Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa
File:                     b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa (raw, json)
Hash identifier:          BG1UVzGCpmvl5qUqGmRIK+aSI0KOf2LH4kE5lu5gn8I=
Subject key identifier:   AF:F1:6D:E7:94:05:83:F5:A5:54:9D:0D:AA:62:3D:39:BD:C7:A0:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842432C7E104B9D0BC063D860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa
Signing time:             Thu 19 Dec 2024 13:45:35 +0000
ROA not before:           Thu 19 Dec 2024 13:45:35 +0000
ROA not after:            Wed 19 Mar 2025 12:45:35 +0000
asID:                     396606
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:2c:7e:10:4b:9d:0b:c0:63:d8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:35 2024 GMT
            Not After : Mar 19 12:45:35 2025 GMT
        Subject: CN=6600d710-e500-4529-bc25-5bc6ca2b6b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:19:3e:58:a9:1a:0b:f6:7e:48:cf:8e:46:
                    5c:f2:83:8b:96:6e:a5:00:5d:76:0d:c4:97:31:4f:
                    a8:8b:76:1e:ad:3e:5f:24:e4:c0:de:54:3c:9a:fe:
                    15:04:f2:1c:8b:c7:eb:9f:65:2d:a8:fb:98:f0:3f:
                    3e:e2:89:6e:79:e9:a5:96:ca:43:72:ba:b3:02:73:
                    0e:96:1a:d8:7e:ec:3e:35:6c:34:1e:41:02:fa:c3:
                    9e:83:96:0f:85:99:13:fe:a4:6d:c4:fd:33:e2:7b:
                    31:45:24:7d:74:70:6d:43:aa:20:c8:22:8f:5e:f5:
                    04:6a:f7:13:74:b5:5a:09:90:4a:e2:0b:10:64:3d:
                    c9:fc:31:2a:9a:0d:83:b4:6b:bc:f1:72:62:37:51:
                    5c:c6:48:d3:c9:5b:21:e0:1d:b3:0c:39:fc:d2:5a:
                    6d:42:47:10:34:f8:23:e5:7f:f0:90:09:d0:83:df:
                    b0:8d:ab:e0:94:0a:6b:8a:f7:46:77:59:24:f1:a5:
                    9f:1a:dc:58:28:0b:6f:3b:ce:d1:3c:4c:c4:cb:84:
                    8f:9e:88:1a:d2:dc:66:03:86:c7:78:2a:f6:18:1e:
                    f4:36:a7:9f:70:fc:85:b1:a8:f4:16:5d:73:3d:08:
                    43:1b:19:96:c9:3e:8a:a9:87:bf:c5:2f:6e:c3:f2:
                    86:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:6D:E7:94:05:83:F5:A5:54:9D:0D:AA:62:3D:39:BD:C7:A0:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a39e97-9498-3c1e-bd7f-12b6680a6a03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c0:a6:d6:e5:80:f1:74:4d:82:07:b5:1b:d4:7d:bd:49:21:
         33:37:9e:b0:6b:16:ac:ed:92:20:85:54:a8:8d:e3:b2:fe:a8:
         de:e0:10:1b:b1:a2:45:fe:a2:9a:47:e2:c5:c0:65:a5:da:1a:
         21:e8:2a:f4:c2:2c:2d:39:03:7f:1a:78:7b:a8:21:a6:bc:54:
         69:45:39:5c:27:63:5c:6d:5c:f1:1f:9a:0a:e2:48:aa:63:52:
         a6:0a:0b:b4:62:a4:c6:b9:a0:8e:8b:1a:6f:b9:f1:70:19:55:
         a5:06:da:2a:45:f4:fe:c7:3d:8f:24:31:97:c7:03:8a:03:48:
         3a:43:98:31:80:b0:f9:67:18:be:24:5d:67:b9:6b:ea:86:b3:
         c5:9c:8b:2c:7a:15:9d:39:54:f4:b3:f0:8e:22:be:98:19:9b:
         c1:35:76:c6:88:fc:26:f3:49:79:61:6f:39:07:ba:fb:57:dd:
         e8:ca:f1:1a:82:91:97:68:bd:19:d3:89:72:87:66:aa:15:9b:
         cb:43:8e:d1:ad:79:91:f8:e4:92:4d:c8:94:2d:70:e6:fb:c8:
         07:7c:6c:6d:2c:40:de:9b:8b:35:df:04:c0:5e:22:6a:ea:92:
         1f:5f:38:a5:a5:ba:e3:ff:33:dd:47:b3:eb:51:ba:82:92:c1:
         18:be:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:35 2025 by rpki-client