Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574e29c5-6e8b-3d9b-bb25-3c30289e2f73.roa
File:                     574e29c5-6e8b-3d9b-bb25-3c30289e2f73.roa (raw, json)
Hash identifier:          p713zDpNflFDKHJVHbZP8AIwU7bQmd8/Kx68plzooVw=
Subject key identifier:   E5:82:A1:50:2B:2F:B0:79:6A:17:98:EF:71:22:79:30:4F:29:6A:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F6872E78F5C02E1F7100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574e29c5-6e8b-3d9b-bb25-3c30289e2f73.roa
Signing time:             Thu 19 Dec 2024 13:45:10 +0000
ROA not before:           Thu 19 Dec 2024 13:45:10 +0000
ROA not after:            Wed 19 Mar 2025 12:45:10 +0000
asID:                     396617
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f6:87:2e:78:f5:c0:2e:1f:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:10 2024 GMT
            Not After : Mar 19 12:45:10 2025 GMT
        Subject: CN=d43480dd-6232-4a93-b6df-4d7562e93011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:bf:72:6b:51:e6:a5:24:9b:e1:b2:cd:af:
                    17:c7:64:66:c0:a1:73:fb:6f:c4:4b:a5:a3:76:ff:
                    d2:ab:2d:b9:af:3b:74:bc:4d:07:5a:67:87:1d:8f:
                    88:50:9b:49:02:fc:9e:95:8a:7b:36:3b:f9:07:4f:
                    0c:8c:9c:29:bd:0b:7c:89:b4:ec:f6:8d:8c:a4:6a:
                    f1:b3:be:45:d7:06:54:73:6f:22:72:6d:c0:48:bb:
                    31:8c:f6:48:4f:57:cc:28:44:11:28:b7:00:83:f1:
                    59:7f:2b:2f:3b:c2:73:77:16:3a:8f:d5:4c:f7:8f:
                    49:5c:ce:a3:fa:41:34:1b:64:ed:07:1e:c2:62:9f:
                    f3:cd:22:26:88:67:9c:41:94:6d:fb:68:e6:91:af:
                    a5:84:74:78:87:0e:b9:37:04:5f:42:b6:dc:31:55:
                    4d:d3:99:81:8b:f1:26:96:e7:6f:b9:3a:ae:4d:9e:
                    5f:a3:46:36:fb:ad:38:34:50:2d:92:a9:f1:e0:9f:
                    67:4a:c9:da:ff:3b:c2:e8:2a:4b:48:49:e8:98:41:
                    19:79:3f:7f:18:7f:26:77:25:51:5c:89:e3:f7:bf:
                    b1:ad:cf:ef:47:cb:10:08:b9:03:02:45:67:3f:47:
                    1d:8e:c9:8b:46:e8:1f:0a:f1:ca:aa:b2:2d:08:db:
                    67:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:82:A1:50:2B:2F:B0:79:6A:17:98:EF:71:22:79:30:4F:29:6A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/574e29c5-6e8b-3d9b-bb25-3c30289e2f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:64:89:de:64:e3:ab:d5:23:ad:2e:90:b9:f8:47:c9:3d:
         ae:cc:dd:6c:75:d0:83:08:95:67:08:5c:c4:6a:87:c4:c3:2b:
         f8:a0:0b:4c:95:20:57:dd:46:2f:3b:32:e9:c4:9a:de:c3:ad:
         a8:2f:c1:01:f9:4e:63:96:5c:8d:4a:fc:17:99:df:7d:95:e5:
         6a:00:19:f8:ef:b6:d5:82:6b:0c:d0:34:90:7c:41:44:32:8f:
         b0:bf:bb:5d:50:55:ab:ba:61:15:02:9f:21:22:72:9d:55:87:
         6a:c8:93:57:56:4c:74:7f:ea:fc:52:8a:13:d8:bf:b8:59:0c:
         8c:94:1e:04:10:f0:27:61:9e:bc:db:02:6b:de:ae:5b:c6:d1:
         82:53:d4:c3:3e:36:08:4d:e3:88:c1:8e:25:c6:d3:39:78:94:
         d0:0a:51:7a:d3:5b:2e:0c:d6:11:6b:46:3f:f7:f8:b3:3d:8d:
         b7:d5:b7:7f:1d:89:f1:8c:c0:d4:d2:4f:7e:46:fe:a9:23:d3:
         b7:f8:41:72:da:64:b3:c2:83:ec:32:8f:ed:70:21:6d:f1:fb:
         7b:fe:4b:70:0e:26:d2:42:a0:bb:59:c3:0a:d2:15:cb:b0:02:
         3f:7f:e8:f6:07:60:67:18:8b:55:db:96:aa:bd:ad:79:08:2f:
         cb:a1:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:20 2025 by rpki-client