Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e8158-2972-38b9-bdf5-d602caf0fcb0.roa
File:                     c07e8158-2972-38b9-bdf5-d602caf0fcb0.roa (raw, json)
Hash identifier:          ikwQ5Cbq3W33pCxCrGRtQQlwe8ik/xtWB4eVJMZQ5YI=
Subject key identifier:   3A:FD:73:6B:E6:7A:48:AB:8F:19:65:88:26:C7:58:EE:A1:E7:8D:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F3FFEC839EDDF6569600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e8158-2972-38b9-bdf5-d602caf0fcb0.roa
Signing time:             Thu 19 Dec 2024 13:45:08 +0000
ROA not before:           Thu 19 Dec 2024 13:45:08 +0000
ROA not after:            Wed 19 Mar 2025 12:45:08 +0000
asID:                     36627
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f3:ff:ec:83:9e:dd:f6:56:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:08 2024 GMT
            Not After : Mar 19 12:45:08 2025 GMT
        Subject: CN=a0089918-5627-462a-b421-163281e9f251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:67:60:45:5b:37:6b:18:81:e9:a1:21:09:
                    b0:e1:ff:78:de:14:4d:59:7f:13:46:a4:b3:a3:85:
                    1d:aa:fb:e4:c4:50:cd:7e:b2:9d:07:cf:c9:80:d7:
                    10:5a:9f:9a:c3:e1:2d:da:51:b1:51:b1:43:0f:e5:
                    b7:6f:f1:6f:2d:b4:7a:55:a4:98:a9:9f:5d:35:c0:
                    60:5a:f9:ce:60:57:e0:66:bd:81:46:66:d5:52:db:
                    1d:9d:5a:56:e0:f5:6c:f7:31:ef:1c:7f:8c:11:6a:
                    d2:73:16:9e:2a:d4:aa:57:20:a8:e2:94:4e:ca:52:
                    33:2f:4c:c0:0f:4a:80:6a:e7:14:ba:37:c8:bc:74:
                    22:41:ef:a5:c4:8b:97:e5:bd:8c:36:27:e7:82:c6:
                    42:15:a8:59:ad:9a:57:7b:74:73:f8:38:2f:7f:8a:
                    e1:50:cb:90:13:c9:6c:b2:43:bb:2b:fc:b9:7a:d2:
                    00:9c:e3:46:30:e6:a7:ce:d9:63:91:b5:43:1f:04:
                    2b:ee:cc:c1:cf:8f:0e:ca:f7:e2:33:ee:d3:60:e1:
                    00:50:b0:75:a3:39:eb:b2:01:5d:42:b2:67:3f:bb:
                    7f:2b:91:b2:ac:33:a4:61:54:ff:68:a5:7e:58:5c:
                    c3:98:0c:cb:a6:3f:f8:c0:2e:eb:11:b8:d3:31:4a:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:73:6B:E6:7A:48:AB:8F:19:65:88:26:C7:58:EE:A1:E7:8D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e8158-2972-38b9-bdf5-d602caf0fcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:75:45:dd:f1:3a:6c:c2:f5:0d:89:20:59:4c:97:0c:1d:
         a5:8d:28:34:4d:f9:78:16:65:e9:f5:07:9c:76:d1:9b:6a:2a:
         f1:6b:ed:39:9d:95:81:03:e3:64:d4:1c:bf:49:45:2d:3a:a4:
         af:0f:c2:16:dd:4f:e6:c7:05:e5:b7:dc:1e:2a:5d:0c:36:89:
         06:88:92:63:b0:02:9a:91:93:9c:b7:42:0b:e5:07:c9:69:33:
         d4:60:cc:7c:aa:4f:67:26:84:83:be:7e:f6:90:72:ff:ac:7f:
         e5:ba:ff:b9:d7:12:16:e4:e8:96:1a:bf:15:cb:a7:0b:25:22:
         6a:96:b9:45:b3:aa:d5:1b:64:c0:c4:90:df:ef:61:38:2a:09:
         73:47:f4:47:d8:c7:0d:c5:91:b0:32:d8:66:b2:fb:f2:df:9b:
         8b:a6:34:80:cf:50:68:f7:25:a6:4d:d3:1b:99:6a:c4:82:1d:
         cd:81:be:45:07:4e:c8:91:08:43:00:17:f3:ed:e7:2b:e7:21:
         6c:7c:7e:d4:4d:fb:6c:7b:ea:6a:b5:5e:99:ad:17:ac:5f:97:
         db:b7:42:91:f0:5b:88:2e:14:ca:90:69:a2:7b:50:9b:19:ab:
         c8:0f:49:59:61:20:41:05:e3:9b:a8:d5:b7:fe:04:bf:3e:f3:
         d6:71:e6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:23:11 2025 by rpki-client