Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa
File:                     1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa (raw, json)
Hash identifier:          dy9HldpoR4SsUnkpJcr3Ot9ngvay60ISon2Dbp3vEOA=
Subject key identifier:   1E:36:1E:EC:1C:FD:CA:74:5A:A7:3D:6F:AA:84:FB:40:DA:FF:F8:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F23AC7CFA30910FC8900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396569
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f2:3a:c7:cf:a3:09:10:fc:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=929be0c3-778a-458b-89fe-69eac8b0a65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:b6:7f:ba:ba:36:54:ac:4b:df:17:9a:fc:
                    59:90:cd:46:c8:c2:24:13:6f:76:e6:60:cf:67:67:
                    55:2e:37:bd:e5:c3:49:de:dc:2a:08:64:c9:1f:55:
                    96:d7:4e:0e:38:53:52:51:61:2b:a2:8b:a0:bb:97:
                    14:cc:cb:cc:03:f8:22:09:31:15:71:18:c1:50:55:
                    61:47:d6:c3:cc:9d:82:e9:ca:66:29:e7:56:f3:2b:
                    05:0d:3a:18:ed:70:25:71:e3:96:cf:64:50:72:73:
                    a1:92:6e:81:62:1e:70:6a:26:0c:e4:ee:b5:f8:21:
                    3d:9d:00:11:fd:77:d7:c7:bd:f9:e6:ca:7b:01:a4:
                    f6:7b:64:44:0a:a1:a6:ba:6e:87:5c:88:54:ea:c6:
                    cd:bc:13:a8:d8:20:fe:f7:09:94:a6:b0:da:07:be:
                    71:4f:fc:d7:8a:2c:d4:90:0b:79:f8:b1:4e:4a:3c:
                    a2:47:eb:bd:4c:46:8f:74:22:e1:c5:d5:e7:46:93:
                    87:dd:b0:d6:8f:2e:66:73:33:4f:04:67:62:5c:92:
                    55:27:41:c0:05:f7:40:b1:1a:6f:eb:b9:0e:a1:99:
                    c3:f0:2a:08:59:77:55:44:1e:62:4c:65:86:c6:28:
                    91:f9:f6:31:b5:5e:c1:9b:ef:8d:ab:3d:b2:64:47:
                    f5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:36:1E:EC:1C:FD:CA:74:5A:A7:3D:6F:AA:84:FB:40:DA:FF:F8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a91b698-57b5-3b10-a6d2-e263ce42f4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:26:1c:36:23:9b:31:cb:21:98:55:d6:3d:cf:92:c8:a9:56:
         0d:59:96:a5:91:d6:4d:45:60:0c:a4:68:4c:ff:68:ca:4f:09:
         59:79:ae:21:d7:b4:36:61:29:0d:72:e7:69:9e:79:0d:a8:c7:
         56:08:90:23:5d:9f:56:c0:ab:2b:b7:35:17:11:13:a6:33:fd:
         4d:a3:c2:b1:af:7b:f6:14:2d:dd:17:b7:05:df:f8:9f:31:11:
         b6:68:e1:35:7e:c8:b8:2c:2d:70:36:6e:d7:8e:78:0a:70:45:
         78:e8:3a:68:d5:07:94:ec:ec:2e:e4:9a:e2:e3:af:9f:4a:ef:
         7d:62:72:45:69:09:b7:16:d6:48:d7:35:08:4a:d6:53:83:cf:
         c3:26:08:43:cf:09:42:90:73:d2:8c:63:ae:d3:bd:62:88:c3:
         26:3c:a9:ee:db:1d:38:da:4a:b7:b4:a6:e5:ce:18:3e:96:bd:
         5b:eb:50:2b:c8:99:b2:f7:b9:ac:35:06:50:84:23:0f:79:de:
         ad:9f:92:7e:c0:4f:d3:48:9a:24:70:27:a4:a9:16:de:a2:44:
         85:79:37:42:21:c3:e5:40:f3:47:40:31:5c:ad:18:09:bf:57:
         fe:39:24:95:3b:91:3d:26:de:19:2d:61:bd:b5:ef:08:28:ba:
         f7:3a:55:47
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg/I6x8+jCRD8iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
OTI5YmUwYzMtNzc4YS00NThiLTg5ZmUtNjllYWM4YjBhNjVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs62f7q6NlSsS98XmvxZkM1GyMIkE2925mDP
Z2dVLje95cNJ3twqCGTJH1WW104OOFNSUWEroougu5cUzMvMA/giCTEVcRjBUFVh
R9bDzJ2C6cpmKedW8ysFDToY7XAlceOWz2RQcnOhkm6BYh5waiYM5O61+CE9nQAR
/XfXx7355sp7AaT2e2RECqGmum6HXIhU6sbNvBOo2CD+9wmUprDaB75xT/zXiizU
kAt5+LFOSjyiR+u9TEaPdCLhxdXnRpOH3bDWjy5mczNPBGdiXJJVJ0HABfdAsRpv
67kOoZnD8CoIWXdVRB5iTGWGxiiR+fYxtV7Bm++Nqz2yZEf1EQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB42Huwc/cp0Wqc9b6qE+0Da//h0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE5MWI2OTgtNTdiNS0z
YjEwLWE2ZDItZTI2M2NlNDJmNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUJhw2I5sxyyGYVdY9z5LIqVYNWZalkdZNRWAMpGhM/2jKTwlZea4h
17Q2YSkNcudpnnkNqMdWCJAjXZ9WwKsrtzUXEROmM/1No8Kxr3v2FC3dF7cF3/if
MRG2aOE1fsi4LC1wNm7XjngKcEV46Dpo1QeU7Owu5Jri46+fSu99YnJFaQm3FtZI
1zUIStZTg8/DJghDzwlCkHPSjGOu071iiMMmPKnu2x042kq3tKblzhg+lr1b61Ar
yJmy97msNQZQhCMPed6tn5J+wE/TSJokcCekqRbeokSFeTdCIcPlQPNHQDFcrRgJ
v1f+OSSVO5E9Jt4ZLWG9te8IKLr3OlVH
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:58:18 2025 by rpki-client