Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eee4525d-d5eb-34d6-b2c3-c5e2c8314e54.roa
File:                     eee4525d-d5eb-34d6-b2c3-c5e2c8314e54.roa (raw, json)
Hash identifier:          hA9IWWZJZ694VOteS3UUMMYcIpczDKKXQ+ZWUQVgaXk=
Subject key identifier:   26:B9:7B:53:32:E3:3E:8F:09:F9:2A:75:17:5D:5D:2E:50:3D:B3:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F834968723ABF5232FE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eee4525d-d5eb-34d6-b2c3-c5e2c8314e54.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     36626
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f8:34:96:87:23:ab:f5:23:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=e82bcc73-26c9-4f82-84de-02b7ec0fe169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:3d:dc:1a:e8:33:78:9f:4b:91:bb:c2:54:
                    aa:63:ba:35:cb:d7:9d:a4:08:39:eb:9f:6e:f4:24:
                    6c:4c:51:3a:4f:78:f3:39:e1:39:6d:f7:c2:ce:f4:
                    91:4e:a3:ea:a3:48:fa:28:bc:c1:07:ee:62:e4:31:
                    5e:45:d4:1c:ef:2b:dc:e2:39:5d:04:3c:6f:cd:c2:
                    3c:b1:1c:69:be:9d:79:dc:45:f7:18:cc:f3:68:27:
                    11:18:f4:81:1f:b8:44:fb:8f:3f:91:32:dc:92:6f:
                    7f:ed:d7:44:aa:ed:49:f1:30:5e:a4:3f:df:65:f1:
                    22:fe:c3:0a:bd:d5:86:ca:e4:c5:12:10:40:df:18:
                    c7:0a:3e:8c:68:1e:a9:29:e5:a2:7d:d7:0e:0e:c2:
                    3d:c3:03:c1:5e:fc:d9:a3:0f:4b:d0:e0:b9:65:df:
                    fe:c5:6a:62:51:07:57:94:f7:16:52:33:f4:bd:b3:
                    69:5e:92:12:bd:07:65:b4:03:ff:b8:b9:9d:f7:2b:
                    52:25:ed:91:de:9c:9b:64:4f:2a:29:f0:c3:b9:c2:
                    dc:79:a6:dd:d3:90:64:70:e3:57:53:d4:be:d4:ca:
                    5c:37:be:7a:6a:33:7e:5f:a9:a0:a9:1b:e9:f8:c9:
                    d4:f1:4a:f3:57:f9:15:d1:a2:1a:88:52:55:b6:bc:
                    e6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:7B:53:32:E3:3E:8F:09:F9:2A:75:17:5D:5D:2E:50:3D:B3:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eee4525d-d5eb-34d6-b2c3-c5e2c8314e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a1:75:02:72:ce:40:09:22:86:a4:86:bc:86:88:45:a0:3d:
         10:20:2d:68:0a:c2:6a:ab:80:eb:5e:04:8a:3c:84:f4:54:48:
         97:45:54:0b:87:ce:17:5c:63:9d:be:9b:d5:3f:36:4a:02:b7:
         ce:49:f7:01:f0:17:b6:b0:63:bd:e8:c2:da:ec:d5:00:e4:91:
         c7:af:44:63:ca:ed:e6:b7:ef:fa:bf:63:21:9f:9a:2c:74:a3:
         0a:cc:15:a1:b5:a8:23:e9:5f:2f:2b:19:af:2f:87:eb:36:cf:
         e0:04:95:6a:cd:4a:17:de:7e:34:0e:22:0f:c7:76:02:9e:d9:
         cc:a7:10:f1:3f:a3:be:59:16:92:2b:a6:4a:4e:e0:13:01:ca:
         05:c6:14:44:a7:a9:44:92:97:0c:d4:ce:8f:d3:c4:07:d2:c7:
         d8:2f:26:db:26:ea:ab:7e:07:07:7e:31:2a:1f:8c:2b:f0:f1:
         2d:0e:86:70:a3:bb:89:65:4c:78:ab:66:8a:66:8d:79:d9:71:
         e5:5f:27:b4:3e:cb:39:1d:8d:26:a3:44:79:10:37:f8:39:a3:
         73:79:bf:99:ce:5d:90:37:6c:49:f2:84:5a:96:50:5e:c6:4e:
         67:2e:2b:36:fd:03:7e:08:01:22:a0:01:34:f5:8c:cd:af:dc:
         e5:36:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:53 2025 by rpki-client