Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
File:                     18ac3232-d363-39a6-b685-525db42b7d98.roa (raw, json)
Hash identifier:          GV+qiBgSD+GzAZsogf+44UfB32oRFENzL/dgZijb04A=
Subject key identifier:   32:66:4A:5A:EA:CD:DF:15:66:0B:53:1D:02:B1:A3:35:C8:80:79:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242EB52EFC9D9BBE74CF700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
Signing time:             Thu 19 Dec 2024 13:45:04 +0000
ROA not before:           Thu 19 Dec 2024 13:45:04 +0000
ROA not after:            Wed 19 Mar 2025 12:45:04 +0000
asID:                     396616
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:eb:52:ef:c9:d9:bb:e7:4c:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:04 2024 GMT
            Not After : Mar 19 12:45:04 2025 GMT
        Subject: CN=eb0edad2-b775-4049-8e1d-ceba2f27ed12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:a5:ac:ad:e1:5b:b9:24:96:bb:24:76:3c:
                    79:c9:d1:68:00:cf:2d:f4:52:eb:41:dc:be:72:84:
                    8a:e9:b9:66:0d:41:cc:93:07:bf:74:77:78:d7:aa:
                    61:c0:4d:f0:c5:8f:b3:8b:7d:f3:a0:da:3a:bb:67:
                    41:ce:c2:aa:d4:be:07:8c:65:2d:06:2a:cd:ec:a2:
                    dc:5d:58:d6:7e:fa:d6:a8:ea:4d:98:eb:72:cb:b7:
                    9e:04:e3:98:10:95:19:52:58:1a:fe:01:49:18:30:
                    41:ff:8c:41:d9:40:51:be:dd:fb:84:88:ae:1a:76:
                    36:bc:88:a1:fd:dd:da:7e:65:88:03:e5:00:35:6d:
                    e8:2c:c2:54:1f:a2:eb:3e:02:9d:fe:a5:55:a2:e3:
                    8b:32:b5:61:eb:ff:2d:89:b0:09:6f:c9:cb:bd:ad:
                    38:e4:52:e1:45:49:52:11:71:e4:b1:07:d5:59:ee:
                    36:63:7d:63:82:f9:2a:fa:09:3e:f8:10:8a:74:38:
                    f2:6a:d9:60:c5:36:81:87:52:82:3c:b0:b5:d2:c7:
                    82:52:a1:ce:99:99:aa:88:57:7a:72:68:a1:f9:3a:
                    85:d8:cb:8f:69:de:3e:ad:9b:b8:a5:35:c3:36:d8:
                    1f:40:23:1d:a6:3d:f5:0b:d6:9d:48:cc:33:1a:36:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:66:4A:5A:EA:CD:DF:15:66:0B:53:1D:02:B1:A3:35:C8:80:79:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3e:97:b2:55:0c:06:38:26:0c:0d:48:e1:58:a0:23:1f:cd:
         f7:3c:ea:55:b7:87:4c:86:cb:d2:30:c8:4c:76:0a:6e:17:b1:
         e4:15:9b:59:c7:63:ba:be:82:01:69:5e:56:a2:2e:b7:d1:ca:
         f7:06:f4:81:df:99:92:20:5f:1a:bb:78:8b:61:e8:2b:af:89:
         47:60:ce:04:34:77:68:d0:96:87:05:2d:c0:24:28:8f:cc:66:
         0e:32:ee:37:47:ea:d3:40:fe:28:44:7e:cc:d8:d6:0d:2d:22:
         f9:79:2d:79:69:98:73:85:1f:3f:8b:45:77:76:33:fa:ec:1a:
         6b:d4:7d:99:54:be:44:39:f1:c7:29:b8:6f:d5:24:45:42:5b:
         53:2c:cb:74:f8:58:6d:eb:72:7f:72:75:43:cc:7e:cd:aa:17:
         71:b1:e3:d6:06:27:f0:11:6b:ad:02:4a:4f:b8:73:d6:b1:32:
         3a:ef:7e:d3:d6:53:5f:48:88:33:d2:5d:d6:9c:3f:00:13:20:
         ab:5c:0a:25:cb:0e:5c:bd:b9:ec:2c:ac:49:58:44:ff:d7:14:
         1c:17:be:86:a7:8a:4c:ae:16:9e:34:bd:16:86:a5:b4:34:b9:
         2d:76:e9:fa:8c:eb:73:e1:5a:86:8a:d4:13:41:3f:4e:1b:db:
         6d:56:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:58 2025 by rpki-client