Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa
File:                     4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa (raw, json)
Hash identifier:          w4fB2mQhlGqRKz1SZ+Poh+unJiXjlF7hprPTtEcGr2Y=
Subject key identifier:   0B:DB:6E:9E:09:99:53:28:A1:E6:65:4A:33:41:E6:3F:E7:FF:45:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FA87C067D7460B976100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa
Signing time:             Thu 19 Dec 2024 13:45:12 +0000
ROA not before:           Thu 19 Dec 2024 13:45:12 +0000
ROA not after:            Wed 19 Mar 2025 12:45:12 +0000
asID:                     396611
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fa:87:c0:67:d7:46:0b:97:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:12 2024 GMT
            Not After : Mar 19 12:45:12 2025 GMT
        Subject: CN=4043b651-a22d-49c5-b321-2af84881dd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:bc:af:5e:3a:c1:d7:36:6e:8f:25:45:cc:
                    ed:80:cf:7c:42:c8:4d:5e:1f:7a:96:e0:58:94:d8:
                    8e:68:25:cf:85:e7:8c:84:9f:cb:5f:ed:66:f6:41:
                    5c:71:5e:fb:df:f3:ae:49:a5:c9:fd:91:06:5c:38:
                    33:35:8e:5e:1c:ba:f0:c0:5f:a7:cd:7c:d4:24:fa:
                    ad:8e:59:0c:7b:45:5e:37:7e:41:d4:0e:9d:46:c3:
                    23:68:72:10:ab:11:80:28:eb:14:b2:1b:9b:d3:39:
                    fc:e0:67:3a:25:9e:5e:f1:91:6e:f8:76:2a:54:a4:
                    9c:1a:df:6d:c6:76:8b:78:4f:b3:07:7b:93:50:af:
                    b8:65:11:c5:b3:1c:26:92:b5:72:11:67:11:4c:95:
                    7b:f7:73:45:5c:9f:de:1e:6c:00:76:db:ef:95:62:
                    e2:04:e2:ba:d4:ab:b1:44:f0:76:3a:92:7b:00:34:
                    e6:7a:63:db:da:7e:aa:c4:9a:13:88:9a:2a:97:93:
                    c2:d4:7c:e5:e9:d3:98:fd:17:94:1d:ed:6a:b5:22:
                    53:c1:7b:99:b1:74:b2:e9:89:62:42:e8:82:19:a7:
                    f1:3a:d1:56:97:f9:22:aa:e5:b5:bc:e5:f7:8d:10:
                    b5:24:3d:be:b9:64:4b:6e:bd:3a:05:b8:f1:59:3b:
                    f4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DB:6E:9E:09:99:53:28:A1:E6:65:4A:33:41:E6:3F:E7:FF:45:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a43cb50-d95f-34a6-833c-6baaf83b5f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:73:6e:73:4a:08:b2:e4:44:9d:8d:66:da:39:b1:6c:b7:3d:
         c7:76:c8:21:2f:ea:ba:3f:e1:73:5e:76:1d:65:f2:9e:d6:1a:
         1b:72:15:db:ef:f9:03:ed:2b:12:99:f7:18:fa:d5:9e:40:02:
         1b:7d:d9:9b:97:51:be:2c:87:6c:b6:bf:9b:7a:55:e4:ce:23:
         f4:04:c1:df:a4:06:3b:5f:9e:65:e6:f7:42:6d:ef:fa:23:57:
         3b:ab:8b:57:23:79:70:99:3b:a2:f8:d3:cf:87:df:22:5f:00:
         42:8d:74:91:a1:77:48:0f:e4:ce:67:7f:ca:67:4f:00:2a:98:
         50:08:cf:aa:1b:c2:7c:dc:0d:68:f6:d1:92:c2:34:a2:d1:ed:
         71:58:b8:c2:5c:3f:02:09:b4:78:3b:ef:75:81:2b:f5:6a:1d:
         42:2f:93:36:a1:4b:00:3f:e9:24:a0:d9:11:b7:2b:89:c8:c2:
         db:31:31:f8:68:d4:24:14:87:4d:1e:d9:c0:0a:f3:b1:33:63:
         11:8f:c9:a1:a8:8f:29:0b:a8:e8:6d:d7:9d:ec:32:a0:dc:52:
         67:80:7b:40:04:bf:87:47:0d:ff:49:79:e0:5e:43:ee:d8:57:
         8a:c1:f9:72:e8:9a:ff:5a:0d:19:cd:73:3b:60:60:9e:79:12:
         93:16:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:37:04 2025 by rpki-client