Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917ee2cf-df07-3541-9904-6376e33dd3e4.roa
File:                     917ee2cf-df07-3541-9904-6376e33dd3e4.roa (raw, json)
Hash identifier:          c9wnbpbyKMboWtzFANyd0aoFi6CnLxKP9NuVwX8KpY4=
Subject key identifier:   B4:63:8F:41:8E:BC:85:77:BE:96:D9:BF:D1:36:4B:A9:CB:ED:DF:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E918220F0C7B93EBA5900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917ee2cf-df07-3541-9904-6376e33dd3e4.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     396827
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:91:82:20:f0:c7:b9:3e:ba:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=e80a7a44-a35d-4434-87b4-abf3f9aac4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:47:5e:92:8c:0c:78:6a:37:0c:83:52:c0:
                    89:ee:19:f3:ee:6e:3e:70:2b:ab:43:70:ec:be:ec:
                    ec:da:5d:9a:cb:c8:7b:51:df:05:d1:78:a3:30:4d:
                    22:5b:69:5d:cd:3a:9c:c3:bb:05:f0:d4:1e:a9:d0:
                    55:44:87:e7:23:03:1b:4e:05:7f:ab:f1:f2:2e:c3:
                    43:48:b2:53:0a:69:e0:aa:c9:4f:65:f0:4b:35:5a:
                    dc:80:b0:aa:14:0b:ac:d7:2e:1e:57:7b:a8:98:64:
                    59:92:c1:65:b1:1e:33:8e:d9:fb:45:07:bf:c1:e4:
                    69:89:b7:a1:cb:ae:e3:6e:5c:56:94:cb:2b:76:b3:
                    bc:90:f1:e2:67:3f:5a:b6:6a:b6:d2:ea:21:b9:1c:
                    d5:df:a0:b2:05:46:b8:4f:5f:0f:85:e8:cc:40:8a:
                    29:5a:1a:09:af:e4:19:f6:31:40:57:e8:cf:f5:fc:
                    6d:3f:da:fb:04:f9:42:d0:70:f3:8f:27:6f:29:5b:
                    e7:93:9e:b9:01:ae:97:ae:22:47:31:cd:ed:4b:43:
                    c0:34:58:1a:da:01:38:29:4e:92:46:88:3c:ec:d9:
                    20:7f:02:47:01:e8:5a:29:ea:a0:83:03:f0:21:94:
                    bd:c2:87:8c:c9:19:7c:46:6c:6a:b2:eb:5c:03:8a:
                    49:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:63:8F:41:8E:BC:85:77:BE:96:D9:BF:D1:36:4B:A9:CB:ED:DF:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/917ee2cf-df07-3541-9904-6376e33dd3e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:ee:1e:0d:07:21:20:fe:9d:2f:02:2c:fd:40:6d:bd:fc:
         1b:ff:90:e4:a7:b9:b0:72:f8:17:6d:a4:cb:15:7f:1f:ed:e9:
         d9:fe:c4:65:61:5d:b9:0e:dc:37:8d:8b:d9:8d:dc:22:9a:f9:
         24:7f:22:5d:84:38:fb:a6:db:2a:ea:c2:c0:89:36:c7:eb:81:
         1b:c6:82:ad:35:81:81:38:59:4d:9a:f6:77:c6:f0:3f:c8:3d:
         f9:bf:d1:1f:73:7f:a1:a9:e0:0d:09:a9:ba:25:5a:e0:c5:c3:
         6d:f2:33:46:f4:d5:fc:f7:ab:55:48:a5:6f:22:79:32:3e:cb:
         5e:6d:ba:da:ba:9e:64:aa:a7:26:b5:40:bf:22:11:19:52:cb:
         8c:f0:f0:f5:ae:3d:4a:bb:01:7f:47:ab:27:0f:26:a1:c7:19:
         e3:26:d6:f1:e7:61:2a:f4:1d:dc:e8:75:6a:2c:6e:60:c9:82:
         59:a6:53:96:ef:11:02:e2:6f:6d:5b:38:a2:40:dc:4b:eb:92:
         17:74:66:ac:11:48:12:db:41:f9:c8:38:10:c2:fa:e8:da:9f:
         9d:72:10:f6:49:b4:20:e8:59:b6:e8:71:30:f7:e4:ed:f3:6f:
         a4:5d:7a:9e:83:01:c2:9a:f0:1b:4a:14:01:e8:2b:df:e9:91:
         f3:4d:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:53:55 2025 by rpki-client