Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0edff175-352e-3b49-9f88-80c856667562.roa
File:                     0edff175-352e-3b49-9f88-80c856667562.roa (raw, json)
Hash identifier:          Ujz3I14d0ooVP1ENK8ZpgGhsU3+30UzbsLEnaB19E24=
Subject key identifier:   F7:18:9C:DB:7D:37:12:75:63:E0:44:CA:98:4D:69:D2:54:C6:99:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484243404BCBAAC7F37C56DA60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0edff175-352e-3b49-9f88-80c856667562.roa
Signing time:             Thu 19 Dec 2024 13:45:44 +0000
ROA not before:           Thu 19 Dec 2024 13:45:44 +0000
ROA not after:            Wed 19 Mar 2025 12:45:44 +0000
asID:                     396553
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:40:4b:cb:aa:c7:f3:7c:56:da:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:44 2024 GMT
            Not After : Mar 19 12:45:44 2025 GMT
        Subject: CN=5a0ec0da-d7bb-485a-9a50-8f76a48ee773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:64:0d:9f:19:47:c1:aa:03:05:4e:e4:9e:
                    16:f3:4f:81:ab:4f:07:4f:7b:d6:9e:0f:e7:b1:69:
                    5c:7d:68:e5:8b:b0:10:da:f7:0a:91:5c:cf:89:a0:
                    50:3f:14:56:c5:f7:8a:7a:9a:69:42:83:11:60:ac:
                    b1:4e:e6:e1:23:62:67:74:84:10:e9:86:1c:93:9d:
                    91:18:23:80:87:3b:f1:d3:1e:fb:0c:c0:15:92:5d:
                    0b:f4:82:82:33:c9:5d:a0:6f:94:0b:f7:1e:b0:f9:
                    b0:ce:38:b2:13:35:c6:08:71:0c:99:a4:f4:f9:0c:
                    9a:60:e7:1a:29:e5:f6:b7:7d:38:85:91:bf:fd:7c:
                    1e:5c:12:84:6f:b6:56:8b:fa:ab:d1:6b:f2:58:84:
                    85:3c:3c:dc:87:f7:37:48:c3:90:2d:14:0a:14:56:
                    a6:0f:c7:e7:5d:16:fa:7b:8b:32:a8:0b:c0:ad:b9:
                    30:a2:59:c5:df:a6:b9:f9:97:88:7d:5d:98:c8:7f:
                    89:bb:66:ad:ce:eb:09:42:84:92:c8:f9:49:38:f8:
                    ea:ca:ec:13:44:3d:69:ae:c9:08:be:58:3f:7b:8f:
                    4f:5f:83:d7:05:4e:e1:88:94:a1:0f:1b:2d:de:94:
                    43:33:ea:af:cf:5f:ee:ef:51:51:e1:ff:86:44:53:
                    a6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:9C:DB:7D:37:12:75:63:E0:44:CA:98:4D:69:D2:54:C6:99:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0edff175-352e-3b49-9f88-80c856667562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b8:ce:75:1b:91:1d:3e:38:b2:b2:f3:e2:0e:21:9d:e6:0a:
         74:39:a1:2d:c7:ab:41:26:b4:ed:38:93:d4:b5:ba:9e:28:f2:
         99:75:96:07:c1:a5:9f:c4:2a:6e:33:84:25:59:f2:07:47:21:
         1b:61:bc:37:17:53:f6:b8:56:8c:8b:b6:b6:a4:e5:d5:5b:b7:
         3d:04:2a:55:ca:fd:82:16:c1:70:95:df:38:c5:d8:b5:e7:32:
         4c:ac:8d:8c:91:4f:ac:e1:79:69:16:a4:1f:59:84:15:b9:5c:
         ca:16:c3:35:66:2d:3b:78:a8:fb:8c:29:05:74:de:fd:62:03:
         5b:09:58:eb:6e:d1:40:4d:81:36:e4:03:b7:61:90:d9:c6:24:
         93:68:5e:06:fc:96:20:a9:d7:e5:63:b8:ad:49:1f:38:db:04:
         a3:ce:c0:d6:a0:eb:e4:13:ed:fc:06:b9:97:a9:6d:fb:44:09:
         2f:23:52:0d:63:ee:c6:a5:e5:39:6b:04:50:ea:f3:93:69:e2:
         a7:3b:61:26:84:07:5b:25:7f:42:f4:40:9c:1b:e4:e7:97:0e:
         06:94:f3:cf:8e:0b:d0:a7:4d:91:92:4d:d2:04:78:ad:6b:e9:
         4e:58:96:f0:cf:6c:e7:89:a2:f2:33:0f:37:9f:35:d1:97:a1:
         1a:03:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:39:53 2025 by rpki-client