Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa
File:                     7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa (raw, json)
Hash identifier:          ghG3K3DA1X58iHQusJgjNJpRd40IM7gbFURODoUHVVQ=
Subject key identifier:   0B:B3:77:59:B5:D8:FA:AA:5F:61:32:69:F5:19:94:62:F3:10:C0:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB2508EE2E6808032DB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa
Signing time:             Thu 16 Jan 2025 13:38:16 +0000
ROA not before:           Thu 16 Jan 2025 13:38:16 +0000
ROA not after:            Wed 16 Apr 2025 12:38:16 +0000
asID:                     36626
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b2:50:8e:e2:e6:80:80:32:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:16 2025 GMT
            Not After : Apr 16 12:38:16 2025 GMT
        Subject: CN=f9c7a468-a496-4ad0-9b6d-320d2d5c1b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:20:7a:96:e4:3a:d2:41:6e:7d:d9:33:75:e9:
                    b3:2a:de:8f:bb:0a:cf:a5:1b:3f:3b:09:ae:d6:02:
                    35:32:63:15:e7:5a:7f:f3:29:0c:e4:df:d0:8b:18:
                    f0:e0:7e:24:bb:7b:d0:fb:2f:3c:25:d9:ba:aa:6d:
                    40:5c:24:3a:67:5b:6e:5d:a8:12:ca:75:9e:5b:35:
                    71:28:40:ee:08:61:10:fb:56:f0:7b:5b:cb:52:1d:
                    b6:77:9e:e2:1d:44:ec:a6:09:52:16:77:97:5e:86:
                    45:dd:78:27:70:d4:17:df:78:84:3f:8a:1e:76:35:
                    a2:9b:7a:2c:c9:ba:08:68:17:35:a5:9b:0a:09:8f:
                    e8:76:a2:f6:c3:25:06:8e:57:98:d1:d3:cd:82:33:
                    71:68:bc:3a:93:11:0f:19:69:a8:bb:35:fc:8c:a6:
                    21:f6:93:29:d1:66:23:13:ac:d3:0c:79:f4:80:a7:
                    6c:91:a4:8e:8b:83:b2:d9:42:c4:1c:52:07:bf:ec:
                    82:ae:6e:3c:7c:8a:d8:19:d5:de:11:55:35:f7:46:
                    55:80:9f:b0:93:39:a9:64:1c:5f:d9:57:5c:f8:1f:
                    38:7b:80:0a:22:2c:4e:2a:26:17:94:50:fa:58:50:
                    1a:dc:1c:a4:44:af:05:e6:59:19:22:48:01:fb:be:
                    31:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:77:59:B5:D8:FA:AA:5F:61:32:69:F5:19:94:62:F3:10:C0:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7735eb9e-8ec5-35d5-9aba-75e10dff65a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:3e:a8:10:9c:6f:91:c7:22:14:84:e7:c8:ed:ab:af:d3:
         ce:1c:20:dd:56:63:36:95:7c:9f:3c:99:65:a2:1a:d8:b2:e0:
         a5:f8:76:46:61:5b:1e:38:e9:6c:3c:84:52:28:ec:d7:17:9d:
         55:70:75:9c:2c:69:10:03:9d:66:fd:10:87:fc:ab:d9:9f:1f:
         0e:91:5b:29:88:b0:70:b7:1d:91:d1:b9:82:d8:a6:58:a5:59:
         03:b7:f7:f5:54:52:ca:ed:53:61:a5:4f:a3:c7:ed:34:63:fe:
         9d:82:30:2d:51:15:2b:8e:f9:82:27:58:ed:6b:3e:99:67:d2:
         bd:f6:99:4b:f4:1b:c8:53:aa:5f:bd:17:08:67:e1:21:d9:25:
         3d:9f:81:d9:cb:9a:cb:84:7e:fd:04:38:5f:2c:67:82:bc:d3:
         5b:28:18:99:86:8a:c1:9d:2d:cb:7b:99:a6:31:1a:0b:87:be:
         42:22:55:0c:ed:e7:ff:4f:b6:a1:d9:e4:2e:a0:cd:09:28:ac:
         e6:0e:30:d5:b3:91:19:8f:8b:6c:f7:54:4a:fd:05:aa:a6:c5:
         cd:6e:f8:30:96:49:56:30:91:5c:7a:ea:29:a1:2c:f7:b7:5c:
         af:d6:5c:4e:9a:53:5b:b1:45:f9:94:c9:7b:ea:6f:0e:ab:56:
         39:73:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:09 2025 by rpki-client