Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6701dd46-e71b-384f-8c67-0107de50fa35.roa
File:                     6701dd46-e71b-384f-8c67-0107de50fa35.roa (raw, json)
Hash identifier:          3noIDzdrPa6lLzkaf9AfJeJxY7mlNcIgboGI5oUjCs8=
Subject key identifier:   10:F0:ED:7A:93:4C:80:20:B8:C6:F4:4A:86:97:FC:ED:D6:49:21:B2
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584878BB07D803F7CF669F246980
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6701dd46-e71b-384f-8c67-0107de50fa35.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.230.32.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:07:d8:03:f7:cf:66:9f:24:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=f4a6aff9-cc2a-447a-ba7e-aff7baaac0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:cf:39:49:8e:82:df:94:4e:15:e7:e7:1a:
                    13:02:be:30:dd:d3:c8:00:ea:a7:55:80:14:e0:20:
                    2d:e0:77:55:6e:27:25:37:52:d9:20:23:00:a2:76:
                    eb:2a:a0:d0:13:8d:42:ff:8e:41:9d:f3:a1:b2:50:
                    d6:5b:d7:44:f8:af:f1:21:88:74:7c:18:26:c6:fd:
                    c3:93:ef:a9:3e:6a:74:04:ac:14:52:54:c5:bc:51:
                    ff:d1:f5:47:12:e6:be:dd:04:a6:ad:38:c6:ac:eb:
                    0c:65:6b:64:00:41:8e:4e:56:c4:b8:06:20:14:2b:
                    25:7a:e9:bf:00:6f:5c:e2:a6:f2:01:e0:a5:b1:71:
                    86:fb:f7:e1:ea:a1:16:17:49:d4:a7:82:65:34:06:
                    22:e1:13:16:79:82:6e:53:77:ea:74:29:1f:90:f8:
                    ff:e1:2d:af:f6:df:75:fc:e6:2c:a4:73:dc:9b:92:
                    8d:36:ff:a7:c0:da:52:91:7f:1d:a4:a3:78:59:84:
                    57:aa:a1:6b:e4:14:85:19:fd:11:2c:3c:d2:1b:d5:
                    af:f4:42:b3:6f:1c:9f:83:f7:97:7a:22:4d:a9:41:
                    b8:54:4e:7b:01:4b:4c:91:09:ec:bf:fc:eb:cb:52:
                    32:71:ab:97:42:e5:48:b3:bd:45:2b:53:7a:c5:59:
                    f5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F0:ED:7A:93:4C:80:20:B8:C6:F4:4A:86:97:FC:ED:D6:49:21:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/6701dd46-e71b-384f-8c67-0107de50fa35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.230.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3a:cd:b7:47:d1:59:c8:73:b0:3f:08:5c:02:ce:d8:fe:24:
         c6:04:bd:dd:08:f2:01:67:1f:58:8b:49:6e:f3:23:47:42:2c:
         2c:0a:18:7f:b9:44:fb:99:f4:74:be:29:08:66:3c:56:98:a6:
         39:4d:ba:a0:f5:5d:59:b4:7d:74:18:2c:3f:71:3e:0d:18:8e:
         62:5b:1c:9f:be:69:66:f1:11:e2:6b:c9:0b:0d:44:a5:c9:6c:
         8a:9a:c0:96:84:a6:fb:8a:86:fd:b4:5a:b7:61:9d:08:e7:3e:
         56:54:60:d7:c6:ba:cc:0d:6a:be:d3:d9:bf:c6:6a:be:6a:e3:
         cd:73:2f:cd:38:07:dd:6c:d7:af:3d:73:2c:94:bd:7d:4f:0b:
         51:a9:bc:64:ba:4f:87:c9:b5:da:de:f3:76:62:f7:c2:bb:53:
         95:13:4f:6b:d7:d2:30:f9:db:ed:91:d1:07:a5:75:e9:69:8b:
         71:5a:87:14:23:c6:6e:6e:dc:a0:79:45:e6:7a:e4:cd:45:5d:
         8e:a6:a9:f6:fe:5e:ab:fe:a6:0c:64:30:a0:b7:07:84:03:28:
         2e:b8:22:74:96:32:c7:bb:e7:f8:d7:0d:92:49:b6:c4:5b:58:
         69:df:a5:74:56:a9:bb:81:ea:bd:2b:ac:96:9d:ea:81:5b:d9:
         ac:69:3c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:48 2025 by rpki-client