Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/eebeb802-211d-36f3-a799-8aacaa9626eb.roa
File:                     eebeb802-211d-36f3-a799-8aacaa9626eb.roa (raw, json)
Hash identifier:          oKuaUjkndkif+ZTudasnP72hEu0K1tFj/cwyp48J+rw=
Subject key identifier:   2A:3B:DF:1C:1A:E1:AF:D3:C3:01:E1:2C:D5:8E:82:96:DB:4D:F5:52
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584878BB07EA7300E38D1D252F00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/eebeb802-211d-36f3-a799-8aacaa9626eb.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     11232
IP address blocks:        24.230.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:07:ea:73:00:e3:8d:1d:25:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=c7ea202a-12b3-472d-8e24-4ab78efa7b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:4a:69:59:db:18:cc:19:e9:f6:22:be:bf:
                    7d:7d:aa:44:48:1b:0a:bd:d8:37:04:e5:fa:d2:53:
                    8e:77:86:50:4e:13:33:95:20:ab:b2:6c:fe:aa:64:
                    ea:60:6e:fe:5d:6d:13:f4:38:1b:03:35:bf:ef:d9:
                    e3:b8:d2:5a:65:0a:6f:d6:64:66:cf:3d:81:ec:be:
                    be:a2:2e:ec:69:cb:6e:b8:87:64:84:28:79:76:70:
                    34:58:e8:56:aa:8b:0b:74:2b:52:20:07:ed:9e:8c:
                    03:80:0a:c1:c4:6b:72:ec:b8:a4:9a:55:56:f7:d9:
                    87:f2:a6:d9:19:2b:ea:99:a5:e3:4f:d8:00:2a:05:
                    72:de:41:bf:a5:69:0f:b8:62:59:99:f6:83:c2:f4:
                    ca:ba:9e:45:b5:5f:96:27:17:b2:3c:0b:4b:27:3e:
                    5e:cd:73:5d:76:a7:fc:6c:d0:b8:84:00:92:14:04:
                    2f:c5:00:e9:33:69:1c:f7:f8:08:c5:81:7e:0b:39:
                    23:46:58:b2:a9:38:1a:4c:7d:a4:d9:9e:7d:2b:cc:
                    a0:d5:b6:95:d6:18:6d:bf:a0:08:66:e0:2c:09:38:
                    86:be:0d:2a:77:37:02:11:0c:48:bb:c3:5c:88:c1:
                    9a:7d:27:ec:e9:5e:92:cf:c7:f1:0e:84:e9:e6:5b:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3B:DF:1C:1A:E1:AF:D3:C3:01:E1:2C:D5:8E:82:96:DB:4D:F5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/eebeb802-211d-36f3-a799-8aacaa9626eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.230.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:bf:6c:96:3f:61:97:f4:26:13:d9:df:96:17:7f:73:29:
         83:51:0c:24:43:24:31:45:a6:5b:90:bd:8e:ee:f9:5b:4c:3b:
         b4:20:75:ae:84:af:1e:4f:4d:2d:aa:d2:19:fe:d7:d3:18:08:
         a2:88:35:3c:4f:fc:9e:67:a7:62:1c:db:d5:52:b7:0d:71:21:
         e2:1c:92:09:63:91:bb:2f:d3:ea:d1:39:02:82:a3:e2:5f:e6:
         a9:fb:63:f1:7c:f8:e3:f7:98:c3:00:b3:f5:ee:9f:e6:7f:88:
         97:c6:c4:63:7f:62:be:54:be:cb:34:2a:8f:77:37:5a:4c:3a:
         86:38:93:05:27:04:9c:d1:f7:05:9d:06:02:09:31:5e:34:9f:
         90:bf:ad:66:f9:cd:18:92:a5:9a:e2:d7:21:a8:22:e8:68:21:
         fd:c1:79:39:0e:9d:cf:2a:95:e3:17:fd:e4:20:f7:42:f8:a9:
         cb:3a:68:4d:2c:d5:c1:07:64:dd:c5:62:d7:05:80:af:21:76:
         70:07:62:8c:ff:e1:cd:72:62:5a:44:0e:31:8d:43:c2:91:15:
         a9:18:c2:03:38:11:39:45:f1:a3:5f:57:19:c4:df:65:64:63:
         0a:11:d4:07:53:ce:ea:f1:6e:b5:86:24:d8:f9:89:b5:9b:9e:
         f8:68:06:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:50:51 2025 by rpki-client