Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3652cfae-6deb-384b-bb73-ba6dd3b47705.roa
File:                     3652cfae-6deb-384b-bb73-ba6dd3b47705.roa (raw, json)
Hash identifier:          dFPepOwwCP3av9kbTOCTLPp3dkv1p9YcSTHrMVU7ZGY=
Subject key identifier:   8F:A0:C9:FF:15:14:0A:EB:B4:C5:20:6B:B4:96:86:AA:61:48:6B:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60C5EEBFB20FF2C62A7A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3652cfae-6deb-384b-bb73-ba6dd3b47705.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396578
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:c5:ee:bf:b2:0f:f2:c6:2a:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=724bcc1e-ec51-4c9d-9fac-0e33c68ffc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:77:2c:52:7b:a1:fd:fb:62:f8:f7:23:de:
                    b5:aa:1d:9f:12:8d:b6:5b:09:d4:43:9e:b1:d8:93:
                    6a:f5:dc:11:1d:52:18:0a:23:f3:49:7b:1c:39:35:
                    88:07:22:de:23:3e:8b:21:9c:73:45:84:1a:0d:72:
                    ed:ac:db:91:08:95:61:85:66:d7:69:e2:da:c4:01:
                    6e:fd:32:fe:07:28:fe:bf:be:c6:10:e3:72:b1:11:
                    d9:51:b5:f0:fa:9e:bc:1d:d9:66:17:47:4e:fc:06:
                    5a:19:d3:c8:85:91:9f:a8:35:6c:33:0b:0e:f8:9b:
                    d3:ed:f9:95:7d:bd:04:f6:53:de:7a:19:02:e8:78:
                    d0:00:51:34:ee:20:e2:3c:b9:cb:ab:0f:c5:58:2b:
                    1f:dd:32:cf:27:98:45:7b:20:8a:a2:db:e4:05:34:
                    54:56:14:1d:e4:04:4d:d0:a0:3f:c1:ae:65:f1:62:
                    f5:6c:41:d2:51:fd:04:58:61:72:93:47:16:bf:27:
                    55:ee:d5:a7:f1:a6:00:5f:13:4b:86:8d:c7:ed:99:
                    92:5c:88:48:37:31:8c:26:e1:58:a9:75:e8:a7:12:
                    d4:71:a4:1f:51:5d:25:ee:7a:ad:a9:ed:e8:42:c8:
                    e0:71:5a:ee:5d:b9:de:bd:9e:c7:34:60:0b:9b:dd:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A0:C9:FF:15:14:0A:EB:B4:C5:20:6B:B4:96:86:AA:61:48:6B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3652cfae-6deb-384b-bb73-ba6dd3b47705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:e6:38:a7:ea:33:d6:dd:0e:98:c8:9e:00:a0:af:23:ac:
         2c:0b:ba:5b:de:89:83:03:36:52:9a:10:12:2a:c4:19:77:58:
         67:74:41:e8:2b:52:0e:dc:53:fe:41:e0:e8:3a:10:07:57:10:
         7c:ed:57:45:16:09:4e:2a:4d:6a:06:b0:5e:b1:18:c3:01:f9:
         c3:76:93:d3:90:72:d7:35:6c:cd:d9:fb:58:74:a4:e5:86:c1:
         1a:93:a3:40:fd:76:2f:93:b4:b0:c2:42:fa:2a:23:b1:18:a0:
         ea:4b:c0:d5:f9:3f:43:52:d8:99:7b:33:6b:a4:09:dd:5f:fe:
         5d:de:96:31:98:0d:03:4d:12:20:f5:9a:31:a9:bf:27:ed:40:
         2d:63:6c:5b:d7:2a:93:e5:0b:df:24:d5:dc:90:c7:e9:4a:7c:
         b5:56:aa:36:53:75:fa:57:57:a6:11:f3:bf:10:cd:28:aa:3d:
         fa:e5:94:1c:51:2b:d9:7d:79:e5:2f:ed:9a:d2:92:59:5b:e1:
         3a:53:0d:22:50:cf:02:1a:a2:eb:f3:fc:9c:77:98:04:83:19:
         b5:49:0c:26:37:0b:68:9e:b3:9e:17:74:52:c2:bb:ce:fd:c0:
         4c:ab:54:14:bc:79:6f:c8:fe:08:58:fd:86:0e:69:8a:c3:e2:
         59:e9:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:21:08 2025 by rpki-client