Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61d579b-ea87-3212-9e74-b3d411b6107a.roa
File:                     f61d579b-ea87-3212-9e74-b3d411b6107a.roa (raw, json)
Hash identifier:          psTFIgBVQhMoLhju0o1fKcKwSGTyxYFVz3xB2k7f9oM=
Subject key identifier:   8C:00:90:09:12:8F:29:D5:51:73:36:5B:CD:04:9A:C3:CE:E4:26:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242EFCDFEA428F40D348800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61d579b-ea87-3212-9e74-b3d411b6107a.roa
Signing time:             Thu 19 Dec 2024 13:45:06 +0000
ROA not before:           Thu 19 Dec 2024 13:45:06 +0000
ROA not after:            Wed 19 Mar 2025 12:45:06 +0000
asID:                     396592
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:ef:cd:fe:a4:28:f4:0d:34:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:06 2024 GMT
            Not After : Mar 19 12:45:06 2025 GMT
        Subject: CN=a84753c7-0776-4c9f-9d27-073e3543a037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:80:d3:bc:34:0f:a5:d7:8b:19:76:e7:c4:
                    a4:9f:c8:ae:30:fb:52:25:da:38:ea:52:81:ad:9f:
                    1a:9e:3b:62:f4:cc:7f:41:a8:9b:b9:4e:36:88:ef:
                    f5:e3:8e:ee:46:da:ab:1e:32:e4:18:81:ef:ce:99:
                    77:83:90:2b:82:d6:bb:76:a2:bf:0f:d9:b5:26:34:
                    51:f8:ef:4c:14:30:36:95:e5:90:ff:b8:94:f0:23:
                    bf:59:09:aa:7a:d2:14:b2:38:38:c5:be:9f:63:75:
                    37:70:79:ef:c2:40:cc:6b:43:08:97:56:ee:0f:80:
                    89:8d:7f:ea:86:fa:a6:b3:c5:e0:d7:58:ca:a6:08:
                    99:24:14:64:ca:f3:35:41:1c:83:f7:7b:54:9b:e4:
                    6a:62:9d:b0:25:87:64:1e:65:de:01:25:b7:a1:25:
                    c0:98:d9:f2:08:27:bf:06:fc:59:80:3f:bc:b4:bc:
                    e3:15:78:12:8c:c2:23:ab:63:5f:8f:5c:5f:cc:fd:
                    7a:30:91:23:d5:61:33:67:0d:c4:c3:b8:5b:9d:3b:
                    45:1e:d1:96:d4:11:cf:ec:72:66:af:2a:02:7c:b9:
                    57:ec:99:72:73:49:e3:1f:8a:1f:9a:51:f0:b2:a4:
                    48:29:61:3c:27:2a:52:10:30:43:45:a6:33:10:8a:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:00:90:09:12:8F:29:D5:51:73:36:5B:CD:04:9A:C3:CE:E4:26:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61d579b-ea87-3212-9e74-b3d411b6107a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f8:1a:88:93:ea:b5:15:29:2c:0d:ca:37:32:a2:72:f7:14:
         14:ca:78:92:15:ca:38:ed:f9:da:e5:0f:5f:be:e3:d3:5b:7e:
         6c:ad:6a:04:d4:8c:b3:72:7a:39:5c:00:eb:07:c4:82:4f:1b:
         72:49:77:c8:17:67:ae:7f:58:05:a4:48:c5:37:4d:d6:ab:d4:
         00:b6:62:94:db:be:ee:1e:5c:3b:ad:4b:cf:b0:ad:d7:1f:87:
         12:d4:70:9b:cb:3c:33:8b:a9:ef:4c:fe:30:09:f6:2f:06:ac:
         6c:51:6e:a6:4f:a6:95:cb:29:1d:01:d5:6e:1e:bc:f9:10:50:
         cd:9b:26:28:c5:f7:2c:6b:d6:de:06:ab:95:f8:ae:db:6f:ca:
         fa:16:b0:41:c1:24:70:64:8c:22:d3:a6:60:8b:93:aa:0e:ee:
         8a:eb:10:0e:cb:5e:ed:9c:87:00:8f:d0:07:6f:f0:00:da:44:
         08:01:40:f4:2f:7f:f2:0c:18:93:1a:b3:8a:9c:77:b4:45:d4:
         ee:6c:18:87:ca:55:18:94:67:4a:70:79:f5:55:98:da:ca:4a:
         8c:84:cc:9f:a5:d8:be:aa:82:07:f3:8f:07:86:b8:a6:d4:f1:
         dd:7f:f2:67:36:42:fe:f9:c8:55:f6:8b:27:f8:e7:d4:c7:e7:
         9a:0b:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:52:00 2025 by rpki-client