Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f66b561-2f68-33ff-8a75-009c8ca58a29.roa
File:                     9f66b561-2f68-33ff-8a75-009c8ca58a29.roa (raw, json)
Hash identifier:          tu2YvLDLIo0Xzn2i3jaJwcn8IJNe2s0/R2z4WCUfAxc=
Subject key identifier:   45:43:EE:50:45:69:A4:A6:33:36:44:30:B9:9D:26:3A:58:DF:E1:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430384F7958BFEDB360740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f66b561-2f68-33ff-8a75-009c8ca58a29.roa
Signing time:             Thu 19 Dec 2024 13:45:16 +0000
ROA not before:           Thu 19 Dec 2024 13:45:16 +0000
ROA not after:            Wed 19 Mar 2025 12:45:16 +0000
asID:                     32651
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:03:84:f7:95:8b:fe:db:36:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:16 2024 GMT
            Not After : Mar 19 12:45:16 2025 GMT
        Subject: CN=662d2895-76c3-411a-95d2-49a6cf7a1cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:43:97:8f:70:fb:f0:3e:2b:94:0b:e8:04:
                    fd:e5:50:76:a1:95:36:c7:50:6a:36:a5:f2:8d:52:
                    5b:10:4f:63:3e:c2:34:69:dd:39:52:c3:f3:83:a6:
                    eb:89:e0:cc:2c:23:e0:27:b8:6f:3c:2a:2e:98:f4:
                    f5:ee:ac:53:9b:df:9c:c6:83:c4:af:12:79:e4:6c:
                    4b:08:84:a2:02:ac:3f:77:1f:da:f9:d8:86:d5:c2:
                    b8:29:02:19:35:96:94:4f:fc:bb:15:d7:6d:72:60:
                    b1:d2:c8:05:43:87:f0:fc:60:fe:95:2d:46:af:fd:
                    f2:7d:43:83:9f:fe:ca:13:78:51:ed:70:bc:a0:22:
                    f9:96:a2:c9:6a:65:c8:27:79:f5:0b:27:ad:d7:b0:
                    48:8f:f7:4e:26:05:7f:0f:86:b1:55:0b:92:1b:bb:
                    00:69:4e:2b:cf:0d:53:79:10:f3:6c:76:ff:6a:e6:
                    6b:27:77:99:6d:a0:27:f6:2b:a5:e6:14:39:87:6d:
                    77:70:fd:46:23:83:3a:5a:5d:80:46:98:2b:b0:89:
                    ba:06:41:98:60:8b:c6:f3:96:9d:d0:45:66:7b:19:
                    c0:9f:91:94:91:59:d2:95:55:c4:3b:0c:d0:cc:30:
                    8b:8c:07:7d:89:fe:34:08:ff:b8:81:cc:4e:1e:fd:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:43:EE:50:45:69:A4:A6:33:36:44:30:B9:9D:26:3A:58:DF:E1:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f66b561-2f68-33ff-8a75-009c8ca58a29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:23:d6:63:f4:15:85:6c:c8:81:0a:a2:1f:eb:69:c8:db:
         93:a2:a7:69:d5:4d:7b:a6:ca:5b:46:7e:59:62:8d:13:cf:e8:
         14:e2:85:5e:1c:f8:19:6a:75:b9:0c:47:4c:e0:a3:5e:3c:f7:
         9b:ce:0e:34:f3:24:8c:71:46:0a:06:ef:34:67:4a:13:42:e2:
         11:03:80:19:f7:17:59:2d:e7:ca:30:8a:ef:20:f0:e0:f7:96:
         83:cb:49:72:2f:48:a3:29:43:1b:34:93:f9:89:9d:31:44:ec:
         19:0e:91:ed:3c:72:b2:0e:74:7f:6c:b1:fa:fc:aa:f6:b8:3f:
         96:a6:a3:b1:c1:96:85:bf:85:88:dd:2e:6d:d7:59:0b:28:42:
         2d:13:2b:db:40:ef:f2:39:45:6d:6c:ad:94:0c:c4:dd:33:a9:
         9c:75:af:a7:cc:01:03:fd:86:ef:99:c6:c6:34:98:83:5c:44:
         b3:78:e1:0a:e1:bc:03:66:ab:55:fe:da:5d:11:ca:94:99:1d:
         7c:a3:b2:2c:74:cb:fb:fa:f0:2a:7c:6a:ed:4f:e6:9c:53:c6:
         94:a1:32:49:2f:9c:79:aa:ba:16:83:61:9b:8c:ec:1e:b2:78:
         52:e3:d3:be:19:91:39:4c:c9:24:ce:e6:1c:da:5f:f2:fd:f4:
         9b:67:0a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:03 2025 by rpki-client