Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df42442-7a4d-37aa-8e53-466027b1e18c.roa
File:                     4df42442-7a4d-37aa-8e53-466027b1e18c.roa (raw, json)
Hash identifier:          0gO5MYa9le26bw8/AdhdhDy0F83nCRfwqvSQCMDzpu8=
Subject key identifier:   0E:FE:33:B2:79:47:A1:69:9F:2E:55:75:15:E8:38:D5:C6:6C:0A:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAAD49C2041D92EE83CED00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df42442-7a4d-37aa-8e53-466027b1e18c.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     397205
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:d4:9c:20:41:d9:2e:e8:3c:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=30568756-b371-43f8-a134-150242e60940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0d:26:ff:d7:ab:0d:b8:6c:eb:4f:b4:55:6e:
                    03:c3:7a:c5:93:1a:f5:1b:8f:e6:d2:a9:27:56:ee:
                    c5:ea:c4:7f:be:eb:3e:31:3b:29:1f:50:b1:80:20:
                    ab:98:c5:78:e6:34:86:37:5b:37:96:d9:95:ec:94:
                    58:58:cc:71:11:b6:bf:f9:a5:a1:d4:05:7d:49:29:
                    8a:8a:5f:b8:40:84:8e:bf:7d:9c:b0:94:3e:87:b1:
                    21:2a:8f:4d:be:32:14:7e:cd:8a:5b:57:54:2d:cf:
                    a7:be:19:49:21:07:b1:18:01:47:23:72:5e:21:58:
                    3a:3e:10:41:61:77:49:e5:a5:12:b0:24:78:2d:99:
                    bc:40:66:6c:ac:20:9b:30:de:b6:14:3e:62:2d:d2:
                    d0:2c:0b:aa:90:b0:fe:54:4b:88:ff:0d:43:d2:7c:
                    db:a3:dd:03:f1:e3:7a:c6:77:33:7e:d9:74:9e:67:
                    37:55:b1:b4:a6:fa:56:b8:bd:0d:3a:2f:5d:22:db:
                    d9:df:a2:38:f7:5d:a5:06:09:6b:0f:e1:82:84:c8:
                    1d:96:68:02:f4:79:eb:73:22:ea:4a:e3:41:3d:ec:
                    a8:8f:76:8d:f6:72:9b:2f:aa:7a:d9:9e:00:7b:09:
                    9d:6f:6a:55:72:99:1a:73:93:7a:73:cb:58:95:06:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FE:33:B2:79:47:A1:69:9F:2E:55:75:15:E8:38:D5:C6:6C:0A:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4df42442-7a4d-37aa-8e53-466027b1e18c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:21:d4:95:69:3b:0e:bb:71:89:57:6a:cc:c5:9f:9e:66:
         99:58:c5:d6:42:c1:86:57:5f:9d:9a:70:34:a5:ac:e0:85:89:
         8e:fe:9a:6d:49:a5:2a:c7:b1:0a:fd:76:d5:63:34:19:bb:56:
         12:17:d5:ed:d9:5e:e2:5c:a6:7e:c1:c6:f0:5b:3a:15:43:ac:
         43:5e:98:6b:1b:d5:84:76:15:c6:34:79:40:37:e4:ba:db:30:
         0e:69:e7:f7:24:45:7c:16:eb:45:ea:e0:f3:64:43:aa:b9:b8:
         6c:9b:ed:6c:e7:a0:53:1d:f6:b2:cd:73:cc:06:be:9a:9b:24:
         48:21:bc:29:b6:a7:3e:37:d1:4e:ac:e1:13:e7:7f:38:74:64:
         50:a6:86:bb:f0:84:8a:5f:7f:a5:5c:5a:19:4b:c1:ab:09:bf:
         8a:a8:6b:29:01:90:53:49:51:af:ca:c5:35:b1:34:18:f1:06:
         55:17:05:5c:bd:3e:41:23:21:af:16:a6:8f:cd:ae:d4:75:81:
         7b:4c:27:6b:27:72:ca:e7:4e:ca:e3:df:21:1a:d7:50:56:ad:
         19:76:d0:d6:49:9c:9d:40:ae:e5:46:5b:cc:d7:5e:9c:99:43:
         fa:f8:17:d4:41:b2:0a:b5:78:44:7a:28:95:13:07:95:81:a5:
         4e:b9:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:36:29 2025 by rpki-client