Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436403c2-7414-3e87-ba9a-055f1e16ee5a.roa
File:                     436403c2-7414-3e87-ba9a-055f1e16ee5a.roa (raw, json)
Hash identifier:          K7I3nDCOXJbPIaNJa3E0GMXbpG1puIjGOPNBUk2KkOE=
Subject key identifier:   08:3C:0D:55:6A:81:98:ED:A5:12:70:BD:15:F1:44:29:57:ED:15:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842431373B754B91388844B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436403c2-7414-3e87-ba9a-055f1e16ee5a.roa
Signing time:             Thu 19 Dec 2024 13:45:23 +0000
ROA not before:           Thu 19 Dec 2024 13:45:23 +0000
ROA not after:            Wed 19 Mar 2025 12:45:23 +0000
asID:                     36625
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:13:73:b7:54:b9:13:88:84:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:23 2024 GMT
            Not After : Mar 19 12:45:23 2025 GMT
        Subject: CN=fd709a6a-cf38-47b0-b862-5419f243b713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:d4:d7:cc:9b:c4:10:55:5c:bc:5b:99:87:
                    e5:6c:da:e2:74:18:34:4c:92:c5:fd:7f:c4:cc:44:
                    b8:8b:d8:86:82:49:92:c6:31:c8:15:bf:2a:ff:c0:
                    5e:84:da:cd:c2:66:ba:21:b0:cf:90:f4:cd:8a:67:
                    5b:e4:20:fe:43:c7:69:16:41:1d:af:84:71:4e:36:
                    80:f2:a5:1a:4b:c6:b9:fc:bd:ad:e8:ef:18:01:0a:
                    12:b9:4c:72:1e:ee:f5:79:bf:10:c8:52:6e:db:43:
                    a5:58:75:c5:46:cb:cb:9d:8b:6c:68:0e:eb:60:19:
                    17:7a:71:46:44:0f:5b:db:16:2e:4f:99:34:f9:f3:
                    92:87:ef:08:06:9f:56:4b:85:ca:87:ce:77:00:66:
                    f6:3e:e9:85:09:44:78:31:35:b0:a8:9f:e2:40:76:
                    52:b0:5f:d9:a2:02:b5:e4:41:0f:e5:f7:10:74:51:
                    4a:a9:9b:8f:17:19:3f:ba:43:cf:ed:92:9a:a2:1d:
                    64:96:f7:1e:30:d6:04:55:13:cc:a6:f6:ed:46:8b:
                    78:7d:d3:7a:6c:8f:39:4f:b9:3e:e0:81:6d:a0:b3:
                    ea:00:17:11:ea:5c:65:bb:ad:b6:54:8f:d3:71:18:
                    88:5f:13:0a:b9:f3:88:81:f2:ba:4f:e5:83:62:7e:
                    fe:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:0D:55:6A:81:98:ED:A5:12:70:BD:15:F1:44:29:57:ED:15:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436403c2-7414-3e87-ba9a-055f1e16ee5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:27:3f:1d:df:ac:7a:82:ba:29:82:6f:eb:a9:bc:1b:d1:18:
         5d:e6:60:9d:8e:88:86:4d:df:58:e7:55:28:02:27:96:0f:f2:
         e4:2e:c6:a1:10:62:dd:e7:49:ae:55:ae:f2:a2:50:23:29:b4:
         d4:ce:50:06:6e:03:e1:b8:ea:51:34:8e:52:ed:22:7d:f1:8a:
         a9:fc:99:29:17:9e:f7:5d:84:79:01:f3:c2:7f:22:00:47:fb:
         aa:af:ba:b3:23:fa:b1:47:15:52:7e:bb:56:30:8b:9e:e3:20:
         dd:56:77:8c:3d:97:aa:dc:52:b4:da:4b:dd:b5:1b:54:60:e8:
         81:b1:ee:b5:87:af:70:65:51:e8:4a:86:80:72:40:69:7a:ec:
         2b:42:ef:5e:b6:f1:d4:0c:1c:29:3e:ed:e9:64:4a:ca:c5:fc:
         e8:2b:a2:e5:1b:1d:65:47:57:ef:9a:68:62:43:37:0e:56:84:
         34:19:9d:80:3e:97:d6:ac:9a:5b:ea:13:08:6d:3f:f2:28:9f:
         59:fc:bc:3b:a0:1c:35:7d:7d:62:90:d1:56:cd:1a:91:ab:66:
         13:5b:52:58:7c:86:ea:18:f2:2c:70:87:ce:7c:99:11:a1:21:
         84:1e:26:d0:9e:78:d2:44:fd:4e:b7:ab:07:85:36:c4:01:14:
         81:ce:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:04:17 2025 by rpki-client