Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e944103b-6ee5-3f5e-b25c-6c8cd34b3fcf.roa
File:                     e944103b-6ee5-3f5e-b25c-6c8cd34b3fcf.roa (raw, json)
Hash identifier:          Blmzknux7Q5GzHn/vVw4pFfaaAwq34/MVv+WrRTA2Pc=
Subject key identifier:   53:6D:53:8B:F7:79:0B:DE:42:77:1E:89:9F:76:74:54:31:CA:0E:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858483720141E931A91C9A49D8180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e944103b-6ee5-3f5e-b25c-6c8cd34b3fcf.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     396580
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:14:1e:93:1a:91:c9:a4:9d:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=5f4934be-e5a7-410b-a53c-d60c8a91e6e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:80:5b:e2:70:18:23:f2:a6:4d:3d:9c:f5:
                    76:44:e5:45:b1:73:00:9f:aa:fb:01:f8:bf:6d:50:
                    77:a8:08:bd:4e:2a:48:42:c5:c2:8b:70:95:6f:3b:
                    a2:c0:a2:d8:07:75:24:ab:96:6f:52:00:f0:93:b0:
                    70:75:a2:ee:df:3f:32:f1:7d:e3:be:d4:35:81:df:
                    00:8b:fd:36:1a:65:de:3a:35:69:1e:96:a1:a0:56:
                    0c:46:e9:8e:77:51:ca:68:65:ca:7c:25:d4:6f:19:
                    95:18:4a:25:85:80:54:42:12:d2:5f:5e:61:ec:58:
                    b8:30:ac:fc:11:5b:2b:1e:93:8d:0f:dd:ad:e5:ca:
                    78:53:e5:63:63:70:8e:28:fa:2e:88:1c:61:f9:ea:
                    41:27:2b:15:75:16:a0:af:cf:2b:99:ca:4c:ed:bb:
                    32:45:1f:b3:2b:5b:16:95:f0:62:d8:df:61:88:c4:
                    ec:bd:69:24:b9:62:4c:9e:cf:31:a6:06:24:6e:7f:
                    79:d5:bc:b7:07:f7:ed:81:a4:c9:3e:4f:85:eb:95:
                    be:4d:b6:19:0c:df:bb:37:92:86:63:a9:f1:bc:18:
                    d3:0d:1d:fe:03:00:9a:7a:23:3c:6f:64:aa:00:17:
                    88:f9:43:22:7b:d6:ba:fa:12:af:49:8e:e6:2a:b5:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6D:53:8B:F7:79:0B:DE:42:77:1E:89:9F:76:74:54:31:CA:0E:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e944103b-6ee5-3f5e-b25c-6c8cd34b3fcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:29:b5:8b:d0:2a:3f:56:ac:92:ad:11:50:a5:34:62:c3:
         4d:57:90:db:44:71:eb:ea:6d:71:68:25:f3:f3:9d:91:52:5e:
         0d:08:3e:ff:ce:4a:8f:ee:e5:28:a2:2e:b8:cf:42:40:2e:39:
         a7:cb:fe:b0:0c:a7:58:1f:49:bf:91:9f:72:62:30:e4:96:c4:
         b1:47:46:4d:37:b3:0f:41:1e:c9:ac:0f:fa:5b:c5:b5:e7:7b:
         37:85:ea:ff:ce:6d:a4:8a:b1:75:f9:c4:38:09:19:57:a0:9a:
         34:cb:95:e7:e2:3c:a2:5c:e0:a2:53:bf:44:51:6c:4a:da:a8:
         c9:04:c1:cc:a7:d3:3e:ac:cf:e6:96:51:40:42:29:52:45:ce:
         93:75:98:29:96:10:b0:8f:bc:66:03:bd:f7:90:be:a6:0c:91:
         f2:67:17:5b:01:19:d4:36:21:5f:19:84:c8:5f:ce:aa:6e:52:
         20:e7:f8:60:82:0e:95:68:71:8f:2c:45:e5:08:95:96:54:a9:
         3e:86:60:21:b0:86:13:a2:39:95:48:7f:d7:7d:72:15:a6:ff:
         46:59:e7:c3:32:16:be:f4:0b:6b:be:53:a4:1e:77:8a:7a:58:
         b6:60:4d:17:39:cb:d9:1e:27:69:86:d2:42:33:07:ad:40:db:
         a7:a9:f6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:09:56 2025 by rpki-client