Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54569894-6d24-33b3-8e6e-aad1a7b822a5.roa
File:                     54569894-6d24-33b3-8e6e-aad1a7b822a5.roa (raw, json)
Hash identifier:          mB/gOEZwyrbYBZZ/aZnsSDNUqj0zhVJOGD8VJuV7unQ=
Subject key identifier:   78:A6:1E:C0:12:DF:93:85:1B:A5:62:F3:F0:A6:B7:AD:75:50:19:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842432874D65C38323710EFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54569894-6d24-33b3-8e6e-aad1a7b822a5.roa
Signing time:             Thu 19 Dec 2024 13:45:33 +0000
ROA not before:           Thu 19 Dec 2024 13:45:33 +0000
ROA not after:            Wed 19 Mar 2025 12:45:33 +0000
asID:                     396577
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:28:74:d6:5c:38:32:37:10:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:33 2024 GMT
            Not After : Mar 19 12:45:33 2025 GMT
        Subject: CN=fca83576-b7a8-40e3-b6a2-fe45b490a9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:14:ee:03:4c:32:d1:79:b2:55:0c:c5:40:2f:
                    36:a8:11:c1:96:e1:8f:0d:a2:d7:65:35:0b:4c:b0:
                    03:79:c7:6b:83:73:f6:9c:9d:99:44:97:45:c0:3a:
                    9f:63:5b:bb:46:9f:cc:fe:af:3b:63:a5:da:fc:aa:
                    0e:78:c1:68:78:d5:ce:05:72:81:5c:09:11:c1:46:
                    e0:da:c3:28:bc:85:51:63:ea:0e:5a:9c:9c:19:48:
                    95:93:e6:e4:66:81:b0:03:a8:e7:62:3c:f5:8d:89:
                    cf:5c:ee:c2:70:b5:4f:33:d7:15:19:79:d9:0f:8b:
                    74:13:60:43:00:0a:4c:a3:4d:85:5f:96:c2:3e:8e:
                    3f:4d:90:6e:50:db:25:e1:08:ee:13:e1:0f:89:f1:
                    95:c2:00:22:58:28:b4:6d:48:9b:8c:f5:49:10:1a:
                    c1:af:5c:ff:79:e9:84:ac:3b:fc:74:13:31:e9:ec:
                    7b:23:22:2a:18:40:5a:98:d1:da:ec:28:a2:b7:2b:
                    69:cb:76:99:91:d6:b5:43:99:2e:c0:24:73:c2:dc:
                    04:bf:9f:95:56:c3:69:24:21:53:32:d9:7a:ef:ae:
                    4a:97:76:4f:71:c6:7f:5b:b1:d4:ad:c0:1e:2a:57:
                    80:d5:6e:bd:db:22:d3:cf:ac:84:3f:7b:90:6a:60:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A6:1E:C0:12:DF:93:85:1B:A5:62:F3:F0:A6:B7:AD:75:50:19:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/54569894-6d24-33b3-8e6e-aad1a7b822a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:d1:68:ab:62:3c:e4:08:15:3c:81:96:ab:05:c2:b8:44:
         c2:f8:a2:3f:16:d5:77:7f:74:b5:f2:ba:89:0c:36:e5:47:d8:
         81:b7:ea:34:fa:92:9d:16:e0:33:31:1c:d3:a2:ba:e9:47:9a:
         a3:7a:59:13:ae:1d:ff:d2:3e:2d:0f:4d:b2:55:44:b8:84:d0:
         c6:7a:78:76:ff:98:50:01:02:15:bd:da:8b:29:3d:81:68:88:
         90:49:ab:2d:77:92:7d:a2:92:57:d6:07:a4:43:20:33:44:90:
         6f:91:44:48:8b:d0:c6:76:0e:57:a2:da:50:82:68:bb:59:04:
         89:be:da:3b:ab:33:dd:74:14:fd:ac:f4:ea:29:84:1f:1c:42:
         ff:25:fb:a0:92:93:f2:e6:4f:01:9f:6a:51:41:62:41:1d:27:
         f8:a0:83:5f:6f:50:ee:8a:c4:5a:31:84:a6:88:13:67:66:06:
         ed:47:e4:f0:4f:0e:77:3f:dd:6f:78:51:c9:53:ef:27:7c:aa:
         94:2c:31:b1:ec:48:ae:a0:00:4c:98:8a:20:a8:c6:57:7a:b2:
         a8:41:6d:6e:55:4e:0c:53:3b:09:d5:40:ea:4c:ee:ef:14:7d:
         b5:25:68:ed:b8:44:c3:e2:03:3b:ef:d6:a4:c5:b5:8b:89:db:
         d6:69:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:02 2025 by rpki-client