Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ff064b-8c19-337a-9c0b-7e8ac384f5fd.roa
File:                     27ff064b-8c19-337a-9c0b-7e8ac384f5fd.roa (raw, json)
Hash identifier:          XQfUJJbypxyelG5AM6x/uzucwQL2NpR1bViYcSqdIkU=
Subject key identifier:   C8:D8:ED:87:61:2B:35:06:48:61:FB:29:35:55:3C:B0:B8:58:35:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842433A539F26E997FD98CB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ff064b-8c19-337a-9c0b-7e8ac384f5fd.roa
Signing time:             Thu 19 Dec 2024 13:45:42 +0000
ROA not before:           Thu 19 Dec 2024 13:45:42 +0000
ROA not after:            Wed 19 Mar 2025 12:45:42 +0000
asID:                     396590
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:3a:53:9f:26:e9:97:fd:98:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:42 2024 GMT
            Not After : Mar 19 12:45:42 2025 GMT
        Subject: CN=5bbbac4f-0d4c-4f17-a054-511b13583045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:8f:c7:f4:86:68:86:5b:29:d2:d2:ca:aa:
                    3d:4d:38:8b:98:67:b0:ac:f5:25:91:1c:d2:01:9b:
                    13:ba:f4:96:7f:bf:a9:5e:8e:98:fe:38:0b:06:14:
                    97:0d:ca:d8:b5:49:6b:05:dd:bb:fa:53:ff:db:a5:
                    a9:bb:77:c4:7b:eb:b3:e4:96:98:e3:5b:2f:76:82:
                    f8:09:f2:6d:44:25:2f:9c:eb:7c:eb:80:f8:e1:1a:
                    0c:eb:93:64:24:4b:bf:e5:c4:e0:e5:54:da:42:c4:
                    66:27:f4:68:7a:d0:d8:79:f4:f4:e8:fc:87:24:73:
                    6a:1f:e0:e6:b7:c7:32:f8:b0:3d:41:21:71:54:a5:
                    df:76:ec:c2:62:95:98:f2:9c:68:6b:39:0c:2c:81:
                    c9:25:f8:18:b7:5b:6e:ee:ea:b7:3a:a8:aa:eb:31:
                    04:9a:48:b5:0b:4e:6c:ae:04:47:4b:f2:96:61:f3:
                    c9:2a:bd:43:05:75:67:fd:cc:aa:b1:b7:dd:5f:36:
                    ce:3d:fd:8a:42:20:bf:ad:e3:d8:0a:0e:ed:1e:a0:
                    11:38:64:6d:04:74:8d:94:e7:09:3e:03:26:2e:03:
                    76:75:05:3d:a2:fc:03:f8:e1:de:48:1c:a6:01:0b:
                    f9:f2:4e:43:20:9c:88:27:76:18:c4:0e:77:f2:35:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D8:ED:87:61:2B:35:06:48:61:FB:29:35:55:3C:B0:B8:58:35:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ff064b-8c19-337a-9c0b-7e8ac384f5fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:06:88:4e:3f:04:ed:cb:e5:18:21:d4:ce:28:9f:32:20:
         56:ba:5a:9b:76:ef:a6:db:04:73:5d:49:a7:10:0e:85:b3:d3:
         75:1f:4c:75:67:98:7e:a1:58:10:dd:fb:ff:32:a8:99:f9:38:
         1d:d7:f0:2f:c2:35:96:0d:c3:15:9f:bc:34:41:98:80:bb:70:
         32:f5:67:8e:89:e2:29:54:40:90:3c:04:93:5c:d8:a9:ae:28:
         b3:26:df:c6:c3:b3:1a:40:a1:a8:49:f6:bf:18:15:c3:1c:bc:
         f4:71:f7:77:67:4e:a0:14:24:44:ea:85:1b:22:2e:94:10:d4:
         44:b8:04:18:e3:30:66:98:7d:5d:79:a8:34:23:2d:8c:62:94:
         ce:1b:a1:e6:10:be:dc:9f:4c:04:93:58:f6:70:20:16:98:89:
         65:35:c9:16:e4:a4:60:b9:0d:92:07:28:f3:35:84:c5:44:6a:
         70:82:19:5f:3e:1a:be:41:9f:6a:f1:a6:fe:99:d6:27:71:f3:
         ce:44:3d:b8:66:b5:d0:59:03:c0:42:34:cb:03:84:a6:c9:db:
         62:c6:7a:8d:22:51:47:22:ec:02:ae:d0:6a:cb:0c:9c:d2:f2:
         38:c3:9a:ab:97:5d:aa:dd:4b:a6:87:f7:03:1f:83:77:2c:05:
         bd:c7:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:42 2025 by rpki-client