Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/517c4cda-ab0f-3d53-a3ed-fe89c0193145.roa
File:                     517c4cda-ab0f-3d53-a3ed-fe89c0193145.roa (raw, json)
Hash identifier:          naoXDji7Tmjug4mQMc8dhucM/lF45aUacwcdZrrIYVU=
Subject key identifier:   B1:EC:B6:37:34:E9:44:A4:AD:0B:72:58:8C:BD:E3:00:D7:6C:F2:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183CB568C646D8002B8D0A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/517c4cda-ab0f-3d53-a3ed-fe89c0193145.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396583
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:cb:56:8c:64:6d:80:02:b8:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=120f1760-e2c5-49e3-8b39-b8263cc02c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f4:66:96:00:0a:21:26:c6:32:1b:38:26:f1:
                    b9:62:df:b5:a1:d0:ef:1e:64:bb:f4:a2:4b:10:08:
                    22:94:5b:76:c8:26:39:6f:4f:6b:d3:5b:4d:13:20:
                    66:06:de:57:fa:39:e0:88:f9:c5:88:4d:ea:94:6f:
                    41:bd:50:46:99:a0:8f:98:21:f1:82:4b:c2:ca:74:
                    9b:fd:5d:ae:42:8f:ac:c5:af:86:21:ec:fb:7a:ab:
                    dc:76:58:59:34:a3:07:a8:1f:2c:9d:66:1e:ab:61:
                    78:2f:3d:ad:f4:4a:49:1e:af:76:31:0e:63:ac:ab:
                    91:98:1d:32:34:b3:68:03:66:7f:65:6a:77:aa:24:
                    a5:02:18:37:3c:9f:c0:1c:d0:c4:c9:fe:ce:e4:c5:
                    9f:09:ec:a1:5a:b3:c1:17:01:e0:b9:9e:26:1a:45:
                    65:0a:b6:32:2d:6d:91:4f:95:0a:75:1f:3b:41:f1:
                    f3:8d:f3:db:ab:8b:24:82:47:91:b4:14:af:a8:49:
                    24:8b:a7:44:48:7e:9e:bb:ec:db:1b:8e:58:16:ad:
                    b5:17:38:fd:5b:00:40:7d:5d:9b:b7:92:79:5b:12:
                    c1:64:19:ad:83:da:91:69:98:f5:e2:99:b7:a8:2a:
                    89:ff:39:7c:36:cd:3c:3c:d6:05:ad:9e:4c:b4:c9:
                    23:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EC:B6:37:34:E9:44:A4:AD:0B:72:58:8C:BD:E3:00:D7:6C:F2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/517c4cda-ab0f-3d53-a3ed-fe89c0193145.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ea:fd:16:b5:1f:0b:62:59:2f:40:2f:b5:c2:b3:d4:61:0d:
         d5:d4:07:3a:88:9a:ba:a3:7c:83:d7:32:d6:d4:cb:ee:32:d0:
         d2:ff:ce:da:cd:60:9b:64:ed:fe:bc:93:f9:89:7d:5a:8a:59:
         95:fa:2b:fd:a6:d0:c7:e3:47:fa:15:3a:81:ef:5a:76:1a:a6:
         2c:92:84:ba:8d:91:44:fb:bc:86:06:3f:0d:b9:32:38:a9:9f:
         57:69:5d:6b:79:ec:f8:32:d6:da:39:e3:ee:94:23:3d:63:c5:
         6d:dd:da:60:0f:45:aa:0d:c8:c1:31:8e:f2:57:f4:85:f5:6a:
         ba:34:58:9e:12:70:b6:8e:47:35:82:7a:71:3a:41:55:2d:1c:
         e2:84:47:ff:f0:12:a6:0b:6f:21:aa:df:9c:fd:43:52:a8:3f:
         22:30:0c:ff:f7:36:fe:f2:cf:f0:ff:74:97:38:e4:f6:fe:e7:
         6b:7d:c0:6c:27:f4:ba:25:0d:3d:aa:c8:c2:b6:29:d8:b7:e8:
         16:ec:98:7e:c7:54:0b:6e:12:b4:27:ea:26:6d:ad:42:41:01:
         03:0a:e5:2b:44:2f:bf:98:36:ad:e4:5d:b4:06:3d:50:06:d9:
         b6:81:a4:49:90:a6:cf:89:70:da:b9:3b:51:c1:92:78:2c:27:
         f1:20:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:40 2025 by rpki-client