Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b50656c-d814-3aea-a9c4-b4d8859859a3.roa
File:                     1b50656c-d814-3aea-a9c4-b4d8859859a3.roa (raw, json)
Hash identifier:          3YhF1UbeRUh7zksRoHxTiMDyjV8z1TMnT41Qg6LY1bs=
Subject key identifier:   46:B5:5D:8F:E3:57:5D:0D:CD:D5:27:08:90:06:65:4C:75:12:9B:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E6A457C8B393D8F44A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b50656c-d814-3aea-a9c4-b4d8859859a3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     36622
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e6:a4:57:c8:b3:93:d8:f4:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=2da106db-ec8a-40f8-93ec-676a639d38e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:40:9a:11:46:7f:e9:a1:73:c7:32:cb:29:
                    fb:c5:a9:05:39:1d:75:6e:a5:46:92:eb:ef:5f:45:
                    7e:60:4f:41:9c:8a:84:fa:a1:44:1f:2f:c8:3c:7f:
                    12:2b:d7:7a:b3:0c:30:5e:7c:57:fd:f3:d8:b3:76:
                    7f:e1:44:8e:c4:e0:4d:41:0e:5c:86:c0:70:1b:5b:
                    01:49:22:5f:42:24:f4:ee:f3:d0:69:90:15:1c:43:
                    77:bc:05:c2:4a:5e:79:b1:9e:48:f3:d6:4f:3e:d9:
                    5e:d7:c2:28:1e:34:dd:23:ad:1c:43:68:7c:44:3b:
                    c2:60:f8:c5:4c:13:59:d3:df:45:37:49:90:cb:c3:
                    94:2c:fc:df:26:aa:e5:87:41:a4:d6:7b:aa:b3:b3:
                    85:fd:d8:77:2c:4d:a0:66:67:59:be:c4:33:92:64:
                    7c:74:77:25:fc:8a:d8:b4:0f:a9:99:ec:8c:2d:a9:
                    42:80:41:d7:3a:b9:aa:58:15:6b:b5:ff:f8:62:b6:
                    22:83:95:ce:41:2f:6c:66:19:ab:18:55:02:1e:f3:
                    50:26:cd:34:14:73:73:d8:d1:44:08:da:56:02:1b:
                    08:1c:76:19:7f:a7:0c:fc:1a:96:07:a7:76:27:32:
                    2c:42:33:cd:4d:fc:18:9a:89:82:35:8f:9f:58:e0:
                    ce:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B5:5D:8F:E3:57:5D:0D:CD:D5:27:08:90:06:65:4C:75:12:9B:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b50656c-d814-3aea-a9c4-b4d8859859a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:73:62:2c:aa:d3:dd:99:4c:40:01:71:80:a8:ec:9b:0d:6e:
         45:df:25:46:b1:f5:76:f7:8f:d4:c6:55:9e:9f:86:1a:2e:de:
         b5:f9:3e:ba:b6:0f:86:6e:54:bd:57:e0:33:7c:b7:ca:f2:5b:
         35:66:a8:33:ec:26:e7:e9:62:9c:7c:89:5a:f5:4b:bb:56:73:
         b0:c2:50:57:6e:6b:70:38:f3:41:1d:f8:52:96:43:e3:76:c6:
         5e:ec:0f:51:2d:30:39:ea:5a:f1:09:c8:45:0e:92:ae:02:08:
         28:cf:39:2c:04:a0:17:19:15:1a:aa:0f:ab:a8:97:c9:bf:3f:
         7b:dc:f3:b9:26:e5:24:8e:ce:49:41:0a:01:67:8a:42:9c:a9:
         4e:ee:47:cb:19:62:ab:74:9e:c9:03:8b:ff:f2:0c:2f:96:ce:
         2e:0b:79:a9:e7:24:66:f8:09:87:9a:26:23:60:73:97:ae:b5:
         f9:65:86:7e:6f:d7:b2:ff:ab:8b:86:07:e3:50:26:ee:5b:e6:
         0c:52:27:4b:d0:d0:e3:19:63:38:fe:fa:70:a3:39:35:d8:53:
         ec:e3:84:c8:89:43:86:bc:15:df:49:96:8a:04:de:a6:8a:fd:
         ce:1a:62:db:26:a0:7c:ed:ef:13:7e:8e:cc:73:8c:73:b5:0b:
         01:19:88:38
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmDOeakV8izk9j0SoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
MmRhMTA2ZGItZWM4YS00MGY4LTkzZWMtNjc2YTYzOWQzOGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibdAmhFGf+mhc8cyyyn7xakFOR11bqVGkuvv
X0V+YE9BnIqE+qFEHy/IPH8SK9d6swwwXnxX/fPYs3Z/4USOxOBNQQ5chsBwG1sB
SSJfQiT07vPQaZAVHEN3vAXCSl55sZ5I89ZPPtle18IoHjTdI60cQ2h8RDvCYPjF
TBNZ099FN0mQy8OULPzfJqrlh0Gk1nuqs7OF/dh3LE2gZmdZvsQzkmR8dHcl/IrY
tA+pmeyMLalCgEHXOrmqWBVrtf/4YrYig5XOQS9sZhmrGFUCHvNQJs00FHNz2NFE
CNpWAhsIHHYZf6cM/BqWB6d2JzIsQjPNTfwYmomCNY+fWODO/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEa1XY/jV10NzdUnCJAGZUx1EpukMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWI1MDY1NmMtZDgxNC0z
YWVhLWE5YzQtYjRkODg1OTg1OWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBIc2IsqtPdmUxAAXGAqOybDW5F3yVGsfV294/U
xlWen4YaLt61+T66tg+GblS9V+AzfLfK8ls1Zqgz7Cbn6WKcfIla9Uu7VnOwwlBX
bmtwOPNBHfhSlkPjdsZe7A9RLTA56lrxCchFDpKuAggozzksBKAXGRUaqg+rqJfJ
vz973PO5JuUkjs5JQQoBZ4pCnKlO7kfLGWKrdJ7JA4v/8gwvls4uC3mp5yRm+AmH
miYjYHOXrrX5ZYZ+b9ey/6uLhgfjUCbuW+YMUidL0NDjGWM4/vpwozk12FPs44TI
iUOGvBXfSZaKBN6miv3OGmLbJqB87e8Tfo7Mc4xztQsBGYg4
-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:33 2025 by rpki-client on console.sobornost.net