Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
File:                     e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa (raw, json)
Hash identifier:          6gDiXmAD8+8Zss9yTr1tWm4Ff45MBJLJmNvnMA5CW/o=
Subject key identifier:   9F:76:4E:FE:27:34:35:DB:C3:BA:0F:D2:4B:A0:15:F0:B5:F0:54:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848372010AA68E2E8E68CE70480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     396612
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:10:aa:68:e2:e8:e6:8c:e7:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=d65a8471-b679-48c0-8f23-6e216f0b7990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:57:7b:8d:3f:e3:5c:d7:1b:3d:99:28:c5:
                    77:9f:cf:e6:90:72:ee:63:6a:cb:ce:cd:d8:98:8a:
                    84:c8:03:6e:9f:14:47:c9:6a:bf:de:bd:4f:17:7a:
                    c0:8e:28:85:5a:2c:83:4e:5c:aa:0b:40:79:c0:34:
                    a5:2f:a9:be:44:f2:20:d3:13:9d:7d:e1:3c:bf:bb:
                    a0:28:16:a4:5a:b4:b8:06:91:76:90:42:ae:28:64:
                    72:8e:df:ac:1a:80:64:dc:53:71:0b:08:4e:24:a8:
                    a0:19:92:36:8d:c5:70:bc:eb:82:4d:db:a3:35:cc:
                    21:ec:78:51:0a:12:c3:db:c4:17:1e:fa:19:8b:49:
                    9d:06:df:1b:62:db:b7:b3:78:cc:f9:52:96:0d:d0:
                    bd:8a:26:34:ac:7b:c3:dc:fb:f1:01:9a:82:8c:cc:
                    bf:d3:62:46:32:8c:8b:04:d3:bb:49:85:ec:16:fe:
                    f2:67:a3:39:76:74:d3:7c:48:f4:ca:29:02:db:b7:
                    8e:f5:71:97:a4:d5:f6:6a:6d:17:13:40:c0:56:e0:
                    bc:70:aa:04:c0:05:09:6e:9b:da:64:13:96:3b:b6:
                    12:9e:82:82:d0:6a:ae:ca:af:95:64:73:02:96:3c:
                    99:92:22:3f:0f:40:05:0e:55:bb:da:18:a3:9a:28:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:4E:FE:27:34:35:DB:C3:BA:0F:D2:4B:A0:15:F0:B5:F0:54:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e0caf613-7e4f-3f99-a1f7-d865a79dc6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b4:03:da:b1:2d:78:bd:ec:7c:fa:8b:f9:87:96:2d:39:af:
         93:e7:97:f6:10:dc:c2:ca:41:94:fc:e0:ae:59:ab:81:f9:ae:
         cb:5b:e4:25:d7:70:57:6a:f4:ff:bb:01:30:1b:9f:92:72:52:
         3c:0c:f0:32:34:a9:24:23:a7:a1:ff:02:02:37:42:a8:49:3e:
         fe:f5:ee:f1:cd:60:38:8e:52:55:ea:e9:74:a3:05:e4:41:02:
         f8:e9:e9:cb:fd:91:f9:78:4f:68:d7:bd:fe:23:79:f7:7f:f2:
         5a:55:6d:ae:61:25:d6:be:a2:34:3d:78:ef:6a:b1:5f:ec:66:
         a0:1c:df:b4:4d:92:09:89:81:85:e4:f4:25:99:55:30:17:fb:
         b2:8d:6a:c3:6d:8e:5f:4c:06:94:bc:98:52:86:48:f5:a7:33:
         70:d9:04:87:92:28:5a:5b:9c:1e:6b:a3:24:0b:98:c2:6f:1c:
         40:10:d9:2d:7b:25:3d:d3:a1:19:50:bf:84:f2:11:9a:1e:ae:
         02:1b:6f:2c:9c:fb:e5:6b:96:22:9d:8e:11:38:65:72:90:8d:
         43:af:53:8e:a3:c8:af:14:8c:f8:56:ce:79:35:5c:bb:08:42:
         45:d7:f8:50:f3:cf:52:ba:89:0e:5b:a7:33:a1:da:13:64:ac:
         40:31:b4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:53:16 2025 by rpki-client