Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/feb09de5-7c7f-3f73-8957-cea53926fd7f.roa
File:                     feb09de5-7c7f-3f73-8957-cea53926fd7f.roa (raw, json)
Hash identifier:          XdHQoAxskhxJpGjfrFbJYFnbtaAMypwDZwQ/2/XOezs=
Subject key identifier:   12:54:00:26:0B:2D:2D:EB:D8:AA:F2:9A:D6:6C:19:8C:BC:00:15:3C
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285848960B59D02F9B8DFC5DD6BE80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/feb09de5-7c7f-3f73-8957-cea53926fd7f.roa
Signing time:             Sat 18 Jan 2025 14:00:52 +0000
ROA not before:           Sat 18 Jan 2025 14:00:52 +0000
ROA not after:            Fri 18 Apr 2025 13:00:52 +0000
asID:                     11055
IP address blocks:        2604:7a00:ff81::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:96:0b:59:d0:2f:9b:8d:fc:5d:d6:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jan 18 14:00:52 2025 GMT
            Not After : Apr 18 13:00:52 2025 GMT
        Subject: CN=3f160d44-5aca-4152-9b83-12f28125afc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:aa:42:f5:ea:0e:40:67:fb:94:05:93:a6:34:
                    7d:45:12:85:12:da:58:54:69:13:28:f3:1d:08:ec:
                    2c:7f:44:e9:9f:06:fc:cf:bf:74:d3:06:14:e5:4f:
                    bc:d7:67:97:6f:f2:7f:f1:95:58:d1:c8:6b:14:a7:
                    5f:5e:81:b4:ce:d1:c3:a6:b2:0c:24:24:ea:05:5a:
                    b6:62:ee:aa:e4:79:81:2f:35:d7:e3:27:b7:c6:b7:
                    4b:05:94:48:a9:49:b7:d2:98:b8:65:a4:c7:2c:e7:
                    62:4c:9d:7c:6f:d0:4d:5f:7c:13:22:24:57:40:a0:
                    45:1c:9c:55:89:e5:f7:f6:fc:8b:7f:34:ba:81:be:
                    30:92:99:96:f7:bd:30:16:5f:58:e6:ad:07:e3:ce:
                    48:33:ba:88:56:0c:fa:9b:1f:7a:2f:38:20:28:60:
                    b9:f4:7b:6d:26:b8:c2:b6:12:d8:83:6d:90:df:3d:
                    33:d5:46:c7:43:f4:ae:03:41:bd:2e:6d:73:17:7d:
                    01:49:f6:84:ef:79:af:4d:09:25:b7:c9:b4:0e:40:
                    81:6f:f8:54:93:a0:3f:74:fa:38:84:c1:6d:7e:9c:
                    fc:92:08:fb:a2:55:89:f1:04:7b:cb:ca:8a:ca:d2:
                    fe:0f:b5:29:9d:30:f2:bb:34:48:67:2f:d9:9e:77:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:54:00:26:0B:2D:2D:EB:D8:AA:F2:9A:D6:6C:19:8C:BC:00:15:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/feb09de5-7c7f-3f73-8957-cea53926fd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:ff81::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:85:83:e8:ec:12:15:ab:80:b0:4c:22:e7:7a:b9:be:76:
         59:e4:d6:1b:98:44:b5:e4:5d:17:0f:07:43:ab:b1:7b:7e:22:
         4b:14:ec:d4:d2:7f:0f:0d:8a:b2:c5:e0:d1:c4:81:07:ca:6c:
         5c:da:c8:3f:d3:d1:0d:ea:1b:3a:51:3b:2e:76:52:cd:8b:da:
         70:01:e6:f5:b6:24:1d:f7:c5:7b:c4:a7:93:0f:35:f8:d9:96:
         ad:80:04:fd:7d:7d:f4:8d:fa:22:56:53:79:23:63:39:3c:91:
         4f:2b:13:a2:df:04:c9:7d:85:73:f8:f0:b3:e5:e0:b0:ab:89:
         fe:a5:9f:e0:54:a6:77:04:7c:50:84:e3:ea:24:51:86:9c:ad:
         19:ef:ac:bf:e6:a3:4e:03:ac:a4:01:6f:0e:57:45:89:37:3e:
         9b:62:81:42:3d:34:bf:7f:e8:50:9b:0b:2e:e8:7f:6f:99:e2:
         cb:ca:d4:c3:74:8b:0d:10:59:04:72:75:db:4e:55:ad:9a:56:
         b8:5b:6f:40:ce:62:3b:d5:65:ad:b8:45:d5:28:7d:c8:91:4f:
         08:2f:e0:96:5e:46:1c:13:1e:0e:e5:ce:a6:3f:e9:0e:be:be:
         81:7e:38:09:5d:c3:e7:12:d6:5c:3d:aa:4b:c5:d7:57:b6:75:
         3c:2d:8a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:45 2025 by rpki-client