Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e65799ac-c8f0-3d19-bd3b-748ec701b472.roa
File:                     e65799ac-c8f0-3d19-bd3b-748ec701b472.roa (raw, json)
Hash identifier:          tcUNqcQSVxShBzyBjuNRsLwgCvKbyzrwfO5aYVnMGiU=
Subject key identifier:   0E:2D:DA:F1:FF:AA:10:C1:AB:C9:02:C3:B5:3A:94:5E:90:17:0B:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183EB1A9B064500513C3F10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e65799ac-c8f0-3d19-bd3b-748ec701b472.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396571
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:eb:1a:9b:06:45:00:51:3c:3f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=1dac4735-e364-4a4b-95d9-cf9a1998faf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:47:dd:fc:32:79:dc:34:a7:a0:d5:b6:85:
                    00:d7:60:c7:fe:5e:f0:19:bb:e2:2e:48:6a:d3:b5:
                    42:e3:75:d4:0b:ca:d2:e7:a0:f6:57:5d:5e:59:45:
                    aa:67:56:98:9e:6d:7a:c5:ab:96:3f:4c:77:0a:be:
                    0c:f1:36:41:45:8b:2c:6b:04:f0:7b:fe:13:1c:a6:
                    69:dc:fc:28:43:a6:38:f4:50:2a:9f:52:68:ca:23:
                    9e:9d:3a:e0:73:b3:70:20:ea:57:4d:00:19:7f:59:
                    8a:77:af:f4:db:bc:38:cd:24:6e:d2:47:33:cd:eb:
                    59:26:96:72:66:6e:c8:f5:33:07:a3:b3:24:55:82:
                    2b:0c:6e:ab:c1:44:e0:ab:3e:b1:74:c0:b5:f7:83:
                    20:00:99:1f:d6:7e:9a:b2:60:bb:60:06:41:c4:f9:
                    88:b3:5a:f3:c5:82:f5:df:8d:7e:83:3c:36:84:cc:
                    07:60:1b:8a:32:68:fb:bd:04:72:87:c2:85:c7:97:
                    82:d8:ed:f2:dc:b3:9f:47:ff:9a:48:59:a4:42:8e:
                    06:17:04:71:cb:70:71:da:aa:34:40:75:3b:2b:c6:
                    a5:99:9b:94:a4:a9:23:d5:29:4e:64:e0:54:4c:5e:
                    07:4a:71:a6:a2:57:87:cb:2e:1d:45:6d:02:92:8f:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2D:DA:F1:FF:AA:10:C1:AB:C9:02:C3:B5:3A:94:5E:90:17:0B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e65799ac-c8f0-3d19-bd3b-748ec701b472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:85:63:e8:be:7c:90:e0:d7:5d:3a:a3:cc:5c:47:66:9f:
         12:ae:d2:0c:95:7b:17:be:de:1b:aa:f2:ef:c5:75:32:54:2c:
         49:5d:f2:31:97:e0:70:7a:04:b4:b4:83:35:a5:47:a7:31:de:
         d3:d3:01:f9:69:15:f8:e5:dc:0a:5d:23:dd:d6:4c:eb:06:ea:
         34:04:20:fe:0f:9a:00:1f:2e:88:9b:54:84:21:4d:2c:61:a3:
         4c:d1:3b:69:a6:87:3e:8d:5f:de:6f:d1:94:e4:ae:dc:45:8b:
         36:cd:97:f2:c6:7a:f2:58:87:8f:fd:f2:14:57:61:8a:56:96:
         da:6c:92:bd:af:2f:b9:97:32:f6:23:3d:f6:e9:54:24:70:de:
         40:80:42:59:71:11:ac:cd:e6:4e:48:97:70:cb:68:a4:2e:54:
         fc:ac:03:79:d5:c2:86:9c:bb:1a:b9:c7:a6:f8:70:4d:df:08:
         86:82:f7:e1:de:31:cd:ad:79:87:cb:4d:d5:fb:ff:dc:e6:fa:
         68:6c:cb:c5:ae:80:b4:81:d5:55:6d:dd:f6:d7:0c:5c:4e:9d:
         3a:65:8f:80:d7:eb:e5:4e:fd:02:cc:df:a5:9f:7a:f1:49:c8:
         20:e2:65:2e:a3:8d:21:37:a3:0e:71:e8:35:b0:ef:3c:c5:d7:
         d5:13:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:35 2025 by rpki-client