Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa
File:                     b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa (raw, json)
Hash identifier:          sYoWFAuTFU5bTgFIASJgV3qxWHqYLJgNijtF3RzZedE=
Subject key identifier:   28:4B:FF:AC:81:3C:42:40:5C:EF:56:97:9C:2A:57:52:9D:CE:4E:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489BA0B8D2D2B05692B7292E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     396602
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:b8:d2:d2:b0:56:92:b7:29:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=4b7f3bec-8e88-4a54-9aca-be7a28a206d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:08:5a:37:4f:a4:d5:09:98:00:d1:a6:68:
                    de:6f:a5:62:93:61:97:9e:05:a7:79:3b:dd:e4:07:
                    4c:65:6d:83:e0:b5:c3:e6:b7:69:08:ca:02:d2:0c:
                    a8:16:be:b6:5c:8c:cd:b3:b5:bc:54:db:72:33:41:
                    fb:25:98:6f:41:49:6f:97:45:77:cf:87:3a:d2:d3:
                    97:cf:d2:7a:a6:26:5e:8e:c6:98:6b:22:30:95:23:
                    f8:2e:6d:76:b8:bc:b7:94:98:30:a1:08:88:71:80:
                    ea:e5:21:81:d5:59:04:4d:97:8f:6f:4d:96:d8:c4:
                    04:da:32:bb:2b:62:f3:35:7b:4f:04:ef:37:d4:78:
                    c1:d6:b1:c9:8d:5b:a6:49:cc:02:86:d2:c0:78:b1:
                    99:42:70:fa:e6:0e:af:a8:17:47:c3:74:01:cc:c1:
                    ee:18:83:6d:c1:fc:30:9b:fb:80:d9:4c:71:86:4c:
                    d8:f4:c3:f5:8a:a4:b3:ed:fe:ed:93:94:53:00:38:
                    47:12:bb:39:92:6c:0e:fd:18:e0:41:4f:3f:42:8c:
                    99:dd:16:4c:fc:e4:08:aa:1e:5e:96:fc:e0:d1:f1:
                    27:d4:84:88:4b:e1:08:e2:f9:5c:76:f3:3e:5d:7a:
                    e2:48:5f:f8:90:c9:91:54:bb:10:48:f6:04:b9:dd:
                    69:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:4B:FF:AC:81:3C:42:40:5C:EF:56:97:9C:2A:57:52:9D:CE:4E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:44:e6:4d:2e:ab:30:d9:bf:03:c4:14:8b:70:48:c8:22:7d:
         6d:d4:d3:3c:2a:50:ec:5a:75:54:1b:0f:ab:c8:e1:1a:35:fc:
         19:4d:14:18:94:ec:bf:a0:6b:d0:99:d4:21:bf:f7:24:1f:5f:
         af:8b:5d:de:cd:ff:1d:65:07:17:f1:5f:72:41:22:27:40:55:
         15:37:91:52:6d:ab:c7:b7:ce:d8:aa:a2:21:1c:38:2a:cb:7d:
         8f:7b:02:67:14:29:cc:33:8c:57:50:5c:ea:03:87:95:58:77:
         9d:0e:bc:7b:93:fd:c2:17:91:ee:89:a4:3e:0e:2a:e6:d5:69:
         e9:91:cc:bc:fe:04:e5:60:2b:9f:04:86:06:6b:8b:9f:d3:06:
         a0:96:8a:5a:28:95:5c:ff:05:ba:42:c4:18:ba:b5:67:04:35:
         0a:5c:6b:e3:ee:97:eb:6c:b6:c6:ff:c2:97:de:87:bc:10:31:
         83:56:39:96:3c:8f:39:3a:5e:ae:ff:10:6a:cf:bf:c8:f2:53:
         d1:f3:be:73:57:f7:99:8c:71:e2:4e:cb:35:06:f7:a5:b7:c2:
         94:29:c8:65:30:21:53:21:eb:73:a5:7b:82:73:00:8d:91:97:
         20:8f:74:0c:cc:3b:0b:e8:3a:90:9c:03:0c:01:64:3d:36:3d:
         d0:85:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:04 2025 by rpki-client