Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa
File:                     0ca5835b-bb46-3027-94f0-5e5867970634.roa (raw, json)
Hash identifier:          LV4KF1wNKmuZECVRC5r3XLCsYG3yZD8jiUCKf40e/xE=
Subject key identifier:   5A:B9:D3:7A:F2:D5:AD:4C:AA:C8:61:4B:BD:58:CA:71:DA:9B:61:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005C299E1018EB249E9FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     397198
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5c:29:9e:10:18:eb:24:9e:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=ddd255bf-4f00-4ee7-816e-d25d9e4218c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:cc:d9:12:6e:f8:5b:ac:c4:88:cc:f9:60:
                    84:d6:1d:90:a9:c4:e1:73:a9:c2:82:ea:ad:40:66:
                    c7:98:df:3f:26:d6:6e:26:7f:ca:87:c6:a1:55:ad:
                    ef:3f:cf:c9:de:8a:0a:8e:4c:7b:dc:da:7b:da:4e:
                    11:2d:2e:90:82:c1:1f:f6:98:97:1f:7f:c6:53:31:
                    49:88:5a:84:6e:b7:37:f0:c0:14:65:a8:64:f3:08:
                    5d:86:c4:80:11:61:6a:df:f8:05:8a:16:8d:75:e2:
                    83:d8:f7:b7:fa:66:5b:81:38:d6:fd:64:6a:f3:ed:
                    f7:98:83:3f:e6:78:90:a9:91:1b:da:98:e0:8c:8a:
                    0a:99:62:4b:32:ce:ac:41:c7:c6:b5:5b:5f:fd:32:
                    f3:5a:1e:b0:11:73:af:2b:10:ec:1d:01:65:b6:4b:
                    6c:04:38:f2:27:2f:c6:dc:b0:b4:cb:af:71:54:be:
                    ab:51:b2:97:d9:8c:13:b1:cc:d6:e0:ee:4d:dc:e8:
                    03:9d:27:52:04:2a:2d:e3:43:1d:cc:ee:b9:8a:5b:
                    e5:55:c5:dc:7e:d6:1b:cd:59:53:5d:0b:40:92:b6:
                    80:99:96:42:5b:0e:a5:6a:7c:5e:26:55:8b:4c:cb:
                    67:d5:2d:69:51:c2:14:f1:61:eb:d9:77:08:7b:5b:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B9:D3:7A:F2:D5:AD:4C:AA:C8:61:4B:BD:58:CA:71:DA:9B:61:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ca5835b-bb46-3027-94f0-5e5867970634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:fa:84:09:fd:1c:73:15:79:79:0e:8a:f4:01:12:45:a7:51:
         01:a0:02:dc:0f:8b:72:69:d1:72:bf:4d:8a:21:64:aa:8a:4b:
         82:9a:6e:5d:ef:af:77:40:0a:46:54:ed:35:0e:30:c3:6b:53:
         c3:77:97:e9:90:67:ac:d8:e9:38:ac:09:6b:68:6d:56:a6:21:
         43:e0:c7:eb:f3:f6:7a:cb:fc:18:d3:f2:cb:57:1f:33:0e:ac:
         62:1d:6f:87:06:4e:69:7f:1b:26:1e:07:fd:aa:3d:0b:a1:50:
         35:85:b8:a9:40:c3:f9:64:7e:50:6d:47:62:23:d8:cd:9a:13:
         4c:e6:55:9f:8d:7f:f2:e0:54:c1:7b:16:00:bb:fd:76:d6:c5:
         c8:3b:cc:7c:87:70:3b:de:6f:04:99:60:7c:a6:97:6c:e3:a9:
         56:e5:4c:22:92:34:5d:3f:6e:41:d4:1f:73:6d:9c:5c:14:00:
         3b:c2:9a:0a:24:26:01:d0:bb:98:3b:b0:15:1f:b2:b9:70:cf:
         86:c5:c2:a1:4d:4b:15:3a:14:37:09:32:b8:3d:8b:27:39:9b:
         6f:8a:8b:62:9c:cf:55:f7:35:27:f3:49:3a:da:f6:fc:3f:0c:
         a1:a3:18:27:65:47:24:9c:d2:80:f0:20:60:f3:87:f2:8a:a6:
         88:3a:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:16:56 2025 by rpki-client