Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88516fd0-2fda-3a9c-a358-db2fecb50fab.roa
File:                     88516fd0-2fda-3a9c-a358-db2fecb50fab.roa (raw, json)
Hash identifier:          kowAoqP++q6B4rIXD893LhDno6YFhtlKMvLoZswOtIM=
Subject key identifier:   42:AF:88:FA:C7:91:8D:B4:CF:05:3D:CB:EA:75:CF:A2:2C:BF:5F:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484515780B15BF8BE394FE8880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88516fd0-2fda-3a9c-a358-db2fecb50fab.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     396615
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:78:0b:15:bf:8b:e3:94:fe:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=03378bf8-dcb1-480e-90fb-cbc456e18561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:8b:87:76:59:6c:ab:cd:62:e6:4e:0c:5f:
                    9d:7c:89:74:c0:88:a8:ba:22:8e:1c:35:3f:ae:a6:
                    00:0b:f0:40:20:4f:b8:ce:72:8b:56:9f:4a:b1:c3:
                    b5:0c:81:7b:fc:c3:c5:6f:57:6a:17:06:32:38:24:
                    16:83:04:96:50:ba:dc:1d:f3:83:e2:fa:9e:a6:d0:
                    51:68:6c:e4:57:0d:37:3a:80:89:b7:2e:67:f8:4f:
                    be:27:1d:4c:ed:07:cf:d4:d6:fc:6a:f8:b0:a6:79:
                    96:37:6b:87:ed:1a:c1:4c:7c:87:62:9c:34:e9:06:
                    fc:1b:db:61:98:46:45:de:e3:c9:81:35:1c:a0:9a:
                    8c:b9:b3:cb:ce:c1:38:6b:2b:5e:39:17:3a:0b:00:
                    08:31:62:ba:e1:1d:5b:1c:6f:39:a6:30:9c:38:b9:
                    59:2e:56:4c:87:92:d6:a1:84:d8:97:5f:2e:94:8d:
                    12:cb:5f:38:30:6c:68:ab:ea:b0:0a:d7:74:27:20:
                    92:34:97:21:4c:80:f6:bf:0b:ef:69:70:81:8c:d0:
                    b0:8b:b0:a2:5f:23:02:29:ff:44:00:e8:25:23:2a:
                    ac:ba:a2:9a:ef:47:36:3a:35:89:06:1d:2d:d3:11:
                    f5:a3:4c:33:6f:38:6e:45:a7:9a:7d:2d:00:48:69:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:88:FA:C7:91:8D:B4:CF:05:3D:CB:EA:75:CF:A2:2C:BF:5F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88516fd0-2fda-3a9c-a358-db2fecb50fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e0:f9:02:26:9a:cb:21:e3:85:4c:e6:f3:43:0d:59:c2:30:
         ca:cb:08:5e:86:a2:1d:c1:3d:ca:37:43:c8:51:b8:0e:2c:1f:
         08:be:86:0d:88:d0:35:cb:42:da:2a:94:54:21:2f:59:06:1c:
         f2:7b:11:99:64:0e:39:ef:c4:8c:db:a2:78:65:01:b6:68:86:
         9a:05:f5:84:c0:02:e0:a6:fd:ee:cf:63:0f:0a:66:91:b7:6a:
         94:2a:26:31:3d:d3:73:d6:3d:94:97:16:09:91:5d:b8:12:22:
         22:f0:5e:50:e4:39:32:91:1a:37:67:5c:41:e4:14:f2:5b:e7:
         73:5a:e3:44:6c:5c:52:c3:24:18:74:10:71:18:96:c9:eb:16:
         5b:00:97:f9:ef:b2:e3:67:43:03:ac:bc:7a:2d:d0:96:4f:24:
         49:d6:ea:63:53:2a:10:b5:98:db:7c:04:7e:a3:4c:74:1f:f0:
         47:52:66:a1:7b:be:f8:80:2b:f7:4c:25:58:0e:b0:13:f5:aa:
         96:a4:11:36:7f:2e:dc:71:7d:e5:65:76:09:e7:a0:2a:fb:e1:
         20:cd:9b:8a:fe:e8:1c:02:d4:4a:e6:a5:13:52:34:4e:0f:fc:
         d5:d0:2d:37:bf:76:b1:61:a3:b0:8a:b7:9f:81:83:b6:d1:86:
         1e:75:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:12:25 2025 by rpki-client