Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfe82ee-9813-3567-a340-493eaa0aecaa.roa
File:                     6bfe82ee-9813-3567-a340-493eaa0aecaa.roa (raw, json)
Hash identifier:          LlnvWofS/9XC0RqnrzByU62ZlpNI0i+BB0xsk5VqeV8=
Subject key identifier:   B1:CF:16:BA:42:D6:CD:C2:EC:7F:65:79:F6:F2:61:AD:CF:D3:70:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424306EED8548DD3CC470980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfe82ee-9813-3567-a340-493eaa0aecaa.roa
Signing time:             Thu 19 Dec 2024 13:45:17 +0000
ROA not before:           Thu 19 Dec 2024 13:45:17 +0000
ROA not after:            Wed 19 Mar 2025 12:45:17 +0000
asID:                     396550
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:06:ee:d8:54:8d:d3:cc:47:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:17 2024 GMT
            Not After : Mar 19 12:45:17 2025 GMT
        Subject: CN=b8589e5b-1559-4c77-846a-09ae7a54f2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:18:67:2f:f7:14:a5:49:e4:5c:c2:f9:a9:d0:
                    99:5e:8d:3f:27:56:9a:c4:3b:01:a4:81:33:ee:40:
                    25:15:6d:8f:d6:7a:64:4c:44:a3:fe:70:c3:1a:04:
                    8b:f8:86:fa:cd:0f:08:c3:40:b2:a6:88:ee:41:4e:
                    c1:d8:c7:df:4e:4a:5f:b9:c0:03:88:9f:97:f9:b8:
                    64:c1:ac:d7:97:4d:1b:12:33:89:1d:76:d6:9e:97:
                    a7:2b:bc:73:c2:7b:32:af:2a:06:9c:7c:8e:5d:c3:
                    a1:e5:7e:e9:54:31:a5:95:df:9d:e2:3c:31:2a:b3:
                    06:c2:cc:32:7d:59:d8:7b:84:21:af:79:93:a5:e9:
                    19:5e:e3:fb:a6:e7:2e:a1:87:90:da:33:94:34:dc:
                    a5:1d:62:db:5d:3a:d5:77:5d:3b:c7:ac:9d:ba:10:
                    51:51:c6:ad:90:b6:da:fb:0a:6b:c5:4c:d7:e9:45:
                    31:6a:44:20:0c:d1:f0:bb:db:71:2f:73:9a:bb:9c:
                    72:8c:27:69:f1:f5:73:25:98:2f:22:59:a3:7f:fd:
                    39:bb:dd:f0:eb:01:48:86:ee:55:14:54:84:96:c3:
                    87:ab:8b:39:be:dd:4b:d4:5b:ac:79:f8:f3:ad:c7:
                    5e:73:e5:66:b7:8c:30:08:99:38:32:3a:86:be:6a:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CF:16:BA:42:D6:CD:C2:EC:7F:65:79:F6:F2:61:AD:CF:D3:70:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bfe82ee-9813-3567-a340-493eaa0aecaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:98:1a:ce:0a:28:71:53:8a:17:88:ee:dd:d9:29:3c:b4:
         9b:25:d0:77:f3:02:c7:72:31:4c:c6:72:7f:28:b3:c8:30:a3:
         5d:42:ee:53:12:59:eb:cf:54:07:c3:8e:df:f7:c3:62:83:0c:
         33:5c:35:5b:b0:ee:4a:fd:79:56:71:95:2f:ca:4c:c2:8f:79:
         8d:3a:ff:70:4f:a0:0b:36:ee:23:ee:f8:d9:26:ca:3b:2d:8f:
         25:2a:f1:15:c1:de:2c:3a:e1:a9:35:f8:56:45:06:9e:7e:0e:
         36:5d:e7:eb:cf:bc:5d:fb:a5:ae:c8:30:3f:35:4e:66:8a:e1:
         34:48:24:b8:da:ef:1c:f7:bf:a9:dd:b5:28:8b:8e:9b:d3:64:
         2d:a7:ee:88:96:78:83:84:fd:cd:18:41:d6:ca:ed:12:55:d4:
         38:9e:b1:44:44:21:31:2f:5f:5e:81:96:6a:99:7b:00:2f:5b:
         03:59:23:cd:c3:72:23:1a:4b:1e:e5:ad:39:56:bb:d1:b7:84:
         9b:b3:86:4d:17:aa:49:6c:b2:82:0b:57:38:3c:14:95:25:f7:
         4a:1a:cb:bf:1c:5b:be:a2:d0:c6:df:23:6a:f0:9f:a0:e0:93:
         10:7d:d7:77:a6:f2:dd:6f:29:84:6b:60:c0:3f:c3:5c:bc:75:
         cd:98:bc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:23:33 2025 by rpki-client