Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ad14691-cf9f-3618-aca7-b61a70e34f49.roa
File:                     4ad14691-cf9f-3618-aca7-b61a70e34f49.roa (raw, json)
Hash identifier:          /ym0+akFjFUyL1uXYK5W9lXK99hf70pbEFkRUzQlZfc=
Subject key identifier:   AC:84:B3:3F:C4:EE:84:F6:C0:94:E4:77:95:07:C1:93:03:C6:1F:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493C09374EB4409131E3D4F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ad14691-cf9f-3618-aca7-b61a70e34f49.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     7342
IP address blocks:        2001:503:e8ef::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:37:4e:b4:40:91:31:e3:d4:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=736d7995-6bdb-4725-8505-f75a55145b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c7:6d:3f:05:30:85:9f:9a:d3:ca:25:97:79:
                    f2:d0:bc:86:a1:62:e6:a1:ea:c9:68:6a:10:59:33:
                    48:25:eb:8e:bb:d0:6c:2c:33:26:03:25:d8:83:90:
                    53:c4:4b:3f:7e:35:ed:d1:4a:87:89:94:64:16:f6:
                    c8:55:b3:e6:9b:ca:77:94:63:52:57:9e:42:1a:d0:
                    66:dc:bf:2e:17:28:26:b9:97:f4:54:89:d8:24:aa:
                    a9:a3:a7:c6:4b:71:d7:45:3e:1a:35:20:71:24:bf:
                    86:1e:9e:64:f9:c8:0b:9a:c1:66:8c:3d:c8:c5:86:
                    82:33:33:a2:cb:97:71:00:37:51:c2:c6:f3:6f:f6:
                    f7:52:b1:33:46:95:18:d8:df:a7:ad:db:50:8b:97:
                    29:26:38:d8:80:c0:d5:60:56:b1:38:1b:7a:96:9b:
                    d1:51:d3:6b:9e:db:cb:8e:9e:44:77:c3:53:c8:4a:
                    b4:c8:bc:c7:d3:f4:28:34:56:f5:03:fc:4a:6b:00:
                    37:75:30:2c:fd:3d:b5:8b:6a:d9:ca:33:c9:f1:b0:
                    5c:80:3e:32:a9:d5:40:c7:97:ea:d7:91:69:d3:ee:
                    19:41:d0:0d:72:d9:d4:4a:94:61:89:5d:ce:69:1e:
                    82:fd:9e:9e:33:3d:9a:79:7a:f5:94:71:86:07:fc:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:84:B3:3F:C4:EE:84:F6:C0:94:E4:77:95:07:C1:93:03:C6:1F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ad14691-cf9f-3618-aca7-b61a70e34f49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:e8ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:98:3d:38:1e:c3:5a:49:0f:ae:f0:2e:37:b5:01:c6:fa:
         70:fb:dc:30:ef:2f:13:66:73:9d:c7:46:c8:64:39:4f:c1:df:
         e3:05:53:39:32:9b:99:96:31:c0:92:e1:ab:35:04:5d:37:c9:
         c3:be:0b:85:b0:4f:e7:5b:89:c5:87:60:47:ed:c3:49:05:ee:
         3a:70:6d:02:ac:20:f7:23:e0:a0:e8:30:58:fe:3a:6a:0c:30:
         22:4c:5e:9f:9b:7e:0e:7c:ec:d5:ba:d9:5d:7f:cd:50:d3:ae:
         3c:c3:9d:ef:05:82:71:d8:c0:8b:e9:22:03:2d:4d:8b:41:84:
         a1:64:11:f7:31:ac:e3:86:19:a1:91:66:d9:d6:7d:97:08:21:
         c9:00:01:59:d5:c3:61:c2:c0:95:e5:89:ff:40:7e:20:06:fa:
         98:00:ec:9b:43:c7:6c:7a:1a:a0:d1:ad:20:fa:cc:b8:1c:4d:
         d0:87:ce:99:ed:c6:18:05:d5:cf:e4:1a:8e:ad:7b:6a:1f:3f:
         5b:8d:5f:19:31:97:90:20:d7:0b:e7:5c:bc:24:89:f3:bf:78:
         d7:65:63:69:a6:7e:6c:1d:59:d2:7f:27:fd:e0:7c:ac:51:c3:
         45:0a:06:af:78:da:31:8e:83:2d:5b:db:00:3c:47:16:92:c2:
         28:fe:0d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:20 2025 by rpki-client