Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa
File:                     8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa (raw, json)
Hash identifier:          YPuxPXhBhQDlbqdmPUHKfOyAfC5JvPo26nrTUmO4aDo=
Subject key identifier:   0B:9A:08:DC:FD:5E:1A:68:D2:D1:02:81:ED:F9:23:BA:2D:D5:82:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842431DF629F1752569DDAA90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa
Signing time:             Thu 19 Dec 2024 13:45:28 +0000
ROA not before:           Thu 19 Dec 2024 13:45:28 +0000
ROA not after:            Wed 19 Mar 2025 12:45:28 +0000
asID:                     396555
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:1d:f6:29:f1:75:25:69:dd:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:28 2024 GMT
            Not After : Mar 19 12:45:28 2025 GMT
        Subject: CN=ac37421a-9c78-4488-ad76-8564ccd40c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:ee:96:a8:7a:5a:d0:51:de:52:ed:34:70:
                    23:01:aa:bd:15:ff:5a:a2:3e:f7:24:b9:94:c9:cd:
                    17:98:39:e2:9c:3b:c2:5d:4f:ba:f9:67:9b:90:d7:
                    58:ae:d6:d7:6a:12:05:17:26:e7:2d:2a:ce:23:99:
                    e3:23:92:9a:b4:ec:21:a7:0c:bc:98:a8:79:e5:0f:
                    04:26:ab:95:a1:53:62:af:ca:4a:31:4a:a2:41:15:
                    c9:a1:ca:5b:b4:82:3d:ac:a3:da:34:c2:dd:0b:73:
                    d2:4a:d1:47:c5:61:99:f4:ac:2e:fc:d7:03:80:2e:
                    69:4c:29:67:a8:cf:f4:e1:00:d5:63:52:db:2c:d5:
                    8f:6e:51:20:56:d9:ec:c3:c9:30:6e:df:7c:df:7e:
                    6a:96:d7:41:c1:d4:6b:8d:36:83:de:0c:5e:2d:41:
                    79:e3:d7:19:d1:11:fd:d2:6f:19:3e:03:34:98:3f:
                    6b:e0:71:3e:e0:99:fc:56:c8:66:18:07:54:c7:e7:
                    81:4e:aa:7e:2b:36:cb:db:6b:92:0b:d8:0a:5e:c8:
                    c6:ff:c8:58:7d:27:b8:74:6c:3a:2a:4f:b7:a0:99:
                    d8:85:e3:15:0e:5d:86:4b:d7:ad:ef:ce:3c:36:9b:
                    74:f9:80:3a:cc:69:fb:4b:10:d5:be:3b:d0:a0:81:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9A:08:DC:FD:5E:1A:68:D2:D1:02:81:ED:F9:23:BA:2D:D5:82:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8017575d-2fc7-3dd3-b832-a9a7ae20043e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:bf:de:e9:ae:a2:fd:da:b3:b1:2d:be:fc:77:96:11:88:10:
         d6:24:13:70:22:e5:a8:ac:de:07:64:23:59:ae:4c:84:a3:79:
         ba:36:0a:c3:a9:3f:4d:90:0f:d1:72:ce:98:e5:5d:99:7d:49:
         f9:3e:8e:37:4e:f4:bf:0f:0a:7d:73:a6:57:e4:fc:3e:98:67:
         f8:62:37:11:3c:a6:71:bf:0f:f4:79:7e:c6:80:01:09:5d:b4:
         64:29:cf:f2:f2:45:67:52:7c:60:9d:16:46:09:4e:84:15:af:
         e4:79:1e:77:55:d6:90:69:af:98:62:14:4c:ca:f4:42:09:cf:
         d3:2f:71:8d:75:95:d4:bc:92:0d:c5:bb:ef:87:f3:3d:cf:9e:
         30:a5:9b:95:d4:3b:29:92:84:85:ab:db:9a:d5:84:d0:00:b2:
         9f:20:1a:f1:d1:c6:91:88:10:e9:e9:29:98:66:a1:f5:0d:b0:
         8e:e7:21:f6:ef:f1:0c:82:47:27:72:5e:60:41:a6:ca:ee:6f:
         97:fe:73:fa:14:9b:c3:1d:45:fb:e8:1a:24:f4:9b:25:3d:39:
         50:a0:af:eb:d1:cb:38:c3:bc:36:4e:7e:d0:49:78:8e:ee:b2:
         88:f6:ee:b2:72:cc:42:dc:ed:4e:27:20:5e:b9:66:af:7c:d1:
         98:7b:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:37 2025 by rpki-client