Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a19cfe8c-a059-3be0-85df-6749ebb45bff.roa
File:                     a19cfe8c-a059-3be0-85df-6749ebb45bff.roa (raw, json)
Hash identifier:          kn95qvgnYKuQ90OA5JgAbjihbaFYCg/1+kqHbAd+t4M=
Subject key identifier:   B7:51:C1:44:EA:08:AC:FB:5F:63:A4:A9:A8:9A:26:52:40:59:68:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849194199DFC1BFA75AB225F5E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a19cfe8c-a059-3be0-85df-6749ebb45bff.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        64.6.86.7/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:99:df:c1:bf:a7:5a:b2:25:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=e8f60eb4-ba8a-4287-a953-0d5a84e61d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:c0:fd:87:f6:14:a8:76:cf:30:20:a8:0e:
                    cf:94:c0:2d:03:39:e6:f7:38:16:03:ac:81:8e:f8:
                    f4:92:bb:8b:d7:af:2a:18:c9:b2:5c:90:d8:56:c4:
                    76:41:4e:84:05:fb:a7:18:4a:1e:b2:aa:d1:76:9c:
                    b2:40:af:af:c8:f8:53:b8:05:7a:73:4a:df:01:67:
                    c7:ce:33:1b:33:69:dd:99:57:aa:9e:48:52:68:0c:
                    91:fc:c5:1a:d2:1f:40:50:3c:9a:44:8c:41:a5:28:
                    f0:fa:2f:2c:62:27:3b:81:20:a6:11:af:12:92:b7:
                    d5:7c:f0:21:9a:61:c3:8e:b1:d2:e2:1f:1b:fe:cd:
                    21:51:04:04:4a:eb:78:26:86:16:fd:31:68:bf:4d:
                    a6:a0:a6:11:44:90:5c:82:54:ed:3f:b0:55:3a:d0:
                    c6:98:02:40:d1:cc:71:31:f0:96:a9:8e:6c:69:8b:
                    50:7a:37:1b:fb:a3:c4:f0:51:f8:47:28:2b:67:f7:
                    3b:e7:7e:5e:d9:63:97:ba:7b:c5:c1:0d:4d:cc:a8:
                    72:3d:4c:60:e1:e4:71:2e:40:4f:78:1a:4e:07:c3:
                    4d:62:1a:da:79:96:79:c3:44:aa:9e:74:7b:67:a5:
                    cc:0f:3e:5f:de:42:34:f2:7d:19:3a:e4:22:6e:0f:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:51:C1:44:EA:08:AC:FB:5F:63:A4:A9:A8:9A:26:52:40:59:68:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a19cfe8c-a059-3be0-85df-6749ebb45bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.86.7/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:97:95:70:4e:ad:42:c7:11:d7:22:3b:cb:9a:16:32:f3:da:
         6c:1f:f6:d7:4e:1b:cf:39:0e:7d:df:6b:59:84:85:83:2c:ec:
         2a:37:bd:dc:cf:66:29:74:1a:62:a2:43:a9:c2:68:e3:3d:16:
         9b:65:f7:eb:0f:a8:55:8d:66:ac:89:fb:4a:52:1c:01:4c:73:
         db:c6:78:cd:85:0a:93:23:4a:1e:18:51:bd:18:51:82:92:8c:
         19:7d:3b:3a:4f:2d:93:c5:3d:2d:15:10:03:56:ba:bc:2b:8d:
         a2:e6:fb:67:47:1b:ca:d2:b9:36:60:c2:be:68:bc:41:2c:81:
         7d:51:c1:da:02:1c:9b:b4:1c:1b:df:4a:ee:aa:0c:5a:e2:13:
         f8:10:84:ad:0a:7e:54:6f:1d:b5:c2:34:63:b0:c7:8d:db:5b:
         92:44:91:a4:82:9b:14:51:04:1b:9a:e2:ba:cf:b9:08:ff:00:
         34:f9:31:27:40:5d:3a:a6:26:8c:2b:bc:1a:4b:b5:e6:72:7b:
         91:e3:ea:b5:48:e6:3d:ff:bc:3a:b6:32:1b:ec:cb:74:ca:b4:
         ae:72:eb:26:0b:8a:be:56:b2:fa:f5:6a:c6:47:bf:1d:21:e0:
         2d:b4:a6:9c:4b:4f:07:fe:b7:e4:6c:ba:8c:6d:dd:42:8c:a7:
         2e:f4:94:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:20 2025 by rpki-client