Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7e1def39-cafd-36c2-9d93-3547ff72dab9.roa
File:                     7e1def39-cafd-36c2-9d93-3547ff72dab9.roa (raw, json)
Hash identifier:          1G66MLSk5xE1+8WniPFRtVjVCHNk/zLXr/y9IETzp0o=
Subject key identifier:   EA:5F:8B:52:3C:AE:E2:FC:9F:07:23:20:D0:F4:05:5D:9B:CE:90:35
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F43285847DB28AE886F7B92B26FB18680
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7e1def39-cafd-36c2-9d93-3547ff72dab9.roa
Signing time:             Tue 12 Nov 2024 15:23:57 +0000
ROA not before:           Tue 12 Nov 2024 15:23:57 +0000
ROA not after:            Mon 10 Feb 2025 15:23:57 +0000
asID:                     14555
IP address blocks:        2607:dec0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:28:ae:88:6f:7b:92:b2:6f:b1:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Nov 12 15:23:57 2024 GMT
            Not After : Feb 10 15:23:57 2025 GMT
        Subject: CN=bde0002b-98be-44a0-a557-b8d1af0acfbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:6e:f7:35:b9:29:38:c1:54:5e:fe:e4:53:
                    aa:4f:e1:9e:67:01:2b:78:f7:28:5b:ed:b2:95:57:
                    81:c1:01:ec:c3:f5:04:0a:53:11:7c:33:d8:db:c8:
                    dc:f9:78:a2:b7:54:82:58:ea:dc:b5:d0:ec:4e:5b:
                    89:8c:67:9b:0e:73:92:5e:cd:eb:75:f4:a8:ff:2c:
                    d3:27:ec:8c:9d:b1:50:5c:d8:07:bb:bc:8e:fb:ef:
                    9c:cd:e9:7b:44:40:22:82:85:e6:70:af:f9:e0:4a:
                    4a:36:5f:c4:82:e0:17:bb:91:38:3d:b9:8b:a8:0a:
                    aa:4a:45:84:d2:a6:9a:11:14:82:42:70:f3:90:1b:
                    64:c1:bc:a7:b1:47:d8:06:ef:80:cd:16:d7:77:cc:
                    c8:e4:95:7e:0e:01:ab:1b:30:46:1e:ee:6f:a8:1e:
                    0c:85:dc:f8:35:52:90:bc:64:82:8e:62:17:85:eb:
                    61:e5:cb:36:54:ed:4c:14:13:97:b9:d3:9a:01:3a:
                    34:3c:09:33:2e:82:19:d8:cd:a2:5d:e4:4d:8b:01:
                    81:d8:22:63:6f:d7:4c:9d:ac:ec:3b:05:d8:ea:1b:
                    4a:e3:da:ce:c9:db:27:e0:14:43:0a:05:4c:18:9b:
                    5a:34:f6:2e:4c:af:d1:e0:84:62:c5:e8:1f:50:29:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5F:8B:52:3C:AE:E2:FC:9F:07:23:20:D0:F4:05:5D:9B:CE:90:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7e1def39-cafd-36c2-9d93-3547ff72dab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:dec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:08:b3:f1:9e:a5:2e:36:66:5f:ae:d3:f9:a3:c8:63:05:4b:
         23:91:76:53:ba:fd:16:50:f8:f5:c5:03:6d:80:33:3b:ce:4c:
         bb:17:6d:05:a6:34:39:6d:15:7c:f9:16:92:53:64:e7:59:9b:
         d4:e1:af:46:b4:44:df:fb:5c:9b:3c:71:ef:32:4e:f8:d9:7a:
         74:65:02:49:ed:32:0b:3a:b6:32:ad:0c:0e:ee:56:62:84:00:
         99:8c:94:cb:22:da:f9:71:60:0a:4d:e5:2d:20:36:c4:2e:0b:
         b4:a3:20:42:59:00:cd:3f:96:39:3b:24:ea:37:fc:bb:9a:61:
         8a:11:b9:fe:a7:a8:e3:ad:6b:b4:ca:97:43:c6:31:39:7f:f3:
         94:e2:3a:01:fe:e4:03:f8:7d:e8:95:31:95:71:eb:6e:10:e9:
         f3:fc:93:fa:15:c1:64:da:a9:2d:2d:ad:18:88:80:e9:16:aa:
         c7:c4:4a:8d:41:37:32:20:84:54:51:2d:a7:52:b4:46:e8:e4:
         7d:f2:1d:e0:6a:42:81:4d:12:8b:cd:39:17:e1:e2:f4:be:01:
         7c:53:3d:8b:aa:bf:00:51:73:3a:2c:e9:56:36:61:30:e8:8b:
         7e:b6:05:27:9c:de:44:bf:71:9a:ef:f5:50:5e:e4:f9:74:34:
         42:ac:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:10:03 2025 by rpki-client