Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec178fbb-4878-3918-9a00-be6b1fabacfe.roa
File:                     ec178fbb-4878-3918-9a00-be6b1fabacfe.roa (raw, json)
Hash identifier:          6hIOoO2k8UEvKkDl05NI+rz85qUmwQsNa1MWD43gg8k=
Subject key identifier:   E3:22:46:9C:FB:4C:45:60:B2:E9:21:A7:A9:2D:7E:CF:BA:3D:67:70
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285848D21114EB3A5F9037166B5180
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec178fbb-4878-3918-9a00-be6b1fabacfe.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     396555
IP address blocks:        2620:74:2b::31/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:14:eb:3a:5f:90:37:16:6b:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=22b741cc-9046-46e2-8bf5-47584edfed20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:27:4b:9d:8f:7e:ea:57:59:d9:9d:66:d8:88:
                    47:c5:9d:86:8c:7e:35:30:e0:12:45:02:12:b8:97:
                    f7:c3:d1:a3:17:f3:46:f4:13:15:5c:06:fb:19:0a:
                    f8:28:32:8f:b2:cc:06:30:25:92:fd:a9:ff:02:90:
                    03:7e:28:30:5a:4e:ed:a4:53:1d:d4:75:e3:32:df:
                    ef:b6:9f:bc:12:e9:ad:c0:93:88:ef:7f:be:ce:12:
                    79:c7:0a:6e:0a:97:d0:4c:b0:dc:24:70:02:59:30:
                    11:f4:f5:23:b8:96:c0:ec:ef:b6:00:fc:95:17:c1:
                    a8:c2:6e:75:b7:0e:95:cb:0a:92:aa:19:03:13:84:
                    26:bf:95:cd:71:eb:71:98:bd:a3:13:cb:ba:0f:0c:
                    d4:d6:f4:ff:bd:cc:d1:9d:61:87:36:9f:6a:70:fa:
                    f9:df:dd:4d:ca:0b:f0:9f:bd:22:e0:ab:8d:84:33:
                    f6:ee:6b:82:0a:56:ba:d7:66:a4:ed:6f:a7:a5:df:
                    4d:fd:bf:a9:92:ad:6c:80:8c:41:46:1e:f1:9d:aa:
                    c1:a5:ae:53:c7:ba:eb:fa:b8:14:4e:be:09:aa:ba:
                    d0:3c:12:3d:4e:7d:31:63:e4:95:ac:7e:41:bc:9c:
                    ec:a7:37:22:44:82:07:87:db:ca:dd:7d:70:54:64:
                    99:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:22:46:9C:FB:4C:45:60:B2:E9:21:A7:A9:2D:7E:CF:BA:3D:67:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ec178fbb-4878-3918-9a00-be6b1fabacfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:2b:0:0:0:0:31/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fb:cb:d4:fd:49:f7:24:21:ef:f0:94:bb:55:9e:b3:98:62:
         68:42:ee:8f:26:73:dc:aa:d0:ee:83:4e:d0:e5:fb:4c:a0:81:
         e9:57:c6:cc:97:fd:c9:1f:11:3e:8c:a0:74:5b:33:d3:cb:06:
         e9:74:bc:9a:56:a7:b1:c5:cd:c6:ab:4d:63:da:65:35:32:30:
         bb:d7:40:8f:4b:6e:7c:65:68:3a:16:db:d0:33:0f:59:92:26:
         b3:5f:16:89:16:a2:6c:34:eb:93:28:d1:86:96:cf:b0:41:b8:
         11:03:51:fa:56:a8:04:1e:f7:b0:a9:0b:d6:dd:ea:fa:eb:f1:
         8e:e8:03:7f:8f:f6:cb:ef:7c:1d:65:c6:26:54:87:76:04:79:
         54:3c:91:48:cc:3a:a3:6a:64:fa:27:d6:16:b2:d3:9d:c3:49:
         a4:a5:0f:3e:7e:d0:89:31:2c:6d:c5:d4:88:25:d3:c8:90:da:
         a0:78:06:3b:91:32:f0:02:ce:89:e5:82:fc:7c:7c:89:04:a3:
         f8:e0:c4:da:06:13:82:5e:27:38:2f:a0:c6:ff:08:c5:3f:74:
         cc:1f:dd:ba:84:f7:0a:85:8b:cc:81:86:46:d6:0b:f7:99:6d:
         d4:b8:95:6e:f1:4f:2a:4f:77:9c:89:59:e4:77:0b:e4:ca:2a:
         08:b0:8d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:53 2025 by rpki-client