Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cad71b7-b31f-35ee-a2a3-090df3fd8927.roa
File:                     3cad71b7-b31f-35ee-a2a3-090df3fd8927.roa (raw, json)
Hash identifier:          BMy6sDCxxftd+SXGrMt9pqzPOOYXJ0DJd8dR9sK/blQ=
Subject key identifier:   7E:F0:D9:BC:F8:07:14:D7:7C:FD:63:95:72:24:8C:2D:E5:94:75:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485B6B0AA286D1E085884CB380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cad71b7-b31f-35ee-a2a3-090df3fd8927.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     7342
IP address blocks:        2001:503:5419::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6b:0a:a2:86:d1:e0:85:88:4c:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=55f20746-eae1-4cc6-a475-f3440864cd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:cc:cb:eb:93:97:ed:ed:01:dc:89:1d:60:
                    39:7d:a6:29:2e:6a:ed:09:19:35:37:7b:00:0d:bf:
                    25:18:f6:2b:3c:49:b7:53:1e:c6:83:ab:24:e9:67:
                    af:73:01:19:a2:0a:bc:30:c5:28:66:48:f6:64:ff:
                    7c:1f:7c:2b:1a:2f:0c:71:1d:aa:a8:25:d4:a6:32:
                    88:45:43:f1:04:86:53:32:0a:0b:4d:59:ee:16:16:
                    3d:dc:33:70:4a:4f:26:78:0d:57:f0:08:df:b1:0b:
                    5b:54:b7:bb:3c:1c:83:ea:28:6b:28:0f:98:39:f4:
                    8b:f8:4e:14:87:e5:e5:07:0d:10:3d:a0:0d:d2:72:
                    f7:bd:94:35:46:b8:e1:54:f9:f2:b6:49:d1:8d:14:
                    af:cd:35:65:94:49:25:22:50:7c:04:67:f4:20:5f:
                    a3:af:b0:97:f4:1f:03:a2:3c:4b:65:52:7e:a1:11:
                    86:a4:23:f6:da:e8:0d:c6:56:4c:d1:49:e5:89:54:
                    cd:1e:60:1e:67:4f:2c:05:44:fb:7c:39:bc:4e:bf:
                    92:be:1e:ea:30:40:15:15:d2:39:07:31:0e:13:c8:
                    9e:e4:51:f1:ca:2a:69:7c:3c:d8:c6:c3:04:18:39:
                    28:f1:e0:16:0e:ad:50:aa:4c:43:a7:3e:f4:c8:a3:
                    9f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:D9:BC:F8:07:14:D7:7C:FD:63:95:72:24:8C:2D:E5:94:75:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cad71b7-b31f-35ee-a2a3-090df3fd8927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:5419::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0f:84:ee:b4:f5:1a:11:a6:f4:9a:d8:1d:74:58:89:d3:4a:
         86:7f:7a:74:2f:b7:04:03:36:ae:c5:6a:ef:02:25:93:a7:5f:
         d5:29:dc:31:de:da:fd:d0:bc:69:d3:49:81:da:1c:97:74:a2:
         34:d1:96:c4:f8:a6:da:96:5d:bc:79:1a:56:b9:b8:f8:30:0b:
         8f:5b:0b:54:dc:97:7c:80:c8:97:65:b1:68:12:d6:4c:e3:95:
         b2:5c:09:5c:ef:0a:7d:35:57:a5:d8:cd:ea:77:e5:05:c8:b4:
         05:28:f1:3a:ec:61:90:7e:e7:fd:6e:b9:82:b9:bc:fb:c7:35:
         f7:7a:c3:a7:22:47:2b:b8:97:78:82:85:d4:34:c1:0a:79:68:
         11:47:fd:bb:91:64:d2:a5:22:93:4d:07:7e:4e:06:20:ff:e9:
         b4:f2:b2:44:2b:cd:7a:f7:3a:cd:34:93:0a:85:fe:bf:3d:30:
         0d:39:f2:98:ae:52:26:c4:47:3e:a4:c0:3d:8a:64:74:b7:59:
         24:96:10:7a:74:0b:cc:22:e6:1d:b1:25:10:1b:4d:7c:2f:7e:
         6e:eb:df:e2:fd:14:5a:d1:71:9d:42:5b:fb:b6:8f:2c:aa:d4:
         39:71:5e:11:3a:25:bb:10:47:54:6d:9a:c3:c4:50:eb:75:6d:
         11:a7:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:15:07 2025 by rpki-client