Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e409ec-f005-3951-ba0c-78df05021294.roa
File:                     23e409ec-f005-3951-ba0c-78df05021294.roa (raw, json)
Hash identifier:          r/JmZrfSRxCTY8GlhAL4i59N+sWpFoo5Q2nm6n8GDHg=
Subject key identifier:   DA:F7:57:6F:D6:8F:DD:59:FA:ED:92:40:43:6A:5E:59:90:99:F1:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424300CC5B6AB341837C6040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e409ec-f005-3951-ba0c-78df05021294.roa
Signing time:             Thu 19 Dec 2024 13:45:14 +0000
ROA not before:           Thu 19 Dec 2024 13:45:14 +0000
ROA not after:            Wed 19 Mar 2025 12:45:14 +0000
asID:                     396544
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:00:cc:5b:6a:b3:41:83:7c:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:14 2024 GMT
            Not After : Mar 19 12:45:14 2025 GMT
        Subject: CN=614a5573-8a84-4343-b07b-497b057d48e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:af:f9:f8:98:c7:eb:ee:b3:2f:e7:29:e1:
                    58:0c:bc:00:d9:6b:01:86:b2:d2:ad:54:84:c9:1d:
                    69:1a:59:71:55:5e:46:75:1a:e4:5c:18:b5:26:7e:
                    c3:89:80:55:97:17:60:b8:ff:4c:14:72:e1:a5:20:
                    eb:7b:4d:12:f9:b1:f4:41:23:c6:10:cc:f3:5a:8b:
                    6e:21:f9:ba:30:8a:b1:e3:f5:52:a7:d3:e6:c9:a4:
                    05:a4:c6:f9:55:88:0e:6e:3c:ac:93:c8:6b:4f:02:
                    d2:2b:94:66:c4:6e:85:bc:81:9c:60:d6:a3:80:0d:
                    80:45:9f:4f:44:90:55:2d:62:a0:96:9e:2f:19:41:
                    da:e6:e6:d2:1d:7c:25:5e:e7:79:fa:c6:4d:92:77:
                    fb:04:82:a6:cb:33:96:98:e3:59:44:e5:f6:b2:d6:
                    dc:5e:7a:0b:86:c3:01:ce:e6:51:aa:03:25:0f:f1:
                    68:42:a2:48:d8:e4:57:05:05:7e:e8:ae:f4:09:40:
                    ad:01:84:c5:ff:7f:04:bd:9f:07:91:70:05:eb:1f:
                    18:3c:4e:1a:a0:48:a2:2b:31:8e:c2:ef:e5:42:d0:
                    3c:bb:f8:60:01:73:19:b5:b2:2e:1f:d7:15:82:83:
                    dc:e8:44:64:5d:b1:bc:cc:0b:48:ec:d1:8f:59:5d:
                    a0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:57:6F:D6:8F:DD:59:FA:ED:92:40:43:6A:5E:59:90:99:F1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23e409ec-f005-3951-ba0c-78df05021294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:6e:26:6d:b0:5a:0a:e5:8a:67:20:ef:28:30:be:e9:77:9a:
         e9:de:78:71:b9:2a:20:d3:c4:08:d0:a1:9f:6f:d1:02:7d:a9:
         03:78:72:df:7b:4e:39:bb:22:a1:3c:ac:3b:02:a1:37:3a:a4:
         f1:0c:95:69:05:a5:99:a0:db:f2:6c:05:9a:c8:cd:57:ad:88:
         1a:6f:39:46:3c:82:ba:82:72:0f:c5:0c:0a:d8:51:3a:00:86:
         a9:ed:c4:c4:6f:4d:bd:81:5d:f8:27:7b:aa:99:c0:07:1c:9f:
         50:f8:a6:18:b7:fa:cb:40:05:71:9e:84:12:85:36:a2:c4:a6:
         61:4a:88:3e:11:72:07:95:1c:6c:58:f7:90:09:a8:29:44:88:
         0c:1f:e6:e6:58:dd:30:00:75:e0:50:f3:8c:6a:87:c3:f4:4f:
         3d:ef:48:9e:14:c0:c0:53:3a:fd:3a:10:2b:20:a0:bf:8c:f0:
         c0:12:97:cc:4c:24:c9:e6:09:9a:9f:46:23:a0:af:99:fb:d3:
         e9:3e:5c:01:28:03:00:a3:c4:a9:f6:c2:e0:63:25:6b:36:a0:
         d9:29:59:c6:6d:3a:46:f0:73:54:ba:cf:b8:fd:68:27:5f:64:
         67:3d:fa:2f:7f:ee:73:66:7a:82:43:88:b3:9b:4b:e6:0d:fa:
         04:b2:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:09 2025 by rpki-client