Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500d0ca3-384b-376f-96af-84b2b76fb0ed.roa
File:                     500d0ca3-384b-376f-96af-84b2b76fb0ed.roa (raw, json)
Hash identifier:          C3N9kU2/4dbQnzCjouljIAeao440BEGMYyktuiW6AtQ=
Subject key identifier:   22:0C:20:CF:C2:1E:37:54:DE:9A:F4:4D:9E:C9:19:3E:2F:F4:61:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430057CF409136C3A13C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500d0ca3-384b-376f-96af-84b2b76fb0ed.roa
Signing time:             Thu 19 Dec 2024 13:45:14 +0000
ROA not before:           Thu 19 Dec 2024 13:45:14 +0000
ROA not after:            Wed 19 Mar 2025 12:45:14 +0000
asID:                     396560
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:00:57:cf:40:91:36:c3:a1:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:14 2024 GMT
            Not After : Mar 19 12:45:14 2025 GMT
        Subject: CN=f1714e96-967d-4c81-a851-edb13af73600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:e0:bc:15:28:1e:b9:22:5e:cc:6a:3a:f1:
                    64:d3:99:57:45:e9:02:10:f7:d2:c0:28:0a:bc:70:
                    13:03:15:45:e3:17:bf:be:79:77:54:e1:2d:14:64:
                    97:1a:d4:49:7d:64:ce:f1:1b:a4:98:d3:35:05:ed:
                    42:b3:e7:cf:db:bf:c3:fd:3b:b3:38:a7:be:00:f2:
                    e2:1d:7a:d6:40:3b:61:f0:de:b2:08:ec:d0:68:6e:
                    f2:5b:74:ef:41:bd:a2:c2:3f:9f:10:60:ef:4c:da:
                    48:8e:f8:84:ca:1d:12:e7:4e:76:9f:f3:37:a8:82:
                    c7:83:28:65:fc:3e:64:ff:4a:64:89:d6:17:01:74:
                    9e:10:dc:b1:90:9c:4b:c4:ce:58:15:46:66:47:db:
                    2e:bd:e0:ca:9f:2e:d7:de:86:90:22:2a:13:29:48:
                    9b:e6:e0:55:a0:00:3f:f0:63:fa:7d:b3:4b:76:19:
                    d7:ea:06:3e:27:bd:fd:bc:6b:0b:e0:96:1f:a1:59:
                    2b:02:45:85:23:da:de:85:e0:f3:89:20:00:05:4f:
                    c9:44:1d:26:aa:37:18:40:1a:48:d9:2f:f5:c0:33:
                    c0:29:c1:6c:87:ec:df:9c:42:33:d2:ce:d6:a8:79:
                    bb:30:f2:ce:8a:9d:54:fe:6b:9d:7e:7b:ad:12:c7:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0C:20:CF:C2:1E:37:54:DE:9A:F4:4D:9E:C9:19:3E:2F:F4:61:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500d0ca3-384b-376f-96af-84b2b76fb0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:16:c3:68:5d:53:d5:28:b3:5f:20:f6:84:79:36:21:72:
         29:d5:bb:e0:ce:99:5f:e7:8b:30:2f:75:83:2d:a9:af:c6:1c:
         ff:c1:77:d2:4b:b8:2f:bb:a9:3b:6e:b9:43:c0:3b:53:86:d8:
         f7:bf:aa:ec:7f:41:e0:66:dd:55:a4:01:e4:c2:c1:3e:c1:04:
         ea:6a:52:54:ba:dc:23:3f:c8:21:07:7b:82:83:ea:d3:d9:05:
         cf:a2:c5:da:3f:57:9a:b2:ed:79:b0:ad:8d:d8:ac:be:b2:8f:
         b3:56:e6:b1:96:fa:46:79:32:fa:a7:b1:b5:ac:fa:1f:47:9b:
         76:7b:2a:56:b8:f0:2b:74:62:f1:8e:c1:cb:42:e4:98:f9:36:
         4f:b1:72:06:93:75:e3:d9:9a:a0:ff:19:4c:ad:6a:f0:cc:22:
         7a:cb:dd:60:37:ad:f2:43:39:01:d1:06:03:31:85:33:c8:64:
         3f:5c:42:da:72:76:16:8a:c3:a4:44:0e:06:06:ab:15:78:82:
         cd:f7:ae:4d:2a:51:a2:f7:18:f4:c3:39:97:5d:4e:30:d8:8f:
         ba:ad:94:95:6b:e0:41:42:1a:87:de:6b:b3:e1:a4:21:d6:52:
         ec:65:1f:f6:84:fc:dd:68:77:45:a0:ea:57:30:26:f8:35:38:
         98:3c:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:35:19 2025 by rpki-client