Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa
File:                     e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa (raw, json)
Hash identifier:          yiwJI6sE6Q7VWk01Gso/KoanrcEF7krvvJr1n/cvoBo=
Subject key identifier:   93:A0:D1:84:E8:4C:0E:84:BD:24:9D:A6:9A:55:D4:41:97:A9:CD:A1
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848F9268C1B1FE94D9D28E4A800
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     36627
IP address blocks:        2620:74:21::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:8c:1b:1f:e9:4d:9d:28:e4:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=cb8507a0-4ec6-45e0-b4ef-1e86d058f3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:20:05:0f:08:40:83:a1:a4:46:21:21:3f:ac:
                    2a:15:82:36:43:e6:ba:90:d9:eb:df:46:22:d0:99:
                    05:47:18:00:a8:59:33:ee:63:91:e8:9c:e4:6b:60:
                    39:3b:f3:2c:3a:5b:3a:c9:47:6d:b0:80:13:8e:64:
                    83:c1:77:cf:db:03:52:38:f1:71:b8:0a:b8:80:7e:
                    3a:64:48:68:0a:a5:75:8d:41:a5:73:92:b1:df:b9:
                    36:8e:aa:53:b7:ef:b6:8a:55:74:55:e0:28:4f:74:
                    b0:b6:f5:e1:5a:70:cf:4a:3c:3c:39:68:a1:03:fe:
                    a6:e7:ce:34:1f:4c:08:bf:74:f8:0c:df:c2:2f:62:
                    3c:73:c8:64:d2:e8:96:0d:9d:29:24:f0:51:dd:25:
                    eb:b9:c3:6c:18:49:d3:22:03:47:40:d6:b1:d2:d6:
                    c8:b0:3c:22:16:08:b2:04:3b:4e:a9:6f:d3:7f:68:
                    b1:10:29:69:4e:eb:46:b6:ed:14:0a:21:8b:2a:de:
                    8d:56:ba:84:91:73:6d:1e:ba:30:3e:22:13:ef:bb:
                    73:9a:ea:3d:38:4b:ae:d4:14:9d:7e:20:ac:2b:87:
                    f7:0e:17:35:be:28:cb:2f:61:25:dd:df:20:83:7e:
                    be:dd:0a:1f:3d:d8:64:83:4c:4d:8f:6f:5d:3c:50:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A0:D1:84:E8:4C:0E:84:BD:24:9D:A6:9A:55:D4:41:97:A9:CD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e43ef988-8eaf-303f-8f5b-c762e2f12e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:21:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:a6:a0:13:b1:8a:6b:1b:c5:cf:48:db:1f:f8:42:fb:4e:
         16:5a:aa:8f:65:1a:27:21:d5:cf:ce:41:1d:9d:0d:5e:72:0b:
         47:e0:8f:48:fb:b2:80:8f:1b:bb:5e:6f:43:f9:62:36:d4:56:
         50:ea:07:57:09:f6:48:af:55:0c:c7:23:0c:7c:bd:92:a9:46:
         42:c4:3e:f0:b5:ff:e4:ba:e4:2b:1f:61:14:c4:22:01:35:e2:
         5a:86:b7:a3:1c:7a:ae:40:04:29:4d:d0:48:52:1b:a0:21:54:
         0f:49:c0:86:4b:cc:14:2f:24:1e:41:72:c9:9e:1c:10:7a:54:
         f2:d8:bc:46:7a:c3:df:34:8d:59:b7:9b:c2:6f:3e:08:da:c6:
         25:6b:f3:84:d1:8e:78:86:7a:5c:1b:bd:5e:e5:9b:00:f9:f3:
         79:a5:a3:ca:27:65:cd:32:b0:bf:c0:a9:e4:b5:ef:28:66:55:
         5d:49:a1:65:e8:24:7d:14:7d:20:3d:6f:4d:42:da:7f:d3:a8:
         8d:48:4d:72:da:b2:36:91:ac:6a:75:fc:f7:7b:e1:97:82:2b:
         db:db:9a:db:85:b9:9c:1c:e0:94:7f:dd:28:d6:32:eb:5a:43:
         99:64:ad:8e:3a:da:66:56:c2:8b:1e:61:c1:cd:99:a8:cf:4a:
         5a:2e:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----