Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50cbb1cf-2253-3a3b-b290-7cf480ed9574.roa
File:                     50cbb1cf-2253-3a3b-b290-7cf480ed9574.roa (raw, json)
Hash identifier:          jo3Nspb14C/XEvnc0XmxVJ7sBQyIxixx2wzGS9clu30=
Subject key identifier:   F4:32:F7:85:90:52:D3:75:7E:86:C9:67:78:BB:64:4C:AC:1E:AF:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530AFE9DF942D6A998377580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50cbb1cf-2253-3a3b-b290-7cf480ed9574.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     396572
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:fe:9d:f9:42:d6:a9:98:37:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=e518b09a-a6dd-40d7-83b6-3557b8164ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:68:d1:81:64:b1:05:8b:4e:bc:5e:ea:95:7a:
                    cc:70:f0:11:fd:5b:d5:93:5c:69:18:28:8c:d5:7c:
                    b7:92:d7:c6:fc:ac:24:00:55:47:5b:da:63:4b:85:
                    14:3e:f8:fb:ed:2e:b4:7f:33:e7:b7:f7:85:68:9f:
                    1f:db:4f:5b:ed:ef:40:a7:c6:36:17:bb:40:56:d0:
                    94:3b:df:2a:18:5d:8b:14:3a:48:0b:26:0d:51:81:
                    d4:c8:8a:62:41:68:5a:40:1d:b7:b1:98:f4:6c:5e:
                    bd:cf:46:10:ea:7b:15:0c:4d:d1:15:f6:ca:31:f8:
                    ef:75:2a:da:b5:59:20:d4:b8:e5:1b:e8:41:78:a1:
                    0c:11:bc:5b:0b:88:cc:26:f2:f7:a9:fe:ec:3d:51:
                    3f:b3:71:c3:90:95:3f:c1:78:0f:22:9d:df:f7:1a:
                    23:ce:e6:cc:32:a5:72:28:af:50:76:30:51:b2:53:
                    56:77:c2:27:87:bc:a3:37:c0:6b:01:bd:4f:fe:63:
                    5e:c0:f4:d0:93:58:84:b1:a6:b6:b7:12:7b:2b:06:
                    8b:22:27:58:91:e7:e8:f8:24:b8:e1:7d:dd:f5:20:
                    dd:1b:2f:30:48:6c:94:0b:2b:c3:ec:3b:09:55:dc:
                    26:47:d0:27:d0:3e:49:b1:c6:8f:13:8e:37:d9:e4:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:F7:85:90:52:D3:75:7E:86:C9:67:78:BB:64:4C:AC:1E:AF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50cbb1cf-2253-3a3b-b290-7cf480ed9574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:28:8e:2c:c9:9e:1f:bf:06:2a:58:05:bd:b6:6d:60:db:
         64:e9:3c:b6:d4:f4:86:c1:54:2e:91:fb:dc:66:00:df:79:28:
         d3:42:0e:60:d4:ad:1d:49:e9:4a:25:f7:9d:f3:61:27:ef:d1:
         28:6e:d6:b3:fe:a0:8d:ca:61:34:8f:64:71:1f:f1:f8:6a:c9:
         8e:5a:ad:cc:fa:10:81:9c:68:1a:37:bd:b0:0a:7f:fe:43:ed:
         65:76:0e:8f:54:cd:c3:33:a1:ed:be:24:b8:17:b5:c8:c2:22:
         3d:90:70:fa:59:3e:b7:37:fc:57:c1:0a:c9:2b:92:4e:dd:ce:
         5a:b9:54:eb:a3:fc:98:cc:58:7d:da:13:24:4c:e6:d2:05:84:
         ee:db:13:82:b7:55:aa:e8:32:6d:9b:ce:a8:53:bb:d5:9f:52:
         ad:52:ea:a6:a5:e6:ff:70:08:15:76:4d:c6:ab:f4:54:b3:37:
         10:d6:ba:66:b8:75:8a:5a:d5:c5:45:3e:b2:ed:8e:e9:f2:13:
         96:ac:a6:19:cb:51:21:7f:fc:c9:b4:0d:60:09:46:fc:19:f4:
         b8:ac:a4:80:6d:91:cd:d5:cc:45:5b:52:65:bb:e4:77:5a:c5:
         2a:e7:89:91:e3:fe:85:76:e3:d0:15:a5:bc:83:94:61:05:24:
         ce:ba:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:15:41 2025 by rpki-client