Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ec03e19-7f4b-31ea-9715-61c174274921.roa
File:                     0ec03e19-7f4b-31ea-9715-61c174274921.roa (raw, json)
Hash identifier:          5jAN2GF67U/yJfQs0dRj290peaIUSZM4eyYxT8ikf78=
Subject key identifier:   9C:85:6A:BA:68:F1:4A:D4:56:DF:3E:F6:F8:C0:88:78:2F:F5:41:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848CB08A15A5DF9BDCFE0A67B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ec03e19-7f4b-31ea-9715-61c174274921.roa
Signing time:             Thu 06 Feb 2025 13:33:22 +0000
ROA not before:           Thu 06 Feb 2025 13:33:22 +0000
ROA not after:            Wed 07 May 2025 12:33:22 +0000
asID:                     396550
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:08:a1:5a:5d:f9:bd:cf:e0:a6:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  6 13:33:22 2025 GMT
            Not After : May  7 12:33:22 2025 GMT
        Subject: CN=11428439-7dff-4e0f-97a2-823ad8cbc20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0f:a5:7a:72:cd:ff:72:1a:5d:d1:99:53:32:
                    59:9a:e2:d0:d2:b5:4c:2d:c6:28:6b:8b:f2:19:bf:
                    b0:3b:44:5d:66:bc:9a:cd:c6:7f:35:c8:bb:ca:de:
                    b5:72:79:59:a6:44:a9:a2:65:2b:11:42:fc:bf:66:
                    e0:41:3a:3e:b7:1d:68:de:09:bc:91:de:1e:89:c6:
                    62:f9:f9:91:a3:32:12:6a:57:ae:fd:aa:b2:f4:0e:
                    c2:3d:b9:c9:b4:72:e7:80:43:bc:22:86:88:fb:65:
                    47:a3:d1:d5:ac:d5:77:ee:a5:65:b1:48:38:cb:37:
                    f4:01:88:6b:4f:68:91:9c:e7:69:41:eb:d9:51:24:
                    5b:fe:ed:a4:15:55:89:2e:e7:78:14:56:81:4f:22:
                    4c:9b:f1:fe:95:82:69:74:c0:b8:cc:4a:6e:40:5a:
                    44:34:2e:1c:34:a5:6b:8e:50:ca:80:2d:82:c1:1f:
                    bf:bb:e1:06:91:94:8c:8f:c9:1b:7c:0f:0e:05:34:
                    de:e7:bc:18:9b:f9:84:38:d4:82:21:90:1d:8e:5e:
                    d2:89:99:f9:75:39:e7:47:ce:a5:a3:30:64:c6:95:
                    2d:f2:41:a9:0c:7b:bd:61:38:93:83:89:ac:18:4c:
                    84:18:bb:f0:8a:2c:b1:89:8a:e0:4b:3c:bf:1e:0f:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:6A:BA:68:F1:4A:D4:56:DF:3E:F6:F8:C0:88:78:2F:F5:41:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ec03e19-7f4b-31ea-9715-61c174274921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:41:80:6c:a2:ae:2b:ba:4c:98:fd:88:2a:d7:9f:7e:2d:
         59:9c:ed:7f:24:0e:55:b4:3e:1a:89:0f:24:83:e1:0e:cf:fc:
         af:e9:fe:64:0e:50:6f:8c:16:06:45:35:d5:2c:fc:8d:29:6a:
         09:27:3e:a4:99:12:58:79:57:d3:c3:1f:f6:63:27:a2:1a:ea:
         70:65:5d:f5:32:fd:43:83:03:75:85:72:76:fb:7b:86:77:79:
         4b:9b:d2:24:52:bc:d9:20:19:8d:1f:2a:b3:e9:db:e2:95:db:
         e8:40:97:a5:73:a3:c5:78:59:2d:c9:0e:54:4f:95:54:92:fc:
         e9:46:a2:04:ba:bf:31:69:57:14:bf:cb:43:6f:b9:d8:34:83:
         be:23:5d:a1:5e:e9:05:43:47:1a:73:29:cc:d8:82:24:c4:ef:
         f2:89:58:26:c6:e3:9a:2c:c6:39:c2:a7:7b:ef:ec:48:00:04:
         d3:7a:fa:f5:6e:70:04:34:75:cd:48:3a:bc:85:9f:80:c3:52:
         87:56:6a:21:40:d3:32:4e:26:2e:75:c1:ea:5b:bc:eb:a4:01:
         89:ce:1d:ee:b4:b8:f2:48:a4:16:b4:b6:f9:2b:b8:7c:c6:ee:
         73:43:4b:bd:06:92:2f:c4:e2:15:e7:73:54:1d:84:fe:06:11:
         ec:2d:31:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:21 2025 by rpki-client