Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d25c327-a070-351e-a06e-6f8482438720.roa
File:                     1d25c327-a070-351e-a06e-6f8482438720.roa (raw, json)
Hash identifier:          R34dVEqCkkSpd44w9g0wtR8AJospnnpAnsIYT63Dr1M=
Subject key identifier:   DE:41:BA:86:80:DF:77:CC:EF:16:62:ED:3F:76:7A:2A:71:88:45:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAADAECA98FF8FBB9A46F70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d25c327-a070-351e-a06e-6f8482438720.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     397199
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:da:ec:a9:8f:f8:fb:b9:a4:6f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=2692085e-a4fe-41e6-a7a1-f715b3de1d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:0c:f7:aa:d0:89:2e:93:6b:9a:27:1f:97:
                    5e:16:1c:90:0e:ea:5f:fe:8c:74:0b:81:17:94:9d:
                    fe:72:bc:06:19:3e:9f:d4:b4:74:17:b1:51:95:a7:
                    55:40:15:9d:81:ec:5e:76:33:47:74:d0:a2:7e:91:
                    b6:e6:83:2d:8f:52:26:be:64:11:94:71:0f:38:ee:
                    43:ef:ca:d7:fc:68:3e:50:7d:07:5a:ee:0c:57:57:
                    a1:86:be:fa:85:0c:56:2a:dd:d8:10:c8:50:d5:04:
                    b4:3e:24:f0:2a:3f:02:93:00:7f:4a:3f:88:3b:74:
                    7a:f6:fa:91:6e:56:f9:c3:84:06:d5:67:c9:47:86:
                    bc:9d:5a:f3:03:e6:52:e3:71:38:21:f0:ab:b7:31:
                    72:ec:31:7b:c2:77:06:69:3c:68:b8:b1:ef:87:e6:
                    e0:77:d4:9d:78:43:77:8d:2a:e6:6e:3e:4d:94:79:
                    d0:70:bc:a7:36:0d:77:80:8c:90:2e:88:95:82:37:
                    5e:d7:81:40:9c:6d:e5:ff:ff:11:fc:f6:3a:e8:a2:
                    30:ea:c6:e0:53:3a:24:53:8a:1c:a7:30:8c:e9:dc:
                    9b:71:9d:9c:b8:42:10:e9:0a:c8:6b:79:06:f4:fb:
                    52:53:0d:89:cb:8d:1c:ed:c5:bb:36:74:d2:5e:c8:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:41:BA:86:80:DF:77:CC:EF:16:62:ED:3F:76:7A:2A:71:88:45:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1d25c327-a070-351e-a06e-6f8482438720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:9c:ba:b2:ca:43:5f:58:5d:a2:e8:5a:02:f8:f6:e6:57:
         70:9c:94:c7:31:de:0c:6f:8c:fb:f5:99:ff:1a:d7:da:4b:ac:
         62:15:9e:37:13:4d:ea:6a:66:12:9a:ba:86:6f:0d:f3:0c:e2:
         a4:b6:63:a8:8e:45:52:bf:8a:82:10:78:6a:77:2f:96:fd:ab:
         2b:c2:8a:39:fc:8f:50:6f:e3:82:2c:08:d7:58:91:98:47:c0:
         47:77:8d:ec:6a:24:3b:39:f9:2f:c2:9d:48:26:ee:f0:30:7c:
         ca:43:28:6a:ae:b1:a0:1b:6f:3b:34:b9:1d:12:17:55:1e:be:
         4f:c3:ed:cb:6f:11:e0:db:68:7c:90:47:00:9a:f8:a1:e3:50:
         42:6f:7b:85:22:4b:fb:10:3a:44:ee:4a:93:e2:28:09:7a:d7:
         18:24:75:81:54:eb:11:21:54:be:44:55:e6:b4:4f:14:54:29:
         ea:e2:80:e6:cd:cf:63:d0:4f:ee:98:f1:b0:ec:85:f1:4a:9a:
         45:46:83:92:f2:08:9e:a2:49:59:cf:90:3e:26:63:bc:69:61:
         33:25:db:34:48:85:e5:d8:2a:15:1b:b1:8a:08:af:e4:f5:0c:
         8b:c1:04:28:32:f7:55:0e:1a:51:63:7c:ea:bf:78:99:e4:da:
         d1:05:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:05 2025 by rpki-client