Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5c046f1-b68e-36c9-9693-90ac61a81a59.roa
File:                     d5c046f1-b68e-36c9-9693-90ac61a81a59.roa (raw, json)
Hash identifier:          bAaiyNE1nACkYGRdh+P38dVbRgxGGC1T/Spi0niuvZA=
Subject key identifier:   16:9D:BD:9B:A2:53:3A:FB:30:35:26:BE:FF:92:53:13:3D:0B:6D:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484D75A08B77694991BB3DF980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5c046f1-b68e-36c9-9693-90ac61a81a59.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     40717
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:a0:8b:77:69:49:91:bb:3d:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=cebb5fc3-fb2c-4958-838a-3fb0e5d15366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0a:3e:f5:65:5a:92:9a:4f:2d:27:e8:cf:06:
                    79:e7:0f:ef:1c:79:06:5b:43:08:cc:17:ba:26:fe:
                    6d:6d:3c:b7:53:b3:7f:0d:de:1d:1b:b6:38:b7:16:
                    10:00:f0:71:23:12:fe:ec:f6:97:67:b6:fb:09:b9:
                    bd:9e:37:41:55:28:04:cb:f0:e9:4c:d8:dc:7b:c7:
                    dd:a6:40:e3:47:2b:f9:30:87:51:16:2c:39:9b:93:
                    66:b2:e9:4d:ff:b1:c1:37:e3:e5:42:48:20:6d:60:
                    c4:1a:b2:c4:61:4f:1f:1a:d7:4c:95:cb:cc:98:72:
                    16:21:c5:4b:6c:a1:4e:80:73:3d:c6:65:52:db:65:
                    c3:69:8e:28:b1:52:7f:af:00:e4:06:d2:81:11:7b:
                    a6:b4:18:6c:3a:81:77:bf:93:44:f7:38:38:4c:6d:
                    e2:78:16:39:1c:a2:e3:0e:67:31:7a:a1:85:fc:13:
                    00:ef:8a:7f:73:11:6b:b5:03:89:8a:72:57:9d:fa:
                    91:47:56:db:df:bd:91:33:84:b8:6a:a7:40:bb:70:
                    6d:ef:1b:b5:60:8f:d8:fb:08:4d:8e:7f:93:ea:13:
                    d2:be:21:00:6c:2e:00:57:36:7e:f8:43:d1:0e:97:
                    43:03:c3:9b:33:fe:42:fb:f1:22:0d:61:28:e2:d7:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9D:BD:9B:A2:53:3A:FB:30:35:26:BE:FF:92:53:13:3D:0B:6D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5c046f1-b68e-36c9-9693-90ac61a81a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:9c:00:9b:a3:b0:bd:c0:88:34:06:e7:36:bf:f6:ca:7a:
         00:e0:d3:09:c4:5e:44:57:f0:c6:38:0b:f0:44:70:a3:3d:f8:
         98:6f:e4:d4:76:cd:22:11:e4:45:63:e3:26:e9:39:8e:44:33:
         ca:87:85:ef:19:da:a8:43:f7:6c:1e:9d:2b:55:a4:da:dc:82:
         aa:a9:04:4e:23:db:f7:5c:b6:e0:12:6b:4d:2a:d3:5a:c9:c4:
         e5:6f:68:46:5a:63:95:8d:e6:ce:29:9b:6e:fb:6d:0d:ef:15:
         3f:4e:6f:e9:b8:38:de:e0:3e:c6:b0:87:92:5c:f0:16:38:8d:
         ec:40:89:a1:0d:87:5c:df:63:a1:b4:3d:71:6e:12:c0:e7:20:
         da:b8:2a:16:70:1f:56:4a:a0:c1:df:23:4b:a2:4e:8a:10:25:
         dd:a9:77:31:28:a5:72:be:3f:7e:4e:f3:82:f9:e8:d4:94:b2:
         68:4f:86:56:cd:9a:d4:06:26:c1:c9:36:8d:d4:57:b5:84:1f:
         b2:95:28:71:4a:6c:2d:8b:3b:32:dd:95:47:69:60:53:c2:0f:
         cc:e5:9b:cb:a2:04:59:fa:30:5d:66:4e:99:9e:45:2f:18:c8:
         5a:b4:1b:cd:de:2a:17:ee:1f:fa:c8:65:03:37:fa:42:b5:6b:
         3e:7a:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:03:25 2025 by rpki-client