Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa
File:                     b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa (raw, json)
Hash identifier:          nr4RNvSX2zUrufliorB7RN000Dz3QquJ91tL0pCtbA4=
Subject key identifier:   BE:7A:32:65:49:D8:0A:AF:34:C2:D8:CE:BA:ED:EE:76:1C:80:47:C3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFC143F11ED1ED2B5C1F00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        2605:a401:8083::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:c1:43:f1:1e:d1:ed:2b:5c:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=7630e591-6e8e-405c-98e8-6854192c75c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:23:93:d4:aa:79:b9:ef:d0:5c:bc:f7:b6:
                    34:fb:21:e5:26:ad:15:65:d9:3f:f1:e8:68:91:d3:
                    19:9a:a9:af:ca:98:c2:23:0b:41:35:5f:f1:5f:d0:
                    af:5b:86:dc:64:ec:3e:6e:fb:ce:68:e7:9c:d9:65:
                    20:88:a9:fb:25:24:d8:ea:cc:a7:59:77:7a:89:6b:
                    4d:0e:0c:15:1f:4b:7a:10:d7:39:9d:98:8a:cb:93:
                    0b:46:3e:ba:b3:31:f9:85:56:04:41:39:45:24:22:
                    e1:88:1d:79:45:45:0c:e3:7f:e2:ff:80:e8:14:9d:
                    11:4e:e5:64:ee:9a:2a:db:5b:8b:f1:91:a4:7d:9e:
                    1c:f2:31:ab:a1:84:02:63:62:18:23:cf:dc:f4:ad:
                    6f:0f:8d:19:be:6c:91:1e:f8:be:89:1a:e1:a3:38:
                    14:67:03:b3:12:18:5e:c3:b4:47:36:24:36:c1:11:
                    8a:34:9e:6f:0c:23:71:e6:55:b5:a8:b0:ba:75:46:
                    4d:97:b0:54:f3:cb:f9:38:04:3a:b5:23:b4:09:c5:
                    e9:20:6e:b8:13:c1:ec:64:0f:c2:0f:0a:44:34:c1:
                    01:ef:16:d8:78:71:cc:c8:0a:94:2a:e0:18:58:47:
                    fc:23:b0:96:4d:b1:4a:d5:d0:09:26:db:6f:af:a0:
                    bf:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7A:32:65:49:D8:0A:AF:34:C2:D8:CE:BA:ED:EE:76:1C:80:47:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7e8bd27-f1b6-398d-bb33-9b30852e5be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:8083::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1c:48:67:09:ef:9e:67:db:99:e4:67:b9:8c:8f:93:2a:79:
         cb:67:b3:bb:7c:4c:5c:0c:84:bd:95:81:39:ee:60:7c:d4:93:
         3f:8f:5f:04:bb:e5:70:17:53:5c:94:53:e9:cc:d4:d2:b6:92:
         9f:17:27:5a:3d:c9:f3:81:e8:9a:d2:3e:16:e0:72:02:bf:bb:
         81:67:85:07:85:e4:c7:82:78:16:64:cd:9b:f5:58:8f:49:59:
         46:82:15:92:48:ed:f3:54:e9:06:40:61:87:55:35:da:56:0d:
         82:bb:e0:9d:c6:b0:56:0b:61:dd:27:ac:33:5b:42:19:19:a4:
         94:f1:2e:9d:24:94:2d:f4:09:11:a9:94:b7:db:8d:cb:da:3f:
         72:42:cc:91:bd:cd:ad:ae:73:5d:2e:30:25:1c:13:36:b0:8a:
         b4:2f:db:22:9f:d9:88:11:ed:2e:dd:b2:b5:f9:ad:4d:98:79:
         ce:7e:e9:c5:7c:a8:d5:89:f5:50:a1:13:f3:89:29:d8:2b:37:
         c2:99:a0:31:54:ef:3e:84:2c:7b:d2:f5:7e:82:c1:48:65:10:
         41:85:a9:01:67:ee:41:8c:4b:27:5c:ac:e0:ca:f1:51:ef:8f:
         93:2e:14:de:ac:84:94:19:2e:7f:da:c7:93:7d:9c:7d:d5:bc:
         61:fc:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:22 2025 by rpki-client