Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8de00d90-4209-3fb4-a770-6de2cea736e9.roa
File:                     8de00d90-4209-3fb4-a770-6de2cea736e9.roa (raw, json)
Hash identifier:          JBPUG1qU2A66vEEn/m2mZQuOXrdjLY67WM55z4F6F9A=
Subject key identifier:   F5:5F:76:E4:6B:28:3A:DC:A7:51:83:D3:63:96:DE:E4:AA:BA:F6:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C57339795FDEE986EBB27600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8de00d90-4209-3fb4-a770-6de2cea736e9.roa
Signing time:             Tue 04 Feb 2025 13:33:18 +0000
ROA not before:           Tue 04 Feb 2025 13:33:18 +0000
ROA not after:            Mon 05 May 2025 12:33:18 +0000
asID:                     36626
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:39:79:5f:de:e9:86:eb:b2:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:18 2025 GMT
            Not After : May  5 12:33:18 2025 GMT
        Subject: CN=0e965cf0-eab0-4bee-949b-c62f345ff447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d8:88:70:da:ad:8d:fe:5d:ee:03:00:44:32:
                    35:3f:3b:1a:50:92:c1:23:08:bc:00:e7:c2:fa:db:
                    40:fa:ff:2b:63:e1:0f:57:97:fd:f9:dc:ab:4e:5b:
                    7d:72:c5:91:dd:03:cd:eb:8e:56:1d:76:c1:5d:5b:
                    ab:f8:dd:21:69:7b:b6:ea:23:91:17:f0:d6:8e:da:
                    3a:81:48:17:ef:28:99:cd:39:06:e0:e8:ce:80:a3:
                    4b:4b:fb:97:b1:1b:75:a3:94:f9:9d:cb:8c:8a:b2:
                    95:d4:a2:39:e9:89:84:9a:24:e6:4e:61:d2:9c:ba:
                    84:85:3d:5e:33:c3:2d:bd:cc:ab:2c:61:23:f8:86:
                    d6:bd:4d:60:6e:cb:f8:c2:ef:19:06:2e:55:7a:b2:
                    af:c6:a0:d4:50:30:08:9b:94:b2:d0:ea:21:1a:39:
                    a7:1c:02:cd:11:2a:a9:d3:92:c1:1d:2f:b6:f2:66:
                    9c:10:c5:89:a6:de:f4:ed:0c:91:20:e8:47:84:73:
                    3a:7f:f4:bb:18:61:00:53:d5:2f:54:9c:55:03:38:
                    17:0c:64:cc:4a:65:cf:d0:de:10:59:a9:fa:9f:f2:
                    ed:03:1e:2f:66:d7:1f:c1:5b:6f:9c:35:76:f1:b5:
                    24:ba:68:47:74:c5:39:ae:d4:0d:1d:97:ff:15:de:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5F:76:E4:6B:28:3A:DC:A7:51:83:D3:63:96:DE:E4:AA:BA:F6:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8de00d90-4209-3fb4-a770-6de2cea736e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:89:4f:1b:54:9d:3d:19:33:6e:bb:38:08:38:ed:48:5d:79:
         47:e3:fb:ad:17:ad:c1:e7:04:e6:23:50:49:9d:e8:3b:f3:8e:
         9e:3d:9f:d5:1e:5e:92:d0:72:4b:88:4a:dc:1d:e5:50:6f:5a:
         38:78:68:f7:fd:c9:59:cf:eb:e4:b2:90:46:0a:fe:27:45:4b:
         3c:dd:1f:06:7f:6a:10:ef:b8:24:ec:ec:fd:28:23:94:7c:86:
         31:62:20:3b:a8:15:95:c7:51:21:81:5f:7e:42:10:cd:8a:81:
         b8:01:24:b1:ac:3e:c3:fc:0e:df:eb:13:e7:19:02:0d:28:ec:
         a7:ad:35:c5:23:60:b2:5f:2b:7e:d9:8b:fd:a5:25:f9:33:7e:
         4b:7a:47:df:2b:46:fb:b7:c7:6e:69:7a:7c:08:1e:8b:2e:bf:
         9f:c2:c7:11:33:0d:bd:2f:92:3f:fe:94:e0:df:04:38:43:a7:
         d1:d4:c8:00:40:68:00:4b:74:33:59:c4:6b:5b:c9:9d:45:ec:
         16:26:3b:b8:cb:4f:aa:ba:6f:88:08:fd:b5:e1:ae:0a:43:12:
         3a:7e:9a:08:b8:a7:85:a0:0e:1d:cd:3f:c1:43:11:cf:d9:1c:
         b8:e6:ae:4f:d0:98:c0:c2:49:94:77:3b:64:38:85:04:f7:3f:
         86:5a:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:51 2025 by rpki-client on console.sobornost.net