Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd12d4bd-b7be-3b21-8672-abcf99a23ed4.roa
File:                     cd12d4bd-b7be-3b21-8672-abcf99a23ed4.roa (raw, json)
Hash identifier:          y9vEr+48HgQBezTQfQDGbvM15pEQCrVOxXNBSFHEGEk=
Subject key identifier:   03:3B:FF:80:9F:03:96:D2:55:BC:3D:02:32:E2:97:6C:47:B0:15:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E439EE17C80AADD7DAB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd12d4bd-b7be-3b21-8672-abcf99a23ed4.roa
Signing time:             Tue 21 Jan 2025 13:34:32 +0000
ROA not before:           Tue 21 Jan 2025 13:34:32 +0000
ROA not after:            Mon 21 Apr 2025 12:34:32 +0000
asID:                     396591
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:43:9e:e1:7c:80:aa:dd:7d:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:32 2025 GMT
            Not After : Apr 21 12:34:32 2025 GMT
        Subject: CN=71f802b0-b965-422c-b399-e2af02193dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:c4:de:37:ec:32:00:4b:dd:55:58:60:c6:
                    66:cd:de:7e:3f:23:ad:d0:c5:e2:5c:e2:d9:27:33:
                    c7:d4:25:7b:05:bd:84:a3:75:01:59:6f:51:87:20:
                    45:46:2c:2c:74:3e:49:64:57:16:92:33:e7:52:8a:
                    a1:66:34:a0:b5:ed:11:3b:9a:21:06:3a:02:da:af:
                    79:c9:ab:d4:c2:6c:02:e4:15:65:56:b2:32:b6:b7:
                    69:23:84:f0:f1:80:39:76:e5:3d:3a:ac:ba:51:83:
                    7b:e6:c6:7d:48:b5:f2:5b:08:8a:a8:4f:e3:73:f9:
                    98:b1:03:ff:55:a5:b1:3e:65:04:84:32:5f:7e:3e:
                    10:7a:24:82:27:53:47:8c:1b:c5:51:dc:cb:1a:e1:
                    48:e8:fe:47:65:2e:cd:45:de:50:5c:ed:de:60:70:
                    f8:73:e0:75:f7:33:66:29:8d:0e:66:77:3b:9d:a2:
                    96:df:79:13:45:54:11:0d:56:9e:e4:89:29:a4:54:
                    1f:69:96:54:7b:d3:cf:3c:17:23:86:84:c3:3d:01:
                    9a:6f:a4:81:6d:a4:9c:fc:01:c1:78:e0:ca:69:51:
                    68:40:92:24:1d:a1:4f:7d:1a:b5:96:50:02:a7:16:
                    ec:35:8b:e0:1d:fd:b0:57:cc:d3:cb:f8:49:12:04:
                    3a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3B:FF:80:9F:03:96:D2:55:BC:3D:02:32:E2:97:6C:47:B0:15:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd12d4bd-b7be-3b21-8672-abcf99a23ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:85:b8:9b:9d:b8:2e:e3:f9:ae:60:b1:e5:57:fe:3e:26:cb:
         47:f0:8c:dd:e4:69:fa:4c:bf:14:bc:0d:f5:5a:4f:f2:b5:b2:
         47:ab:15:30:c3:3e:22:00:65:97:40:1c:dd:59:ef:e5:56:aa:
         9e:2b:63:01:b8:0e:57:b2:ad:99:08:1c:95:89:35:91:64:ba:
         15:22:63:52:3b:d6:97:e9:f9:e2:67:7d:84:44:95:a9:b7:75:
         be:22:01:fd:56:9e:dd:e9:8f:29:59:17:e5:0c:51:9e:09:ba:
         34:f6:9e:7d:15:a2:08:03:11:85:ac:b7:3d:67:2a:93:20:91:
         ce:03:8d:e8:f3:72:b9:de:29:ec:ea:06:29:e3:d0:2f:cb:b6:
         fc:c2:05:68:9d:ed:a9:7b:73:b8:0e:42:9e:70:9a:3e:21:b9:
         cc:51:52:32:bf:a5:5f:66:d9:62:f2:c3:ae:8d:a2:7b:fd:05:
         a5:6e:3b:8d:35:de:4b:a1:ef:c3:b4:7c:8b:78:6b:08:16:9c:
         1a:5a:e4:cb:8d:b9:ef:62:9b:f4:83:81:75:d4:9d:84:7c:e2:
         e8:e4:78:27:a9:8a:85:b5:8e:1f:6f:f9:c5:8f:fc:54:b6:97:
         aa:6a:25:a8:f9:ec:8d:12:4c:23:b5:fd:41:d0:6b:98:38:77:
         72:6e:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:47 2025 by rpki-client