Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7a21db25-1eec-3341-a912-fe1822e45bc5.roa
File:                     7a21db25-1eec-3341-a912-fe1822e45bc5.roa (raw, json)
Hash identifier:          hds5bRSQYK1uGeIA//OEpL9QSJf2lqp/DE+T5ZNTssY=
Subject key identifier:   69:D9:6B:31:20:99:F8:D4:8E:E8:9B:2C:B2:97:11:CE:1C:B7:61:36
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858486AC5A22BC82C3DAE256E9F80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7a21db25-1eec-3341-a912-fe1822e45bc5.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     11232
IP address blocks:        2604:7a00:f800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:a2:2b:c8:2c:3d:ae:25:6e:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=e72f6ec3-534b-4a08-89d4-35dd7416274d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:4b:bb:99:09:07:a1:ce:1b:82:63:eb:3c:
                    bf:20:e9:c9:a4:61:5b:19:f4:6c:e1:71:b0:34:14:
                    3c:a6:3e:51:7e:b6:ec:f8:73:ae:7e:c1:21:48:f3:
                    26:0d:71:9c:fe:b3:31:b3:4e:f9:db:a5:ed:c0:8f:
                    1c:3c:8f:0f:de:29:12:71:1b:a9:66:1e:08:56:97:
                    91:b5:78:6c:2b:d4:0c:7d:f5:90:cd:45:a1:7a:72:
                    20:b3:55:ea:2d:0e:51:f2:cd:2b:2e:f5:90:69:e5:
                    e2:35:8f:cd:99:11:bf:63:fd:a4:1c:f2:aa:fc:80:
                    40:8e:5b:b7:f8:f2:8c:64:46:5b:39:c7:88:84:cb:
                    be:9a:f7:6e:c9:c2:79:c2:82:a2:80:34:25:6b:6e:
                    a1:8b:15:7b:96:be:a9:15:f5:72:8c:95:42:ff:0c:
                    28:ca:29:9e:f0:45:56:cc:f8:51:d7:83:97:20:0f:
                    a8:89:6a:12:d6:ec:33:f2:92:60:52:36:32:90:da:
                    c2:af:0a:2a:0c:0a:5e:8d:af:ba:de:30:13:1f:43:
                    40:48:20:33:fc:c7:fe:2a:b4:de:11:35:09:62:db:
                    98:da:a3:c7:c3:8d:a3:9f:7d:1c:bc:ec:61:7b:44:
                    ca:ad:b6:7d:84:5f:a2:1a:fb:b1:66:24:8a:ed:c5:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:6B:31:20:99:F8:D4:8E:E8:9B:2C:B2:97:11:CE:1C:B7:61:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7a21db25-1eec-3341-a912-fe1822e45bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:f800::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:d3:61:d7:2b:74:6c:0f:ad:77:29:c8:d9:d6:6f:d0:ed:
         f8:7a:81:1c:ee:82:eb:85:8c:38:9f:d8:82:17:96:d6:39:85:
         cc:90:2e:d2:ad:5c:93:04:03:18:13:d4:22:81:3b:cd:b9:5c:
         e5:ea:b1:d7:e9:9f:87:11:d3:10:a9:75:ef:a6:bf:48:16:d7:
         ae:87:31:f0:f1:db:91:1f:7d:15:06:d2:45:64:f1:b6:5a:5c:
         ba:0a:46:cb:6a:e5:00:8a:c8:98:e5:a9:13:03:e7:5c:6a:97:
         e0:9c:63:18:3b:cc:23:1e:b6:08:87:13:32:44:94:b7:61:27:
         83:80:88:2a:f1:d1:ae:57:12:e1:b0:6c:f4:e5:69:bd:50:07:
         65:34:c7:e3:b6:a0:16:5f:df:0a:be:37:dc:a2:fa:8e:99:c0:
         c6:1a:a1:7a:2d:bd:0f:ec:fb:be:97:f5:19:96:08:6a:c0:99:
         c0:68:87:b4:e4:10:93:f2:76:2a:d6:61:08:09:fd:de:17:be:
         12:2e:35:a0:3b:b4:2e:8a:6f:9d:a0:dd:1e:6c:4f:de:4f:1b:
         f3:53:f9:19:55:69:75:7f:87:cf:78:67:31:af:64:e4:16:bb:
         e9:27:17:84:d7:fa:12:17:46:02:0c:b4:e0:80:a5:33:73:fc:
         36:b4:d7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:52:45 2025 by rpki-client