Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa
File:                     bbd38cda-7d43-361b-8ee3-dab3e0487112.roa (raw, json)
Hash identifier:          tMjXKc25L8u1B30EjrfCVrA6detiSMoIC7W8u2I3CAc=
Subject key identifier:   C6:A0:B1:8F:A0:EE:9B:C0:08:36:2C:DE:55:E5:17:55:1F:E3:5F:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530AFF2A53F6D74123379C58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     397196
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:ff:2a:53:f6:d7:41:23:37:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=15fcf10e-f6d1-4300-9e5c-b252396016b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:7c:4a:af:21:bd:2a:2b:90:51:70:18:49:
                    2e:13:d8:69:ec:f4:8f:1b:9c:8b:3e:40:c6:83:59:
                    c9:d8:8a:02:12:f6:91:50:d8:1c:73:2e:63:e6:0a:
                    0f:37:76:df:99:c7:e9:d3:80:0e:c1:58:17:31:42:
                    e3:e2:78:45:62:2d:f0:00:9f:bb:e2:f5:f0:8a:62:
                    6f:5a:7a:50:35:47:0e:83:65:a5:37:6e:dc:05:05:
                    15:c6:70:11:0c:37:df:1c:24:d1:9e:64:e6:1b:60:
                    4b:de:c7:2c:78:79:ff:f1:c0:29:87:cb:45:84:e4:
                    8f:3c:03:79:e2:45:76:f4:56:a8:cd:43:14:42:99:
                    81:8e:39:90:54:26:fd:81:14:5b:ff:20:99:82:e2:
                    02:6f:92:96:a2:1d:68:19:43:df:af:79:26:93:94:
                    1e:6f:d3:e6:e6:e5:13:9c:c7:0c:9b:f8:e9:c6:a6:
                    72:f2:ce:e2:ae:1e:b9:d9:28:e1:c0:d6:53:09:6a:
                    4d:2e:7d:09:6a:08:0d:0c:28:65:6a:0f:56:b4:96:
                    de:60:a1:ae:5b:ff:ff:2c:ec:a0:d4:b7:3a:37:86:
                    39:d4:cf:a7:17:d4:c7:81:58:b9:34:97:5e:c4:82:
                    97:47:00:32:d5:a5:fe:21:d5:b3:c2:56:84:3a:67:
                    d1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A0:B1:8F:A0:EE:9B:C0:08:36:2C:DE:55:E5:17:55:1F:E3:5F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:62:87:03:4f:83:b0:4b:8d:31:f8:46:31:ef:cf:f5:fa:
         03:e2:63:5c:03:bf:3a:4e:fe:e2:1f:c5:d1:d9:84:03:89:b2:
         ce:f7:91:0b:c6:43:19:df:27:4b:43:1c:b8:85:14:7e:49:42:
         04:04:ae:b3:7a:fb:dd:79:80:68:86:87:d6:6a:8c:15:12:ec:
         df:53:43:9e:8b:9e:60:bc:3e:f3:3e:a5:1d:de:0a:b2:56:92:
         dd:88:bf:df:37:cc:68:a9:20:b8:48:6b:3e:de:91:95:56:6c:
         6a:59:da:64:b2:06:a0:06:d1:ca:7a:f8:56:9b:03:13:e7:2e:
         04:65:6d:e9:d2:a1:d1:d7:c0:dc:d0:08:39:e8:48:52:ce:6d:
         5b:82:37:3a:b0:c6:40:57:0e:42:bd:b6:05:b3:9e:21:c8:d4:
         bb:d4:05:7e:3c:b4:6d:13:70:a7:80:1b:dd:49:e3:ab:fa:47:
         d6:20:f9:47:10:90:b9:38:1f:fa:19:6f:36:96:cf:9a:e5:e1:
         7b:86:26:fd:6d:57:32:f4:f0:a6:28:2c:32:04:24:4d:e0:0c:
         ce:cd:07:ce:2b:11:3e:d7:60:db:f0:94:ed:07:a0:1b:4d:03:
         16:32:2c:79:fa:a8:15:98:a9:4f:2a:24:89:cc:4b:8b:ac:bf:
         71:39:3e:5b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhTCv8qU/bXQSM3nFgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
MTVmY2YxMGUtZjZkMS00MzAwLTllNWMtYjI1MjM5NjAxNmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMR8Sq8hvSorkFFwGEkuE9hp7PSPG5yLPkDG
g1nJ2IoCEvaRUNgccy5j5goPN3bfmcfp04AOwVgXMULj4nhFYi3wAJ+74vXwimJv
WnpQNUcOg2WlN27cBQUVxnARDDffHCTRnmTmG2BL3scseHn/8cAph8tFhOSPPAN5
4kV29FaozUMUQpmBjjmQVCb9gRRb/yCZguICb5KWoh1oGUPfr3kmk5Qeb9Pm5uUT
nMcMm/jpxqZy8s7irh652SjhwNZTCWpNLn0JaggNDChlag9WtJbeYKGuW///LOyg
1Lc6N4Y51M+nF9THgVi5NJdexIKXRwAy1aX+IdWzwlaEOmfRUwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMagsY+g7pvACDYs3lXlF1Uf41/BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMzhjZGEtN2Q0My0z
NjFiLThlZTMtZGFiM2UwNDg3MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBuC2KHA0+DsEuNMfhGMe/P9foD4mNcA786Tv7i
H8XR2YQDibLO95ELxkMZ3ydLQxy4hRR+SUIEBK6zevvdeYBohofWaowVEuzfU0Oe
i55gvD7zPqUd3gqyVpLdiL/fN8xoqSC4SGs+3pGVVmxqWdpksgagBtHKevhWmwMT
5y4EZW3p0qHR18Dc0Ag56EhSzm1bgjc6sMZAVw5CvbYFs54hyNS71AV+PLRtE3Cn
gBvdSeOr+kfWIPlHEJC5OB/6GW82ls+a5eF7hib9bVcy9PCmKCwyBCRN4AzOzQfO
KxE+12Db8JTtB6AbTQMWMix5+qgVmKlPKiSJzEuLrL9xOT5b
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:01:12 2025 by rpki-client