Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa
File:                     ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa (raw, json)
Hash identifier:          aKlJG4e8cAIdgjBH4GzIjNY3N2GD7umCRj2XIqTezAw=
Subject key identifier:   39:58:50:B1:D4:68:13:0A:82:1A:1B:34:FB:C3:66:E7:B5:0E:13:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C5733272AB673762024F0CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa
Signing time:             Tue 04 Feb 2025 13:33:14 +0000
ROA not before:           Tue 04 Feb 2025 13:33:14 +0000
ROA not after:            Mon 05 May 2025 12:33:14 +0000
asID:                     396578
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:32:72:ab:67:37:62:02:4f:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:14 2025 GMT
            Not After : May  5 12:33:14 2025 GMT
        Subject: CN=70ba5bcf-80b6-42d3-a0bb-1243c6b1e1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:10:fb:5c:27:1a:85:3e:c9:9c:71:42:15:
                    24:6b:2e:2d:75:90:1c:bd:88:f3:42:cd:74:23:e2:
                    f8:79:5d:5e:4e:dd:ba:85:44:6b:67:16:7c:29:09:
                    14:8e:25:46:42:68:3f:98:ee:8f:06:73:5c:e6:a6:
                    d6:4c:76:10:09:91:8a:dc:92:5a:17:f6:60:36:d9:
                    35:56:ff:38:9f:65:17:43:13:45:01:7c:7b:04:10:
                    9f:38:f9:f9:d1:a5:4a:c7:ae:b2:04:4a:b5:95:69:
                    06:18:4a:21:ba:8e:a3:6b:22:91:dd:61:5b:69:9b:
                    48:39:25:23:68:b3:ac:fd:6d:5b:cb:e7:6b:77:68:
                    cd:47:1a:3c:8c:a4:06:52:77:96:11:08:56:c5:df:
                    e0:37:80:79:77:0b:92:53:b2:c1:99:33:25:29:87:
                    33:22:d3:2e:c3:68:95:79:be:e0:fb:e4:69:88:3c:
                    3a:0b:20:06:16:4d:a7:c5:fd:07:d3:4c:a1:bd:99:
                    4b:5c:0d:5f:99:2b:a8:52:c9:91:d1:3a:76:57:98:
                    17:e8:54:16:f4:db:c5:6f:18:66:4a:a9:00:ba:0c:
                    a9:04:e3:d4:49:ce:2a:11:1d:60:89:cd:d4:8d:00:
                    d6:e5:df:2f:38:a2:50:e4:fb:0c:77:54:73:c3:1d:
                    34:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:50:B1:D4:68:13:0A:82:1A:1B:34:FB:C3:66:E7:B5:0E:13:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac5b4b11-c9b7-3751-876d-c15d3bf79a24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:6c:f8:49:7e:cc:54:bf:8f:c7:df:56:26:2e:39:1f:37:
         c8:8c:d3:b2:41:ea:69:74:4e:40:51:c6:f1:0e:8b:10:63:e1:
         0e:bc:e6:c0:27:8f:5f:17:85:f0:79:04:8a:ad:a8:02:34:1e:
         fb:fd:10:e7:3f:63:d6:8d:77:fe:47:dc:49:eb:9b:cb:ac:2f:
         15:4e:16:95:46:38:c8:56:98:e9:53:6d:45:11:e1:e3:05:de:
         a6:5d:e0:64:03:f3:46:b2:31:98:34:9a:67:7d:22:c2:5c:e0:
         d6:73:1b:47:bc:cb:7f:1c:37:d1:37:dc:82:66:89:44:de:91:
         8a:92:19:6a:01:b8:32:82:27:55:69:a7:2f:30:ff:d6:2e:cf:
         c5:80:09:0a:4b:bf:bc:85:22:b1:47:4d:ba:73:2a:02:a5:f3:
         4c:86:af:63:74:e8:d2:e2:85:50:7e:b4:67:65:3e:ad:7f:1d:
         9f:e9:5f:24:00:b8:52:6a:64:a1:37:36:56:5d:02:15:9a:14:
         d3:e3:4f:ae:69:a5:c8:b9:94:64:71:38:39:04:91:77:b1:b2:
         0a:f9:5f:75:9c:c6:ef:fe:d1:56:c5:cb:48:74:23:64:d3:41:
         f1:b7:30:73:51:69:a8:9f:a5:2f:62:6a:8b:48:cb:58:79:85:
         7a:59:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:40 2025 by rpki-client