Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa
File:                     69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa (raw, json)
Hash identifier:          M+VRIqHKor/g5sLFJy/EdA883ztZDZgQFz4Yn/nFqbQ=
Subject key identifier:   7D:EB:BC:E4:CB:8F:62:6A:65:38:1F:8E:05:10:9E:43:52:68:EB:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424316B838253B515E642280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa
Signing time:             Thu 19 Dec 2024 13:45:25 +0000
ROA not before:           Thu 19 Dec 2024 13:45:25 +0000
ROA not after:            Wed 19 Mar 2025 12:45:25 +0000
asID:                     36625
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:16:b8:38:25:3b:51:5e:64:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:25 2024 GMT
            Not After : Mar 19 12:45:25 2025 GMT
        Subject: CN=84870609-25a6-49f9-9a1a-5f07873ac29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:a5:75:8f:94:0e:a1:b5:3d:a9:e3:7d:89:
                    ca:34:9a:67:25:d8:0d:ee:c2:ff:a4:ad:95:e2:ec:
                    26:88:5c:db:06:1c:b6:20:90:80:ff:0a:41:e7:f0:
                    d3:ac:b9:ae:fe:a3:0a:4b:9d:55:06:73:1e:d3:2d:
                    95:d0:f1:c3:b0:b4:64:81:6a:2e:c1:09:80:d1:d1:
                    97:ec:c4:66:4e:63:ec:d0:13:af:9c:6d:50:29:27:
                    df:02:16:d6:45:40:3f:99:78:50:e9:77:f2:4a:fb:
                    fd:a4:10:8b:05:2e:31:3f:52:40:ab:67:7d:05:4d:
                    5c:40:41:9c:de:5d:b5:82:b1:ef:44:70:59:5d:c2:
                    20:7e:05:62:f8:d4:1d:d0:fb:dc:ff:cb:e7:66:7b:
                    bb:e9:79:f9:8b:91:5f:b6:de:9d:21:25:ce:7c:af:
                    b9:56:d3:a3:d3:f3:16:2e:fe:b5:69:60:20:84:51:
                    04:30:02:7b:f3:f6:ff:2f:a3:ff:04:66:ba:5e:00:
                    da:71:91:67:14:ec:d5:39:3d:81:bb:8c:60:ca:9b:
                    83:d7:7e:f2:49:1a:2c:b1:e2:3e:34:22:0d:a3:67:
                    54:65:39:d9:8a:82:01:1d:0e:27:6c:80:f6:6e:92:
                    73:3c:06:c9:3b:62:7a:37:e9:82:bf:ec:41:72:28:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:BC:E4:CB:8F:62:6A:65:38:1F:8E:05:10:9E:43:52:68:EB:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69dbd7b6-ea16-3ad3-879a-0cd27744346f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:46:d4:d5:6b:ec:d6:a6:13:8f:1e:08:e5:6e:ac:26:0e:
         a3:74:30:ca:5c:0e:e5:f5:b6:90:46:59:76:67:09:80:8f:ba:
         96:b6:8f:a4:7b:58:0b:a6:63:4a:b0:e4:39:9b:f3:76:1d:51:
         fe:83:fc:ba:d4:c9:d9:4c:80:1e:70:93:59:e8:8e:8c:46:c6:
         4d:db:fc:9c:07:a3:76:4e:e5:45:db:51:9b:81:24:e5:1c:7a:
         10:64:47:ec:7c:38:18:ab:ee:25:39:1c:63:00:1a:f0:67:3c:
         aa:5a:f6:78:35:1a:f2:2a:b0:ab:c2:bf:dd:5a:0d:5a:39:ee:
         27:94:ad:79:e2:26:d9:06:6c:84:d5:e8:d6:b7:be:5c:a4:3f:
         86:4f:36:e8:8e:00:9d:e1:db:f0:2c:83:f5:68:06:d0:bb:29:
         8f:25:db:e4:32:5c:c7:a8:d0:9b:e4:5d:b9:de:ac:0b:87:3b:
         46:ef:ac:67:c1:22:99:1f:05:90:e4:1c:93:25:4a:eb:f5:39:
         ab:de:29:af:51:86:7b:07:d4:51:1b:64:fc:5e:3c:a1:d4:59:
         d7:c3:73:c9:ee:40:b4:b3:35:23:a8:5a:4a:99:d7:03:c7:16:
         da:9d:c7:09:35:c8:94:97:b6:8e:4b:2f:0d:42:53:24:c8:45:
         53:e9:6a:c4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQxa4OCU7UV5kIoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUyNVoXDTI1MDMxOTEyNDUyNVowLzEtMCsGA1UEAxMk
ODQ4NzA2MDktMjVhNi00OWY5LTlhMWEtNWYwNzg3M2FjMjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJWldY+UDqG1PanjfYnKNJpnJdgN7sL/pK2V
4uwmiFzbBhy2IJCA/wpB5/DTrLmu/qMKS51VBnMe0y2V0PHDsLRkgWouwQmA0dGX
7MRmTmPs0BOvnG1QKSffAhbWRUA/mXhQ6XfySvv9pBCLBS4xP1JAq2d9BU1cQEGc
3l21grHvRHBZXcIgfgVi+NQd0Pvc/8vnZnu76Xn5i5Fftt6dISXOfK+5VtOj0/MW
Lv61aWAghFEEMAJ78/b/L6P/BGa6XgDacZFnFOzVOT2Bu4xgypuD137ySRosseI+
NCINo2dUZTnZioIBHQ4nbID2bpJzPAbJO2J6N+mCv+xBcihwJQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFH3rvOTLj2JqZTgfjgUQnkNSaOvHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjlkYmQ3YjYtZWExNi0z
YWQzLTg3OWEtMGNkMjc3NDQzNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQClUEbU1Wvs1qYTjx4I5W6sJg6jdDDKXA7l9baQ
Rll2ZwmAj7qWto+ke1gLpmNKsOQ5m/N2HVH+g/y61MnZTIAecJNZ6I6MRsZN2/yc
B6N2TuVF21GbgSTlHHoQZEfsfDgYq+4lORxjABrwZzyqWvZ4NRryKrCrwr/dWg1a
Oe4nlK154ibZBmyE1ejWt75cpD+GTzbojgCd4dvwLIP1aAbQuymPJdvkMlzHqNCb
5F253qwLhztG76xnwSKZHwWQ5ByTJUrr9Tmr3imvUYZ7B9RRG2T8Xjyh1FnXw3PJ
7kC0szUjqFpKmdcDxxbanccJNciUl7aOSy8NQlMkyEVT6WrE
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:37 2025 by rpki-client