Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa
File:                     efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa (raw, json)
Hash identifier:          LZfmw/3Bfp2YShxl3jRu1raU5ijoY6QnCgsT8N+5u1k=
Subject key identifier:   5B:B5:57:15:67:E4:25:BA:9A:1B:E0:E3:E4:C5:24:07:DF:89:D3:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848CB08A4C669E75D84BFECF980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa
Signing time:             Thu 06 Feb 2025 13:33:24 +0000
ROA not before:           Thu 06 Feb 2025 13:33:24 +0000
ROA not after:            Wed 07 May 2025 12:33:24 +0000
asID:                     396570
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:08:a4:c6:69:e7:5d:84:bf:ec:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  6 13:33:24 2025 GMT
            Not After : May  7 12:33:24 2025 GMT
        Subject: CN=6a9fd5b8-18c6-4f1b-8543-b2286ba54f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:5c:e4:28:b5:40:76:a3:94:dd:3e:78:16:
                    69:3e:d2:3e:ca:1d:50:09:8b:af:e9:08:44:34:1b:
                    f0:2a:12:99:aa:23:47:18:7b:b5:98:7b:8e:87:99:
                    68:d0:77:79:5f:ca:33:2e:e4:e0:e8:4e:90:83:58:
                    55:b7:31:cf:cd:88:1e:04:a7:a6:59:57:75:8b:13:
                    3d:a2:12:39:3b:39:04:bc:92:8c:68:6a:01:18:fe:
                    36:a1:20:96:15:56:17:73:39:2d:7b:04:3f:30:b3:
                    d7:80:14:1e:b3:bd:79:82:5d:75:a7:83:f4:43:49:
                    cc:b9:32:52:9a:18:70:b7:ee:73:ac:59:24:7f:bf:
                    f4:c6:39:f6:78:1d:83:6d:ad:7f:88:00:03:4c:27:
                    3d:78:fb:dd:76:09:57:30:92:0e:82:84:a7:3a:33:
                    e3:5a:17:9f:a1:6d:1f:48:69:c3:1d:82:a3:3f:58:
                    7e:b4:fc:ee:19:c7:be:67:1d:81:04:21:bc:38:7c:
                    a2:a9:aa:79:b1:86:65:d9:9d:32:c4:89:55:e8:9e:
                    e2:b3:ee:43:c6:7b:4f:68:da:6e:6c:bc:44:8b:fd:
                    e6:b0:e1:bf:37:c1:75:57:ad:7c:0e:4c:be:f3:1d:
                    fd:f7:18:ae:80:3c:4f:63:d8:ee:a7:42:7a:8e:a0:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B5:57:15:67:E4:25:BA:9A:1B:E0:E3:E4:C5:24:07:DF:89:D3:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efed8634-f6fd-3c8f-a9a4-c132eda7411f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:7f:c7:fb:02:6e:b8:f8:f6:1e:98:2a:6f:5a:43:1d:92:
         dd:66:cd:59:63:8d:b2:cf:73:2b:c5:04:5a:3b:17:c7:60:45:
         fe:84:e6:4f:1a:04:dc:0b:aa:cf:eb:e8:09:0f:63:68:b2:88:
         d8:11:88:85:de:fc:6e:e7:60:97:37:bd:97:62:e0:7a:00:82:
         23:3f:a9:3f:61:4e:ac:37:03:76:b5:89:be:3d:fa:19:d2:0c:
         fa:9c:d4:fd:4a:6a:53:e1:df:2c:12:c1:52:87:b3:ef:06:1b:
         1b:2f:18:c2:a5:e0:9d:1d:f0:0d:e8:c5:3c:29:ff:73:cc:fb:
         80:ba:52:81:cc:c5:a0:88:2b:41:11:63:f8:9c:bf:e2:79:28:
         1f:5c:d6:da:28:af:36:b1:74:d1:cf:e1:fe:7c:21:ed:07:24:
         04:d2:7b:76:49:01:4f:51:59:4f:e8:33:3b:8b:ca:ac:2b:f0:
         22:fd:72:6c:2d:dd:71:df:75:4c:1d:fe:36:5d:5f:34:dd:38:
         d1:78:93:e6:aa:a5:44:ed:48:10:43:29:f2:da:dd:03:d2:0c:
         b7:50:f0:da:dd:c2:5c:df:89:88:78:04:7b:c8:2d:1d:b8:f1:
         d2:da:81:0f:0e:25:76:d7:7f:4a:f3:08:36:f9:51:60:69:d0:
         b3:4b:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:30 2025 by rpki-client