Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74eac2a4-cffa-380a-966e-faf2c57b281e.roa
File:                     74eac2a4-cffa-380a-966e-faf2c57b281e.roa (raw, json)
Hash identifier:          zu7A5tR4p40enXIivU9zy+I2dPamVFhovXNHEdNRxcs=
Subject key identifier:   2F:8E:0A:95:4B:1C:3B:B3:18:A6:CE:75:B1:C2:EC:0F:7E:11:E9:F7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A04C635FC2387158D51E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74eac2a4-cffa-380a-966e-faf2c57b281e.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396609
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4c:63:5f:c2:38:71:58:d5:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=9074b96d-3631-43e4-95ba-082d66dbe98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:42:89:1c:df:96:07:4c:4d:a3:50:f5:76:
                    3d:71:78:80:db:94:23:9d:d8:87:81:84:f8:98:fa:
                    65:eb:e4:76:c5:15:96:32:53:1b:db:c2:7e:2f:aa:
                    41:ea:7b:43:71:b7:a6:7b:6b:d4:12:bd:e2:05:e6:
                    cb:72:f2:bb:cd:6d:63:2e:6b:3c:e3:ed:6b:ee:02:
                    c9:c3:60:99:14:90:87:ca:51:b6:3d:10:c5:95:52:
                    bc:31:43:84:30:bc:5f:7d:46:2a:27:81:e9:2f:1e:
                    fb:1f:ae:9b:84:ba:ec:b4:a6:94:79:bc:90:3e:9b:
                    15:10:a6:35:9f:1d:0a:e4:b5:99:d1:c1:a2:12:75:
                    60:d0:fd:58:b1:49:b8:3b:95:5e:38:25:9f:80:06:
                    a3:c0:c2:50:80:c6:fb:26:62:40:2e:a4:ca:7e:29:
                    f6:be:48:52:62:9d:ba:c1:51:18:9e:fa:76:42:7f:
                    0e:f0:b7:2b:72:22:0c:0a:4c:ac:15:d9:fe:60:97:
                    ed:22:3a:ab:de:83:62:2d:e4:45:10:fd:d8:9f:5f:
                    d4:0f:58:00:6c:6b:88:ca:63:77:e8:1e:c8:0f:e4:
                    23:f4:41:27:f7:9a:2f:d1:55:d3:60:55:e6:a6:e9:
                    84:4b:3e:0d:06:27:10:53:5b:1e:bf:b2:b0:c4:e6:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8E:0A:95:4B:1C:3B:B3:18:A6:CE:75:B1:C2:EC:0F:7E:11:E9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74eac2a4-cffa-380a-966e-faf2c57b281e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b1:2d:af:32:9f:8d:cb:68:85:35:cc:03:5a:fd:da:59:55:
         81:c8:5f:dd:f4:d0:24:f2:7f:e9:51:20:59:63:61:aa:94:39:
         96:ba:3c:11:0d:64:0e:7a:93:6d:93:8f:16:26:cb:9e:b1:93:
         84:61:96:61:5e:25:ed:41:56:bb:ed:89:07:99:cb:36:2f:03:
         77:8a:aa:d2:85:d2:01:3b:26:ce:7e:94:7e:df:f9:da:3f:a9:
         e9:b1:d2:46:4a:bf:04:b6:30:98:5d:50:db:1a:0b:1f:1b:19:
         2c:e9:46:06:43:7e:6c:93:0f:d0:9d:50:7b:74:99:c2:d5:96:
         6a:e7:a4:68:9e:30:d5:82:b8:0b:f0:9b:87:b7:ab:38:73:e8:
         86:d2:6b:95:33:e5:c8:89:91:30:a4:c5:18:cc:19:f6:c4:b8:
         16:d7:60:72:0b:01:63:25:68:23:1c:fb:8c:43:45:ec:77:15:
         24:26:ad:2c:f5:b1:b2:03:09:44:a7:45:4e:55:af:93:ed:4d:
         29:3e:d6:ec:b7:66:08:7e:e2:b5:59:d3:8d:59:a9:35:ba:f8:
         35:54:fd:68:b6:d9:70:34:5d:ad:b4:36:c1:0b:bd:af:cb:35:
         48:6d:b6:35:05:46:9e:ef:5a:b6:b6:f0:46:2f:29:3d:6f:60:
         74:4d:c9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:44 2025 by rpki-client