Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa
File:                     eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa (raw, json)
Hash identifier:          ArGj0EtfwkilvTNXLwDIQrUVNJ+C4cmRvEF7jFeXnIQ=
Subject key identifier:   85:09:47:25:84:0D:EF:9F:9C:44:56:90:BF:A6:C0:68:7B:9A:83:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60C723C0B13CC6F1BFF500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396589
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:c7:23:c0:b1:3c:c6:f1:bf:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=f601319b-461c-42a4-a595-cbd4a1303c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:9b:5d:05:cf:8c:a2:bc:da:df:ac:0c:54:
                    86:bb:f0:af:37:9b:64:a7:81:a0:60:e6:48:6c:cd:
                    78:6d:96:6a:27:5f:c0:54:17:44:f6:67:b6:cf:a4:
                    33:14:41:ea:42:51:87:ee:82:6c:4b:2b:e2:32:12:
                    61:f7:fb:05:3d:77:6c:db:3d:d8:8d:5d:a9:77:9b:
                    0f:d6:f7:0f:0a:c5:da:7e:cd:08:b0:20:22:d3:50:
                    e4:6b:3a:41:67:a0:6f:08:18:f8:a7:b6:c9:e5:12:
                    29:79:48:3f:da:41:cb:43:b5:f7:bb:07:5b:ab:c3:
                    af:f7:8e:87:55:ac:47:0a:6a:79:80:f6:1a:e9:fc:
                    80:ea:18:49:86:5c:1c:8c:83:2a:5a:a7:e0:7f:2d:
                    a1:cd:02:ae:08:eb:af:6c:29:3c:57:7e:49:ac:27:
                    b9:4e:d9:77:14:10:68:3e:ee:bb:3e:d3:c5:b4:d6:
                    ca:86:4a:6f:68:ec:94:e7:ce:9e:68:ae:b2:a9:14:
                    95:db:c3:83:a9:12:cf:17:11:5d:ec:88:fc:a6:74:
                    21:01:28:19:60:34:97:b8:b6:71:7a:fc:f7:f2:1c:
                    35:56:39:fa:88:43:3b:2f:16:eb:de:f1:42:92:1a:
                    a4:0f:8a:5e:e6:8b:bc:fb:f7:17:9d:fe:52:e0:aa:
                    de:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:09:47:25:84:0D:EF:9F:9C:44:56:90:BF:A6:C0:68:7B:9A:83:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eba5ca0b-f0d4-3d8b-808e-1f2314a49fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d0:72:35:be:52:e6:a3:c2:5a:a6:50:fa:68:b3:30:7c:3c:
         f1:8a:45:48:00:19:19:24:94:dc:47:61:af:a8:15:66:bc:a9:
         74:f2:ff:67:d3:50:96:9b:ef:26:09:1c:59:93:1f:21:53:7a:
         2f:e2:9e:ea:31:37:b5:06:6f:46:df:f4:86:50:be:40:35:89:
         03:5f:b1:cd:84:d6:60:aa:a0:6d:54:b8:36:43:8c:f3:6d:ab:
         34:67:b8:1b:b1:70:61:78:2c:0f:ac:29:0b:7f:44:a3:9f:f6:
         a5:d2:78:88:d7:8b:5a:be:3e:fc:d9:28:d2:52:9e:0e:2f:1c:
         b9:d1:f1:21:a0:36:d0:73:27:bc:0c:4d:4e:74:a3:89:35:c2:
         cc:02:ce:8b:80:9e:6a:28:b7:5e:96:58:ba:81:3a:0b:fa:e7:
         ae:1e:b2:2d:d6:21:8f:16:93:0a:d6:4e:58:e6:8f:ad:bd:26:
         0c:d3:2b:ec:44:a6:d4:16:da:f6:d7:c1:92:b0:d5:01:4c:38:
         18:d5:22:9a:d6:de:dc:ed:9e:8f:3d:85:02:1b:9a:1c:5d:03:
         e7:93:ca:f6:c9:11:1f:c0:8b:74:88:82:0c:cc:45:b2:54:f2:
         63:0f:2a:f5:5e:bc:78:74:20:f0:ef:51:7d:55:d5:b6:53:bb:
         cd:91:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:39 2025 by rpki-client