Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0923dbe-afbd-3328-a267-45eee81abe26.roa
File:                     d0923dbe-afbd-3328-a267-45eee81abe26.roa (raw, json)
Hash identifier:          Q8qcCpip1sKLqp+kgVAATqHgED5NAAWdJNxnieQYYAA=
Subject key identifier:   18:A0:42:19:CD:F8:CD:59:88:AC:C8:F3:DE:54:AD:5C:8F:CE:FC:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849403985F3DFD94BC5C63E9EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0923dbe-afbd-3328-a267-45eee81abe26.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     36629
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:85:f3:df:d9:4b:c5:c6:3e:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=fb7ee046-6f42-4eda-8aa4-6476012794dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:85:56:1c:fe:6c:f1:ab:6f:06:93:32:55:
                    86:b8:8c:06:45:f4:53:30:c6:45:3c:98:9c:b3:84:
                    d2:84:6b:0b:e5:01:99:7f:ec:0c:5f:12:74:22:b1:
                    76:61:e3:47:5e:a3:2c:d2:02:7b:63:58:84:3b:a6:
                    9c:40:bb:b7:80:32:15:6f:3b:23:f7:51:04:c4:d7:
                    36:ff:3b:9e:f9:fd:60:80:8d:60:2d:df:a2:6e:8f:
                    e5:8c:d3:d7:0a:76:0e:e5:04:d3:fa:7e:f9:f9:2f:
                    99:f3:53:1a:12:fb:66:2b:25:c3:78:53:2b:3e:38:
                    2c:35:bf:4b:55:a1:54:b2:87:22:2b:85:fd:84:0b:
                    02:06:f3:82:7e:2f:b9:a1:cc:1c:5d:71:7d:a4:ad:
                    85:14:de:e8:20:e0:49:94:43:57:4a:5e:4a:77:7c:
                    2a:5d:28:89:b9:b6:7b:bb:f5:20:e8:14:79:f0:cd:
                    c9:7b:a2:11:16:e7:6d:76:ce:15:c1:de:cd:2b:84:
                    18:0b:f4:0f:99:e3:2b:98:8b:dc:40:ab:d9:8b:69:
                    ca:40:0f:dc:ff:84:b9:0b:67:c0:d5:51:cb:42:7c:
                    67:a7:c2:19:44:ac:eb:3f:15:d4:cf:6e:55:89:bf:
                    74:31:ae:a0:cc:13:23:fc:12:57:4b:5a:98:cc:68:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A0:42:19:CD:F8:CD:59:88:AC:C8:F3:DE:54:AD:5C:8F:CE:FC:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0923dbe-afbd-3328-a267-45eee81abe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:15:c8:30:37:19:50:a2:48:fa:8d:85:2a:27:de:45:43:
         e4:7b:08:71:a6:be:54:d1:ab:f8:77:c9:af:67:16:db:c6:8b:
         fd:d3:e1:43:8c:2c:42:fe:9b:03:e9:ed:8f:5b:11:ae:51:c7:
         77:6f:7b:0d:86:74:2c:34:7f:10:e2:c2:0e:8f:60:e9:57:3c:
         8b:3d:8d:72:1d:67:4e:6f:8e:b8:c8:ba:fd:88:05:0c:83:e4:
         c7:7c:48:3b:db:ef:e3:30:fa:a9:b9:36:b8:93:15:59:2d:13:
         48:31:3f:fd:cb:12:9e:d6:d3:48:97:ff:91:b7:0f:f6:0a:7b:
         36:94:d7:00:d0:ad:f5:65:2e:b4:32:83:36:18:df:cb:13:67:
         a8:f2:b2:98:4a:48:14:e2:59:0c:f7:d7:37:37:6e:84:a0:19:
         a8:3d:bb:71:e5:5f:3a:d9:9b:eb:fe:91:d9:20:b6:77:60:5f:
         50:8d:e5:a3:e6:d5:f8:39:21:8b:50:cd:5e:90:57:a0:42:7c:
         db:12:f4:f0:24:46:96:6d:3c:a4:e1:a0:9b:49:f6:09:40:5a:
         0e:83:83:21:5b:ca:04:34:50:5d:c9:e2:f6:f7:34:43:67:e5:
         66:11:d8:e2:04:10:2f:cd:8f:f7:20:b4:0d:35:29:5d:3e:3e:
         69:83:51:da
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYXz39lLxcY+nsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
ZmI3ZWUwNDYtNmY0Mi00ZWRhLThhYTQtNjQ3NjAxMjc5NGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgruFVhz+bPGrbwaTMlWGuIwGRfRTMMZFPJic
s4TShGsL5QGZf+wMXxJ0IrF2YeNHXqMs0gJ7Y1iEO6acQLu3gDIVbzsj91EExNc2
/zue+f1ggI1gLd+ibo/ljNPXCnYO5QTT+n75+S+Z81MaEvtmKyXDeFMrPjgsNb9L
VaFUsociK4X9hAsCBvOCfi+5ocwcXXF9pK2FFN7oIOBJlENXSl5Kd3wqXSiJubZ7
u/Ug6BR58M3Je6IRFudtds4Vwd7NK4QYC/QPmeMrmIvcQKvZi2nKQA/c/4S5C2fA
1VHLQnxnp8IZRKzrPxXUz25Vib90Ma6gzBMj/BJXS1qYzGjkVQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBigQhnN+M1ZiKzI895UrVyPzvxzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDA5MjNkYmUtYWZiZC0z
MzI4LWEyNjctNDVlZWU4MWFiZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBkbBXIMDcZUKJI+o2FKifeRUPkewhxpr5U0av4
d8mvZxbbxov90+FDjCxC/psD6e2PWxGuUcd3b3sNhnQsNH8Q4sIOj2DpVzyLPY1y
HWdOb464yLr9iAUMg+THfEg72+/jMPqpuTa4kxVZLRNIMT/9yxKe1tNIl/+Rtw/2
Cns2lNcA0K31ZS60MoM2GN/LE2eo8rKYSkgU4lkM99c3N26EoBmoPbtx5V862Zvr
/pHZILZ3YF9QjeWj5tX4OSGLUM1ekFegQnzbEvTwJEaWbTyk4aCbSfYJQFoOg4Mh
W8oENFBdyeL29zRDZ+VmEdjiBBAvzY/3ILQNNSldPj5pg1Ha
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:34 2025 by rpki-client