0:20:60:c5:1c:e8:74:
         9f:aa:4e:e2:00:b6:6d:f7:4e:3e:2e:32:18:74:bd:64:5d:46:
         88:13:9c:be:30:35:ee:61:89:a5:a5:4c:97:4b:34:e4:ca:d6:
         01:6a:18:e6:9a:51:32:35:87:ff:f0:b6:b1:19:12:54:54:e1:
         46:65:9b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----