Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/291df409-fbfc-3374-9727-5d50580b114e.roa
File:                     291df409-fbfc-3374-9727-5d50580b114e.roa (raw, json)
Hash identifier:          +UCZ8iUd2l8z92P1GfEJNeWwiLxOmJ3cH3Io7Qv4pNs=
Subject key identifier:   BA:C6:5F:C6:EC:09:DE:D1:A4:C1:87:C5:68:64:03:5C:8F:CB:68:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A0478A7E53EDE389049C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/291df409-fbfc-3374-9727-5d50580b114e.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     397201
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:47:8a:7e:53:ed:e3:89:04:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=ad43dfcd-4a6c-47f5-ba27-f401b0c3bb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:22:fc:f5:22:19:11:eb:8e:d3:f7:45:b8:
                    36:31:5a:87:3e:b9:13:1a:3f:8e:35:c6:d6:20:2f:
                    02:b1:38:6c:34:d0:dd:bf:4d:cc:32:c8:af:65:c4:
                    bb:1b:38:12:b3:86:69:0a:25:e1:bd:d2:1d:dd:5c:
                    00:fd:6e:31:a3:33:68:dc:a3:f8:d9:1d:38:d2:04:
                    6a:e2:d0:bf:0f:cf:92:64:1d:0e:5f:67:e9:78:87:
                    fe:45:13:af:7a:2d:91:84:7f:af:2f:68:50:42:96:
                    2d:29:3c:a0:84:ef:a6:31:4a:55:eb:73:d8:aa:d0:
                    68:d0:65:fe:65:cc:a7:01:02:4b:24:0f:1a:41:e0:
                    64:72:ad:a4:4e:af:4d:48:c0:68:7b:2e:1e:52:97:
                    93:af:b7:42:4c:e6:96:9a:a9:af:86:f7:dd:48:1f:
                    dc:e8:e6:c9:a8:df:c0:ff:00:58:80:99:29:d4:d5:
                    44:4d:45:37:9d:3b:da:e0:17:e9:86:10:7a:42:1e:
                    63:a5:d7:9c:b2:05:0f:a8:7d:08:8c:20:7d:3b:f4:
                    c0:fa:dc:34:fa:94:22:0e:a3:87:b7:72:8a:96:1c:
                    99:54:2f:93:95:96:7e:79:ee:5b:c9:93:37:9a:20:
                    b9:f8:d2:46:4e:0d:49:1a:ea:ca:c9:3a:2f:3a:5f:
                    ff:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:5F:C6:EC:09:DE:D1:A4:C1:87:C5:68:64:03:5C:8F:CB:68:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/291df409-fbfc-3374-9727-5d50580b114e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b8:18:2f:c6:d1:62:1f:52:86:ae:4a:f2:d2:ee:03:45:bd:
         67:22:8a:e5:45:4b:b2:38:87:f9:09:94:99:7e:fa:9b:3a:0b:
         c8:d5:ca:73:ee:61:a4:50:63:5a:b8:ac:c8:2d:cc:f8:96:4c:
         0e:5d:18:3a:a8:7f:5b:06:ca:ae:6a:08:07:0b:69:11:1d:6c:
         60:6c:f5:88:8c:b6:d3:44:bb:0e:f8:d0:8e:f3:c9:f0:89:11:
         a1:90:25:cf:81:c4:fe:7a:dd:73:31:6f:78:d7:cc:23:6a:ae:
         e3:69:db:65:7b:08:fe:7a:95:a4:b8:db:7b:95:45:f9:61:9c:
         ca:31:5c:02:56:99:07:d8:e0:11:f7:78:08:c5:16:10:2b:61:
         c5:17:66:64:3d:18:0c:de:e5:37:2f:c4:1a:c9:a2:da:34:cb:
         53:b3:a0:8f:3f:43:49:fe:27:ae:3b:ab:cd:62:3d:09:04:9c:
         bf:f3:1e:fb:5e:80:35:df:55:79:94:17:95:bd:f2:29:7d:8c:
         8c:bd:84:c9:a4:db:74:d9:c8:b2:e6:58:40:cf:73:2d:d8:43:
         80:b5:32:35:93:55:17:4c:a1:d3:0c:62:c8:a6:12:40:7e:de:
         f6:30:f3:8b:e7:b1:4e:75:64:7f:92:8d:55:71:29:3d:3a:9b:
         a5:5d:b9:87
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoEeKflPt44kEnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWQ0M2RmY2QtNGE2Yy00N2Y1LWJhMjctZjQwMWIwYzNiYjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Yi/PUiGRHrjtP3Rbg2MVqHPrkTGj+ONcbW
IC8CsThsNNDdv03MMsivZcS7GzgSs4ZpCiXhvdId3VwA/W4xozNo3KP42R040gRq
4tC/D8+SZB0OX2fpeIf+RROvei2RhH+vL2hQQpYtKTyghO+mMUpV63PYqtBo0GX+
ZcynAQJLJA8aQeBkcq2kTq9NSMBoey4eUpeTr7dCTOaWmqmvhvfdSB/c6ObJqN/A
/wBYgJkp1NVETUU3nTva4BfphhB6Qh5jpdecsgUPqH0IjCB9O/TA+tw0+pQiDqOH
t3KKlhyZVC+TlZZ+ee5byZM3miC5+NJGTg1JGurKyTovOl//BwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLrGX8bsCd7RpMGHxWhkA1yPy2hpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjkxZGY0MDktZmJmYy0z
Mzc0LTk3MjctNWQ1MDU4MGIxMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAmuBgvxtFiH1KGrkry0u4DRb1nIorlRUuyOIf5
CZSZfvqbOgvI1cpz7mGkUGNauKzILcz4lkwOXRg6qH9bBsquaggHC2kRHWxgbPWI
jLbTRLsO+NCO88nwiRGhkCXPgcT+et1zMW9418wjaq7jadtlewj+epWkuNt7lUX5
YZzKMVwCVpkH2OAR93gIxRYQK2HFF2ZkPRgM3uU3L8QayaLaNMtTs6CPP0NJ/ieu
O6vNYj0JBJy/8x77XoA131V5lBeVvfIpfYyMvYTJpNt02ciy5lhAz3Mt2EOAtTI1
k1UXTKHTDGLIphJAft72MPOL57FOdWR/ko1VcSk9OpulXbmH
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:42 2025 by rpki-client