Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e87290a-cea7-38e3-b85a-0ba27ebf60bb.roa
File:                     5e87290a-cea7-38e3-b85a-0ba27ebf60bb.roa (raw, json)
Hash identifier:          2W/AyYD6lH2lT8WxPzJvmZEOdHWc2OuEoObkd6/GLW8=
Subject key identifier:   DD:3F:32:F1:1E:47:AE:F3:88:AD:59:E1:64:06:E6:65:AD:C9:83:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E4A58060A632282D3DB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e87290a-cea7-38e3-b85a-0ba27ebf60bb.roa
Signing time:             Tue 21 Jan 2025 13:34:35 +0000
ROA not before:           Tue 21 Jan 2025 13:34:35 +0000
ROA not after:            Mon 21 Apr 2025 12:34:35 +0000
asID:                     36627
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:4a:58:06:0a:63:22:82:d3:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:35 2025 GMT
            Not After : Apr 21 12:34:35 2025 GMT
        Subject: CN=28b92a31-2b90-47dd-acab-77d348ff1fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:13:18:b1:87:fb:d2:a8:d9:38:cb:b5:69:
                    17:e8:41:61:af:67:41:62:dc:f7:18:23:16:f2:46:
                    c1:d5:c3:15:34:60:0d:c8:25:bb:ee:af:4c:ff:7a:
                    e8:1d:12:0a:7a:56:a6:40:c0:f1:b2:5c:71:83:5d:
                    c8:84:ab:03:d1:f3:73:e9:83:e5:8a:2b:68:9d:42:
                    e1:a6:28:b2:ab:db:fa:92:14:cb:f0:03:75:fc:30:
                    5e:77:73:97:18:a3:e0:19:9c:58:d4:1f:0f:00:15:
                    88:c8:63:41:ca:cb:42:f0:f4:ca:2e:f7:86:33:e8:
                    a8:df:47:43:83:98:41:6b:d0:8b:0f:4f:82:9d:e0:
                    8f:59:ae:e3:53:55:10:bf:cf:e9:21:d7:25:91:49:
                    27:f3:2e:15:d9:5c:de:33:2e:13:bd:69:86:a6:8d:
                    eb:63:6b:40:4b:6f:ae:a8:25:45:d4:35:00:6e:a2:
                    12:05:5b:be:4d:ed:ec:d0:19:46:ed:2f:15:39:26:
                    a2:be:aa:87:84:6b:64:14:bb:3f:d5:b4:79:10:a9:
                    54:e3:09:58:b8:ee:da:02:a2:98:d5:97:a5:47:69:
                    23:e2:5c:0e:a3:97:70:2c:bb:14:4c:8c:8d:93:18:
                    b5:9f:74:af:ed:f8:d4:58:67:a4:93:81:5b:e4:f6:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:32:F1:1E:47:AE:F3:88:AD:59:E1:64:06:E6:65:AD:C9:83:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e87290a-cea7-38e3-b85a-0ba27ebf60bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bc:0b:2a:cc:d4:a4:ce:10:56:77:c5:a4:47:e7:24:e3:af:
         7f:41:b2:63:ee:79:26:e7:31:bf:01:67:a0:40:44:15:cc:e7:
         f8:b5:f8:35:9c:22:6a:c0:6c:8a:2c:da:8e:e9:51:4d:ee:b6:
         ec:48:95:96:09:7f:5e:3d:7b:9d:f8:93:46:ac:aa:7f:12:c2:
         c6:84:2f:40:27:b5:f0:0e:a7:cc:4e:e1:24:c8:b0:d8:1b:ef:
         90:aa:84:60:93:48:66:7f:bf:e1:30:b0:21:2c:63:1f:db:eb:
         36:4a:61:76:cb:f5:5b:30:36:68:0c:5b:82:93:ac:7c:14:df:
         27:42:0f:0e:60:e7:3b:cf:3c:64:9a:eb:c7:b5:0e:63:72:f9:
         1a:77:56:d3:c2:76:c9:df:50:7c:f4:e5:1e:92:7e:0d:90:81:
         8c:0e:a8:3b:ae:07:3e:15:e4:86:2a:d2:fa:56:b9:3a:8e:6f:
         6b:4e:99:dc:2b:d0:50:d4:5d:57:03:8c:4c:58:f6:87:6c:ba:
         b5:77:cb:ef:e1:fd:fa:3b:1e:e6:2e:d4:75:ea:bc:4c:c7:83:
         2c:dd:b7:46:0b:dd:43:66:68:88:6d:2b:11:08:82:bc:f8:66:
         85:e1:46:3d:75:80:76:dc:07:6a:2a:27:87:2c:7f:18:6b:58:
         64:36:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:23 2025 by rpki-client