Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64976aeb-6603-39dc-a238-19d0893b3655.roa
File:                     64976aeb-6603-39dc-a238-19d0893b3655.roa (raw, json)
Hash identifier:          KuP6ezNcoPDPG6ksT//PPMY2ibDaiptK0w/lwquWqwI=
Subject key identifier:   04:D4:11:D9:04:D3:29:62:17:18:61:CF:AB:85:B2:05:89:81:0B:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D3A4D9D92644D8B07500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64976aeb-6603-39dc-a238-19d0893b3655.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     397204
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d3:a4:d9:d9:26:44:d8:b0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=9565d4db-6e7c-4e59-b330-d400ca2446b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e3:7c:5c:27:f7:f4:8a:16:56:a8:5b:a6:52:
                    38:94:4e:d5:6c:2b:c4:d8:4d:ff:d2:01:ee:71:50:
                    af:f3:3e:9f:0f:e1:45:32:e3:91:aa:f9:ec:18:61:
                    d3:56:f1:a7:c4:eb:cd:b9:a0:b3:b7:b6:56:ba:53:
                    ed:09:03:23:f7:c5:3a:d8:b8:8c:db:71:3e:81:a3:
                    a3:72:b0:7b:cd:2e:d4:ea:bf:7f:92:71:d7:93:07:
                    7b:d2:80:4c:53:3f:73:84:3d:4f:e3:96:e2:e0:bb:
                    d1:51:73:d3:35:a9:a7:c6:82:2f:77:19:70:39:b6:
                    37:a2:b9:fb:b6:50:9a:1d:aa:71:14:06:e4:09:8a:
                    2b:9b:8a:1d:26:08:bf:64:b5:fb:80:de:6d:69:ec:
                    58:6f:68:a7:6b:39:2a:40:54:56:a7:bf:ea:0f:d3:
                    20:68:f3:83:91:14:57:fe:6c:4f:8d:6a:ef:b3:8c:
                    cd:67:9e:d7:d1:9f:b7:72:3f:ec:eb:63:ec:aa:39:
                    aa:eb:07:83:bf:b8:cd:82:a7:c0:b4:d1:e5:90:45:
                    5d:10:55:04:d4:6d:f6:f8:bf:f6:df:43:94:a8:ef:
                    34:35:0d:99:f3:a8:98:05:18:a7:ff:a4:9a:8b:ab:
                    ba:0a:16:87:2e:a5:d1:7e:46:b8:85:8f:02:a3:18:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D4:11:D9:04:D3:29:62:17:18:61:CF:AB:85:B2:05:89:81:0B:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64976aeb-6603-39dc-a238-19d0893b3655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e4:f5:17:5e:59:eb:89:a8:0f:a7:6a:1b:6a:de:76:90:7d:
         7e:ce:51:66:5c:16:c9:f1:67:a1:a0:e2:d4:5b:a7:c1:49:2a:
         4e:2f:82:fe:60:09:04:b3:6b:dc:e7:be:14:ca:86:3b:52:fa:
         41:cb:91:c7:ec:dd:90:e1:57:51:ad:7c:4b:ae:89:d6:8f:01:
         df:fc:ec:5a:00:3b:44:5d:19:f4:78:f9:33:b3:b0:b5:58:4d:
         42:72:0d:5c:d0:b1:3c:4a:85:80:89:1c:15:75:dd:fa:3c:f1:
         38:43:81:7b:86:ed:0e:56:28:96:27:da:30:25:8a:40:6b:6f:
         7d:a9:8b:19:a3:67:58:81:73:41:65:9f:c7:15:63:b4:12:c2:
         66:c2:5c:ae:f8:95:37:6f:df:5e:0c:5a:80:62:61:b7:f6:98:
         50:eb:d1:a5:5a:e6:fa:4b:1b:01:b0:e2:08:52:b6:fe:16:74:
         01:5b:17:e8:d5:f4:a7:1c:48:c3:41:68:bc:1f:ea:aa:7c:00:
         a5:92:fc:fe:91:bc:bf:56:ec:ea:76:a7:6e:0d:92:28:be:d4:
         70:22:13:17:f8:40:1f:92:db:93:2b:c7:d3:ec:bd:7d:43:a9:
         1d:e8:e8:69:d9:0a:ce:c0:cd:5a:1b:d1:74:b2:0b:fc:db:a7:
         03:d3:46:5f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkp49Ok2dkmRNiwdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk
OTU2NWQ0ZGItNmU3Yy00ZTU5LWIzMzAtZDQwMGNhMjQ0NmIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+N8XCf39IoWVqhbplI4lE7VbCvE2E3/0gHu
cVCv8z6fD+FFMuORqvnsGGHTVvGnxOvNuaCzt7ZWulPtCQMj98U62LiM23E+gaOj
crB7zS7U6r9/knHXkwd70oBMUz9zhD1P45bi4LvRUXPTNamnxoIvdxlwObY3orn7
tlCaHapxFAbkCYorm4odJgi/ZLX7gN5taexYb2inazkqQFRWp7/qD9MgaPODkRRX
/mxPjWrvs4zNZ57X0Z+3cj/s62Psqjmq6weDv7jNgqfAtNHlkEVdEFUE1G32+L/2
30OUqO80NQ2Z86iYBRin/6Sai6u6ChaHLqXRfka4hY8CoxicEwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFATUEdkE0yliFxhhz6uFsgWJgQslMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ5NzZhZWItNjYwMy0z
OWRjLWEyMzgtMTlkMDg5M2IzNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCb5PUXXlnriagPp2obat52kH1+zlFmXBbJ8Weh
oOLUW6fBSSpOL4L+YAkEs2vc574UyoY7UvpBy5HH7N2Q4VdRrXxLronWjwHf/Oxa
ADtEXRn0ePkzs7C1WE1Ccg1c0LE8SoWAiRwVdd36PPE4Q4F7hu0OViiWJ9owJYpA
a299qYsZo2dYgXNBZZ/HFWO0EsJmwlyu+JU3b99eDFqAYmG39phQ69GlWub6SxsB
sOIIUrb+FnQBWxfo1fSnHEjDQWi8H+qqfAClkvz+kby/VuzqdqduDZIovtRwIhMX
+EAfktuTK8fT7L19Q6kd6Ohp2QrOwM1aG9F0sgv826cD00Zf
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:56 2025 by rpki-client