Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73932ffe-d45c-3106-9d09-83f2be75ddfb.roa
File:                     73932ffe-d45c-3106-9d09-83f2be75ddfb.roa (raw, json)
Hash identifier:          10BIhXd2OhKFKXAzttATzEGFFxlJ7Uhts62UukqGCSg=
Subject key identifier:   6A:B0:DB:E8:B1:C0:64:A5:90:AD:10:95:3A:7D:4E:19:7E:85:F2:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C5733630091E71CA6385C100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73932ffe-d45c-3106-9d09-83f2be75ddfb.roa
Signing time:             Tue 04 Feb 2025 13:33:16 +0000
ROA not before:           Tue 04 Feb 2025 13:33:16 +0000
ROA not after:            Mon 05 May 2025 12:33:16 +0000
asID:                     396541
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:36:30:09:1e:71:ca:63:85:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:16 2025 GMT
            Not After : May  5 12:33:16 2025 GMT
        Subject: CN=8ef8c16c-9b08-4c1e-beba-588440948307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:48:9a:68:d0:df:5e:b3:df:fe:c5:9a:f9:
                    e4:69:89:6d:23:f4:3b:a3:77:6a:16:e7:92:05:a8:
                    94:04:8b:db:24:aa:fb:93:fb:b2:dd:cf:19:f1:73:
                    aa:48:1e:a7:c1:0d:ab:49:93:36:95:c7:b1:1d:8d:
                    0c:a8:4e:d2:10:33:54:fa:ea:4e:83:fb:a6:34:91:
                    eb:51:38:30:d2:af:83:93:1d:b0:9a:27:c4:66:0d:
                    33:40:f7:c9:97:fb:88:c3:a7:03:9b:b7:bf:14:11:
                    8e:ff:69:4c:f4:a9:eb:9a:b0:cb:44:b7:af:4d:79:
                    00:f3:8f:6b:80:ee:b7:e1:a3:28:7e:63:a5:08:1f:
                    2b:61:2c:45:a2:a9:d7:b7:87:2d:20:7f:41:1d:59:
                    08:ea:73:0b:70:ac:f5:13:c1:56:25:27:01:6a:99:
                    3d:76:f7:84:9d:99:c6:cc:66:be:38:89:81:50:73:
                    ed:ad:8a:c1:90:c6:b0:0d:f3:af:5e:4c:fa:8b:56:
                    6c:d5:d1:fd:b5:1e:62:04:25:b9:22:51:8c:1d:80:
                    e8:64:65:5f:88:31:84:ff:e7:d0:f1:c4:79:19:5c:
                    6c:7d:1c:a7:09:4c:41:e6:b6:2f:7e:35:07:77:27:
                    99:bd:96:17:06:8d:28:ea:ba:a9:d6:d7:56:30:5e:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:DB:E8:B1:C0:64:A5:90:AD:10:95:3A:7D:4E:19:7E:85:F2:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73932ffe-d45c-3106-9d09-83f2be75ddfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5b:80:87:e4:19:fe:63:0a:d6:ef:5f:0f:76:17:9e:82:7b:
         0c:4b:1d:f2:b6:7d:1f:cb:15:a7:f2:7b:27:86:74:ac:d6:b3:
         32:d0:c5:e4:22:91:34:d6:a5:06:92:67:73:1f:fb:e0:83:fa:
         a0:7a:97:d2:30:fa:12:78:c1:31:9e:73:86:40:7f:47:a9:3f:
         59:1a:14:6c:ce:94:16:84:2d:d1:f9:3f:80:58:77:0f:15:6f:
         00:55:85:b6:cc:c5:38:f7:1b:15:ea:8f:a4:6f:1a:e8:1c:95:
         7b:b2:b4:cd:d1:0c:fc:1e:22:0f:a3:25:3b:b1:b8:82:5c:0f:
         5b:68:a6:9e:06:d5:cb:78:b3:5b:84:3f:2d:ef:20:5d:d6:e2:
         83:16:9e:f3:b4:aa:44:39:61:e0:0d:3e:2b:ce:c8:7c:7a:ef:
         34:5a:c1:68:6f:e2:67:37:4e:12:5e:d9:10:eb:db:91:6f:77:
         4f:eb:32:31:62:a0:15:90:6f:ee:35:54:66:64:ea:88:28:11:
         5b:ea:3f:7e:5c:19:32:5d:d4:e5:95:f3:b2:27:cf:7b:a7:8e:
         65:5f:65:a2:e2:62:00:a4:77:a8:3e:d9:94:a1:10:09:77:7c:
         b8:74:b8:e6:fd:b8:df:7a:22:be:03:28:62:be:21:79:1d:36:
         97:5c:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:19 2025 by rpki-client