Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ed88241-05a1-3c96-bf97-771602414ed3.roa
File:                     6ed88241-05a1-3c96-bf97-771602414ed3.roa (raw, json)
Hash identifier:          JUDUOcWpf9an4KpCT+bmIIqVxgYnbyfoPNDV2/0hViw=
Subject key identifier:   E1:5E:E7:5B:0D:EB:37:15:CA:AA:42:C5:0A:B1:9B:23:1F:63:9A:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183EB456FF2D027817AFC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ed88241-05a1-3c96-bf97-771602414ed3.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396587
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:eb:45:6f:f2:d0:27:81:7a:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=877bf4df-4779-41ba-8b5f-473f74ad6398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:55:f1:c9:66:a7:ee:94:2e:12:02:32:88:
                    d2:7d:91:77:d3:a1:1b:fb:f5:c8:da:c0:f4:58:be:
                    f2:9f:92:1e:6f:59:81:49:22:18:89:99:cf:88:da:
                    6e:3c:01:01:bb:aa:0f:83:07:f2:d7:ba:23:5d:77:
                    f3:4e:ee:fc:48:10:3b:e1:50:5f:08:16:be:cd:a2:
                    89:ce:f8:c3:c0:57:61:ce:1d:ed:c4:72:ab:a1:2a:
                    f0:c8:0b:36:b8:23:4d:86:ca:2d:a1:58:35:b3:7d:
                    ef:c2:ff:c7:0a:16:87:de:86:c9:ac:d3:b7:ee:e8:
                    52:26:1a:f0:05:22:18:7b:12:77:71:df:f5:ff:09:
                    70:4c:99:3c:7f:f1:1f:4b:b5:0d:22:a5:d8:95:37:
                    11:df:c4:fa:c5:7a:99:ce:c4:14:48:9d:2d:99:b0:
                    41:cc:16:a9:53:a8:6b:75:28:73:26:f7:e7:70:56:
                    04:a0:ff:cd:4a:af:c6:a9:fd:6f:b3:3e:58:0f:69:
                    59:f4:7c:c7:af:b7:34:ec:d8:ba:77:83:6d:34:6b:
                    d4:b7:58:02:6a:bd:94:ef:9f:e0:5f:28:68:8c:f2:
                    d4:71:6b:73:95:5f:a6:19:3d:9b:ea:7c:06:8b:68:
                    20:88:15:2a:c3:84:71:5f:cb:8c:39:8f:7b:da:79:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5E:E7:5B:0D:EB:37:15:CA:AA:42:C5:0A:B1:9B:23:1F:63:9A:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ed88241-05a1-3c96-bf97-771602414ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:6b:0d:1c:63:ba:2c:ab:b4:19:ae:28:65:dc:11:9b:f0:
         3d:cf:fc:d5:10:02:b4:ef:d7:9d:7b:1d:5b:ad:81:38:3f:30:
         19:b3:e7:90:d7:1e:fe:dd:78:3a:6e:bd:28:49:b6:3d:fa:d6:
         e2:65:d1:5c:e6:82:a0:77:a4:e5:2a:cc:81:2b:dd:a4:ac:84:
         4e:4d:a4:ad:82:8f:86:b6:dd:ec:f1:ed:e0:38:30:6f:ff:63:
         3f:c1:13:d3:92:9e:b6:56:55:3e:c0:97:63:4b:09:de:5e:fe:
         d1:fc:e6:6c:58:f1:c8:2a:f5:0d:34:7c:18:10:27:c5:c2:31:
         a7:e3:91:d9:26:56:54:af:9f:dc:a9:bd:da:3f:d3:19:3d:47:
         84:c7:15:3e:16:39:03:aa:19:f5:ad:52:34:32:80:6c:a2:6b:
         db:79:5b:eb:82:d3:19:c1:36:7a:c4:40:20:5c:08:92:77:ed:
         f3:88:29:11:18:82:df:d7:f6:2b:11:d4:f7:e9:36:41:42:25:
         09:d4:3d:10:b5:c5:6b:88:fd:c2:24:34:63:ee:19:58:78:3e:
         bd:91:23:27:9e:d6:7e:7b:85:8b:47:bd:10:b4:24:0e:00:9b:
         5a:ee:2a:60:8d:ce:9e:fe:54:28:67:82:58:33:83:73:21:57:
         6a:b2:2c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:23 2025 by rpki-client