Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c95ce53-7acc-3de6-af4d-63496ef7274f.roa
File:                     6c95ce53-7acc-3de6-af4d-63496ef7274f.roa (raw, json)
Hash identifier:          7OxQJ9r+beCw4QFBmNaHM2Xqpr4xU/hZGOys7qqbzJU=
Subject key identifier:   39:AD:80:F8:47:BA:14:4F:8D:51:74:BE:9A:1E:39:AC:87:7D:CD:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242E9240805079A718FCE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c95ce53-7acc-3de6-af4d-63496ef7274f.roa
Signing time:             Thu 19 Dec 2024 13:45:03 +0000
ROA not before:           Thu 19 Dec 2024 13:45:03 +0000
ROA not after:            Wed 19 Mar 2025 12:45:03 +0000
asID:                     36629
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:e9:24:08:05:07:9a:71:8f:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:03 2024 GMT
            Not After : Mar 19 12:45:03 2025 GMT
        Subject: CN=ad2fed62-b065-49cc-b942-dc063237da15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:4c:3d:14:18:30:b3:29:12:ab:54:b9:08:
                    52:53:e9:31:77:1f:92:20:17:74:2e:ce:63:91:55:
                    6a:45:f9:2c:0f:a6:31:bb:2b:bc:70:45:12:7a:b6:
                    ba:b5:c4:21:24:56:b7:f1:0e:ad:a9:1e:11:88:fb:
                    5a:bf:91:76:94:89:a8:ce:40:aa:58:b9:a7:f7:66:
                    fb:b6:e7:48:08:c4:5a:40:17:7f:ff:6b:44:d7:94:
                    a1:2a:1f:f1:d4:28:46:d5:68:b0:4e:a9:d4:36:7e:
                    84:5e:5c:1e:13:d8:d9:fa:b5:98:68:e1:79:ae:f4:
                    14:f2:92:62:d1:c1:bf:dd:b9:c2:7c:97:1c:e9:57:
                    c2:da:58:8c:da:9d:d9:45:da:cf:17:0a:46:cb:23:
                    ee:1a:3b:1f:ae:bb:63:d7:a8:b2:e8:d7:30:8d:fd:
                    da:5b:36:6b:2d:3c:68:5a:87:be:53:66:6e:0b:49:
                    1b:24:80:2e:eb:2c:10:68:ec:df:76:a3:be:e2:8e:
                    a0:bc:49:08:c1:5c:ff:a6:54:9e:d8:c0:c2:5e:d7:
                    c1:a7:ed:de:93:25:72:9d:cc:ff:76:e0:3f:52:27:
                    b3:d9:fe:82:97:7b:5b:d8:df:16:a7:48:fd:c9:dc:
                    d9:a3:40:1a:45:c6:69:8e:63:ca:e5:a5:5c:2c:8a:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:80:F8:47:BA:14:4F:8D:51:74:BE:9A:1E:39:AC:87:7D:CD:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c95ce53-7acc-3de6-af4d-63496ef7274f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ce:c1:f9:d3:9a:3c:12:35:05:64:39:f8:03:6f:98:6f:36:
         ae:1a:d9:ab:f3:6b:6d:29:4d:45:84:3e:78:83:5a:e1:d0:f0:
         6f:67:b1:a7:90:00:cd:d6:49:e8:71:ae:e6:86:b0:03:a2:06:
         03:16:b4:12:46:0d:3e:66:98:75:f6:83:eb:84:07:3f:c0:86:
         3f:1c:0c:d3:1e:fc:c4:d7:4c:ca:ca:04:b2:bb:ee:08:6a:59:
         ed:22:c1:ce:63:7f:ab:83:1c:87:d1:a3:d4:c5:7a:9f:1d:d4:
         17:4e:88:46:96:02:79:e6:39:eb:c2:6d:5f:5d:9d:70:4b:31:
         e6:3d:25:c7:ed:9d:92:93:68:66:0f:fe:d9:96:1d:02:dd:aa:
         9b:0d:32:5c:59:99:89:e2:91:dd:24:7d:ca:de:93:da:ce:62:
         ca:5e:fd:d4:52:27:92:d3:f6:e5:5c:e0:be:95:7e:ad:5b:19:
         0e:26:f7:1f:a8:0c:dc:43:d0:d5:bb:c5:8a:70:04:3d:16:4b:
         2a:b8:20:6b:b0:f9:36:9e:10:65:a1:9b:c7:d1:a0:fd:e0:ab:
         6d:b8:c6:cb:19:dd:f4:42:ed:9d:97:63:d0:2b:fe:af:be:8d:
         32:46:45:50:d3:be:83:76:31:10:37:1b:71:8d:75:3a:2c:11:
         f9:db:14:f3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQukkCAUHmnGPzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwM1oXDTI1MDMxOTEyNDUwM1owLzEtMCsGA1UEAxMk
YWQyZmVkNjItYjA2NS00OWNjLWI5NDItZGMwNjMyMzdkYTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zBMPRQYMLMpEqtUuQhSU+kxdx+SIBd0Ls5j
kVVqRfksD6Yxuyu8cEUSera6tcQhJFa38Q6tqR4RiPtav5F2lImozkCqWLmn92b7
tudICMRaQBd//2tE15ShKh/x1ChG1WiwTqnUNn6EXlweE9jZ+rWYaOF5rvQU8pJi
0cG/3bnCfJcc6VfC2liM2p3ZRdrPFwpGyyPuGjsfrrtj16iy6Ncwjf3aWzZrLTxo
Woe+U2ZuC0kbJIAu6ywQaOzfdqO+4o6gvEkIwVz/plSe2MDCXtfBp+3ekyVyncz/
duA/Uiez2f6Cl3tb2N8Wp0j9ydzZo0AaRcZpjmPK5aVcLIrSmQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDmtgPhHuhRPjVF0vpoeOayHfc3PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmM5NWNlNTMtN2FjYy0z
ZGU2LWFmNGQtNjM0OTZlZjcyNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC5zsH505o8EjUFZDn4A2+YbzauGtmr82ttKU1F
hD54g1rh0PBvZ7GnkADN1knoca7mhrADogYDFrQSRg0+Zph19oPrhAc/wIY/HAzT
HvzE10zKygSyu+4IalntIsHOY3+rgxyH0aPUxXqfHdQXTohGlgJ55jnrwm1fXZ1w
SzHmPSXH7Z2Sk2hmD/7Zlh0C3aqbDTJcWZmJ4pHdJH3K3pPazmLKXv3UUieS0/bl
XOC+lX6tWxkOJvcfqAzcQ9DVu8WKcAQ9FksquCBrsPk2nhBloZvH0aD94KttuMbL
Gd30Qu2dl2PQK/6vvo0yRkVQ076DdjEQNxtxjXU6LBH52xTz
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:21 2025 by rpki-client