Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ce43e14-a121-3890-b09c-cdb5b2264a82.roa
File:                     6ce43e14-a121-3890-b09c-cdb5b2264a82.roa (raw, json)
Hash identifier:          /DKj25VvDaA+hSzw4l5OCeTn27MeIqg7+jvV8095sEA=
Subject key identifier:   D7:1C:6E:2D:22:EB:45:D7:EE:6D:3A:B2:DF:31:65:F1:53:1D:1A:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FC0F1F169E70BC864834
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ce43e14-a121-3890-b09c-cdb5b2264a82.roa
Signing time:             Thu 19 Dec 2024 13:45:12 +0000
ROA not before:           Thu 19 Dec 2024 13:45:12 +0000
ROA not after:            Wed 19 Mar 2025 12:45:12 +0000
asID:                     36622
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fc:0f:1f:16:9e:70:bc:86:48:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:12 2024 GMT
            Not After : Mar 19 12:45:12 2025 GMT
        Subject: CN=816e0e21-66a3-4ffa-a3a4-4887fc0b6aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:6f:a6:12:05:70:fd:14:65:0f:73:b7:a9:
                    34:be:01:30:e5:7e:3a:ef:90:5c:05:d4:35:c8:79:
                    e2:42:c7:24:c1:c8:88:41:a4:56:f8:1a:9c:78:63:
                    48:76:35:59:d5:92:87:00:9e:05:ce:78:a5:48:10:
                    55:3e:06:8d:66:2d:97:7d:7d:13:76:64:67:9f:51:
                    49:3c:bc:bd:d0:ba:e0:70:9c:d8:28:04:07:99:9f:
                    9c:db:4b:37:15:6a:cb:81:e5:9c:09:91:ff:40:fc:
                    eb:c1:9b:80:e7:c1:26:68:d9:4b:d0:b0:66:34:41:
                    ed:37:b3:9d:85:15:6a:e3:78:54:b1:fc:1b:f7:1e:
                    2c:a5:46:4e:b4:2b:78:b1:de:94:cc:a9:2a:83:90:
                    da:7e:d1:03:80:db:e9:27:9f:5b:29:55:b1:ee:83:
                    36:76:85:4a:65:56:ba:ba:75:4a:60:4e:e9:ab:40:
                    04:35:42:0e:35:46:4e:bb:c9:da:ed:5d:50:0a:c5:
                    1d:f9:8f:5b:be:3a:b5:f4:0b:cd:d6:52:66:7d:74:
                    43:b6:c0:e2:a9:bc:36:0e:eb:98:af:2f:78:a6:53:
                    43:c3:53:1c:71:36:bb:f0:c6:e3:53:8b:0d:3d:8e:
                    bc:fc:83:65:4e:de:76:e9:53:5e:dc:73:b3:d8:16:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1C:6E:2D:22:EB:45:D7:EE:6D:3A:B2:DF:31:65:F1:53:1D:1A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ce43e14-a121-3890-b09c-cdb5b2264a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b4:d9:4e:8b:cb:0e:21:9d:6e:60:ba:84:1a:f1:ba:97:a0:
         ec:0b:4c:23:73:41:47:0b:1c:2d:8f:91:e6:eb:b2:e8:49:f1:
         9f:78:f6:5b:58:56:48:13:44:51:01:1f:22:8c:91:e4:0f:63:
         f3:49:8b:41:94:e6:71:3f:9e:01:f7:29:f1:b1:f2:66:af:53:
         c9:0d:07:b4:ab:93:ec:53:a8:99:40:79:e1:a3:6f:59:d6:d3:
         95:58:a8:fb:52:dd:87:83:93:ab:80:4d:86:e6:ea:38:d6:94:
         dd:f7:58:9c:64:28:79:62:6a:97:7a:c5:ac:53:09:b8:69:96:
         6e:9b:1c:4e:35:24:82:e9:36:3c:bc:90:e9:ef:cb:a2:b6:78:
         3e:44:a1:fb:3f:e3:53:78:7e:de:40:6d:3f:0f:0c:02:81:29:
         12:61:d1:4c:36:a9:69:45:81:a8:d6:75:2b:00:1f:93:c1:1d:
         46:ce:eb:fb:be:10:1d:b1:be:63:c3:d8:e7:12:71:d5:31:91:
         8f:3a:1e:63:bc:76:df:63:99:02:1d:69:7d:13:ad:7b:34:8c:
         c3:9d:cf:48:57:18:04:dc:57:bd:9b:fa:f0:b8:86:6d:dc:06:
         ec:a5:ef:40:a0:02:bf:1c:b0:fb:90:8c:51:85:91:cd:50:4c:
         8a:d0:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:32 2025 by rpki-client