Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb00f958-6305-34b6-bebc-121244e5322a.roa
File:                     fb00f958-6305-34b6-bebc-121244e5322a.roa (raw, json)
Hash identifier:          zSbzjL4NkE8sCNX9/tuY+DfK0FIHYEIbLjCIQ2gqd7s=
Subject key identifier:   A7:39:79:EE:A8:30:6A:B6:B3:1E:39:96:D4:9F:FB:89:C5:3E:B7:39
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FF8C8C17E092F5B0B480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb00f958-6305-34b6-bebc-121244e5322a.roa
Signing time:             Thu 19 Dec 2024 13:45:14 +0000
ROA not before:           Thu 19 Dec 2024 13:45:14 +0000
ROA not after:            Wed 19 Mar 2025 12:45:14 +0000
asID:                     396586
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:ff:8c:8c:17:e0:92:f5:b0:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:14 2024 GMT
            Not After : Mar 19 12:45:14 2025 GMT
        Subject: CN=b54273ba-1a05-4c88-9a25-e281b802723d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6e:1f:73:f2:d1:36:c8:cd:6c:d5:e7:d9:2d:
                    e5:cd:e7:5d:71:6c:ba:61:15:f8:71:a7:ad:1f:f9:
                    44:5e:f5:78:93:b6:7f:52:91:d0:bf:a1:49:c1:ca:
                    4c:e0:f0:ae:c1:2d:0a:dd:8b:64:fd:80:c0:ba:bb:
                    9d:49:9a:58:f1:f5:98:29:5b:42:ab:92:dc:e7:ca:
                    70:93:6d:cb:8f:85:c1:59:3b:33:6e:80:6c:1b:33:
                    2b:ef:3f:2e:a9:38:68:5f:a8:94:40:4e:d1:d3:ed:
                    69:4d:7a:8a:41:e1:bf:42:fd:6d:81:5e:c2:0a:7a:
                    ff:4d:5f:ab:e0:9f:ae:ce:41:c9:2c:c1:3b:60:9b:
                    f3:0d:5b:80:97:0b:3b:bd:66:dd:63:82:29:49:3c:
                    1e:84:46:db:c7:c3:7e:ca:82:01:f7:8d:2d:d4:7e:
                    13:3d:fd:87:92:03:56:6b:a3:ac:de:6c:15:9f:03:
                    b7:c6:e0:a5:c3:1b:80:0e:75:1a:35:0f:59:35:ca:
                    4b:cd:0c:e5:ed:47:21:7b:ae:8d:a0:40:58:c8:2f:
                    fc:f1:bc:20:93:f7:ac:74:89:d2:6d:32:d9:19:0b:
                    be:64:05:01:14:86:0e:10:76:90:fb:e1:80:3e:1a:
                    3a:fc:7b:e0:66:80:5f:30:cd:0d:ce:3b:8d:f1:67:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:39:79:EE:A8:30:6A:B6:B3:1E:39:96:D4:9F:FB:89:C5:3E:B7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb00f958-6305-34b6-bebc-121244e5322a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4e:2e:ff:05:71:a6:fe:18:6c:12:4b:3b:8e:7e:1f:ec:89:
         a2:c0:bc:d1:24:54:0b:64:5c:71:c4:e7:66:b5:8c:59:58:b4:
         65:a9:94:46:16:76:7c:e7:24:3d:f1:cf:2a:e8:b5:d8:0c:9e:
         e3:72:04:34:99:7c:64:34:bf:58:a7:b5:5c:99:5e:ba:16:e9:
         86:be:c1:94:61:23:db:61:07:61:ce:7b:47:bf:c5:6f:65:ca:
         35:c1:37:c4:94:69:c4:db:86:f1:2b:3c:3f:37:b4:e8:b8:53:
         f2:9f:41:c9:4f:25:e0:8f:7b:16:2c:a0:e8:2c:7d:1e:24:0c:
         1c:a1:63:16:1a:cb:7a:a4:3a:96:1a:61:e1:72:58:27:0b:75:
         eb:4f:57:72:74:f2:9d:f9:af:ca:9d:95:82:32:6e:db:88:1b:
         e0:c6:5a:5b:72:53:67:32:6e:0f:5e:f7:b9:28:2c:81:a6:6d:
         d4:d7:4c:eb:38:6d:66:af:e7:cc:65:6c:d0:f3:97:7f:44:ac:
         f3:6a:58:75:b8:c4:66:83:af:58:66:d7:75:23:a1:b2:f2:0e:
         21:2d:26:77:ca:c6:cb:ad:39:dd:24:61:8b:92:e4:31:dc:98:
         73:24:de:53:c1:25:3b:8e:ca:2c:3f:69:e5:a9:81:31:d4:82:
         2c:7d:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:26:17 2025 by rpki-client