Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ab6f2bb-ef87-385d-af77-45845a8102fb.roa
File:                     1ab6f2bb-ef87-385d-af77-45845a8102fb.roa (raw, json)
Hash identifier:          6YbhCGUUcDS3IlrHSeTbMZwsSluwO1/o4gNI0Q8Ki1U=
Subject key identifier:   FD:83:05:60:D0:C1:DC:FC:73:AD:41:91:47:18:99:D5:8D:F9:CB:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530B015A57EFA7267C940080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ab6f2bb-ef87-385d-af77-45845a8102fb.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     396590
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0b:01:5a:57:ef:a7:26:7c:94:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=0b265489-3cbf-4ccf-8c55-c581039e7f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:9a:43:58:c8:17:75:7c:19:db:4f:b6:96:
                    f6:b1:2d:f3:ac:8f:9a:6c:9c:57:00:c5:11:b9:44:
                    32:5f:77:b9:2e:04:d6:a6:7f:51:61:6a:f6:12:c3:
                    40:b9:e0:11:27:8d:a9:00:66:8e:6e:e9:32:cd:a7:
                    60:7f:f1:9e:e2:60:c6:95:be:25:11:01:a2:c8:79:
                    8a:a6:51:a2:3d:24:5c:29:3b:78:e7:0b:95:60:72:
                    32:54:b2:b3:52:3e:21:69:c7:59:3b:e9:fd:0c:3b:
                    14:85:70:02:1e:3a:08:81:b3:54:ea:ea:8c:e3:a8:
                    81:67:6d:23:32:b0:5b:7e:bf:b3:a6:f8:52:d5:d9:
                    d2:70:35:92:4e:a6:2e:38:4a:2a:70:fc:e9:26:a2:
                    ab:23:8f:a2:2c:5f:98:79:05:bf:a1:59:b9:71:12:
                    bf:b1:33:4f:82:e3:c0:a5:72:f0:b2:5a:ad:d3:a4:
                    bf:c6:d7:86:87:9e:46:69:de:d4:cf:bd:63:d4:3b:
                    ff:58:5e:00:45:59:bc:d8:24:bb:d2:90:33:c1:65:
                    87:c8:a2:3e:66:a0:39:48:da:c0:ae:4e:4e:ba:14:
                    69:2b:e6:ea:1f:3e:bb:74:0f:b4:ff:2e:f1:89:d6:
                    83:70:5f:eb:92:77:d1:39:77:59:7a:8c:0a:22:55:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:83:05:60:D0:C1:DC:FC:73:AD:41:91:47:18:99:D5:8D:F9:CB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ab6f2bb-ef87-385d-af77-45845a8102fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:20:6a:36:e3:74:58:36:89:64:9d:a8:b3:7f:02:08:e5:47:
         0a:51:8c:56:33:89:60:64:e6:1e:39:0f:42:ee:fb:2e:19:40:
         e6:4e:23:44:af:84:3c:b5:97:82:df:a1:ad:90:61:dd:c0:a9:
         88:90:fa:fa:0a:f7:5f:61:33:bc:e1:e0:db:54:3d:95:9b:0e:
         9e:31:5b:fb:ad:07:e6:7e:21:40:1e:cf:0e:4e:2b:0a:0f:d9:
         28:f4:66:0c:63:54:54:f1:d2:60:72:52:00:6e:56:02:eb:6c:
         93:f9:2b:b2:5a:9d:f0:5c:94:8c:9b:b9:41:7c:f1:22:17:f2:
         bc:77:a6:c6:1e:db:50:44:31:c4:28:e2:b3:a7:49:b8:0e:6b:
         0d:ea:b0:47:3d:2d:90:41:a1:bf:de:77:c1:72:db:49:a9:39:
         ae:60:96:7e:56:28:20:f8:cf:3c:fd:c4:29:fd:8d:23:d2:a9:
         61:d2:28:8f:9a:0f:0d:4a:8b:f0:62:7d:16:cd:0d:a5:38:fb:
         67:50:d7:45:a4:e2:28:a6:f6:77:5d:a0:d8:c0:bc:a2:b2:41:
         bd:b5:7d:68:af:7c:74:5b:65:94:c3:d8:f3:c9:6d:d6:74:f2:
         e7:b0:89:5c:f5:c1:8d:08:96:66:5b:e3:f1:f0:e1:7d:98:9c:
         bf:55:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:26 2025 by rpki-client