Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58c91678-a499-3c12-b96f-c1856ab0d09b.roa
File:                     58c91678-a499-3c12-b96f-c1856ab0d09b.roa (raw, json)
Hash identifier:          MzHxkCjIS03kLlsisbz41jWOukk18ihZ4hegatPcBec=
Subject key identifier:   72:FC:AA:33:DA:08:58:91:DB:7F:E3:2A:E3:36:D1:FB:DC:2B:7B:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183BC0727E2EBD1E3579050
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58c91678-a499-3c12-b96f-c1856ab0d09b.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396546
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:bc:07:27:e2:eb:d1:e3:57:90:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=f9ed3700-0e30-47d0-90ba-e95471b39f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0a:52:e1:2d:00:66:e0:c9:50:03:21:69:90:
                    8d:dc:ea:db:f0:33:18:e8:15:3b:0c:f7:36:ee:4c:
                    a4:a4:73:82:86:43:ae:8f:e7:ad:8f:56:73:5c:1d:
                    1a:4a:5b:57:20:4a:5c:66:88:63:e4:3a:90:a9:6f:
                    c9:14:f0:7d:40:89:7a:3f:ab:94:31:e8:ca:b9:e1:
                    50:81:9d:06:77:6d:b0:29:fe:1a:60:71:60:fc:c9:
                    22:0d:31:41:e2:57:cb:1b:8a:ae:77:dd:32:56:27:
                    e4:16:fc:82:6a:a5:d6:e8:e0:29:d1:09:02:7f:33:
                    c0:a1:42:c2:e3:ed:9d:70:8a:7a:44:ba:3f:1d:85:
                    6f:50:ba:15:55:90:52:b3:b1:4f:6f:cc:7d:bf:68:
                    d4:e5:54:70:5b:68:a6:10:36:01:e0:50:23:7b:5d:
                    ed:4b:f1:fc:0f:d5:56:88:c4:4f:b0:f7:c2:de:63:
                    a3:ac:b3:d3:17:79:db:2d:36:57:e7:08:d9:5c:ca:
                    19:1b:4c:08:d3:e1:f5:57:1b:f1:87:82:03:e0:59:
                    f9:0f:a0:00:92:1f:4d:b3:75:e4:75:e0:74:f1:9b:
                    04:0d:7b:ff:c9:50:da:b8:1b:a3:a6:55:85:eb:59:
                    3a:9b:59:c6:8d:a3:37:03:9a:74:a4:8c:32:5d:38:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FC:AA:33:DA:08:58:91:DB:7F:E3:2A:E3:36:D1:FB:DC:2B:7B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58c91678-a499-3c12-b96f-c1856ab0d09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:02:5f:f6:9c:d9:0d:49:47:c7:9d:93:6b:9f:a5:21:c5:ab:
         6d:f8:76:ea:81:a7:b5:ad:50:96:79:2a:89:68:59:2a:48:7f:
         36:44:95:6e:07:49:d7:45:59:65:14:f4:31:1d:1d:00:06:1e:
         9d:5d:5d:f4:55:9e:d1:54:52:40:41:d5:bc:d4:57:fc:36:5e:
         7b:e0:5b:c9:a6:c9:ce:45:f5:72:00:64:d1:d5:8b:c4:18:e7:
         04:de:9d:0a:50:04:33:3b:ad:77:b3:25:9e:b2:b2:05:dc:93:
         98:cb:55:83:29:3b:82:82:a6:1b:8d:71:b6:1c:ab:8c:ff:a7:
         aa:11:1f:e2:09:30:3b:a4:06:67:9d:f2:5c:49:4d:a0:21:1e:
         04:70:55:19:86:b0:02:c6:32:7c:8c:b5:4c:7e:86:6d:28:e3:
         8e:86:b5:a9:a1:f9:5c:cb:a1:25:b5:87:90:cb:43:ea:60:ae:
         64:d0:94:d7:9b:fd:db:0a:02:91:6e:96:ce:74:63:8a:4c:f8:
         d6:71:5c:d9:68:03:a9:7d:53:4e:99:f0:7f:f4:a8:63:8a:f5:
         34:58:a5:41:d5:92:b2:80:d3:ed:32:b1:26:64:f6:33:5f:2f:
         4d:3e:bd:b8:1c:e0:f3:b4:1d:75:f1:10:10:a9:33:93:f3:5c:
         f0:54:36:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:19 2025 by rpki-client