Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47fdc9a-06d9-37eb-b668-b64a80403e73.roa
File:                     c47fdc9a-06d9-37eb-b668-b64a80403e73.roa (raw, json)
Hash identifier:          CcHHQAsXpePrZF/8pzOAVLLQD6Aurg6CctsZZ7yVU2Q=
Subject key identifier:   35:64:85:77:B0:24:0E:C9:AA:51:F3:00:6D:C6:C0:DD:A6:5A:59:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848372013898A11B14DF7499D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47fdc9a-06d9-37eb-b668-b64a80403e73.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     36626
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:13:89:8a:11:b1:4d:f7:49:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=13ae6a74-3b38-45bf-9cfd-676b3ef55297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:24:25:c5:e4:5e:5a:93:f5:19:75:67:f8:
                    dd:18:0d:e3:7c:c4:36:6b:5e:dc:28:31:e9:bf:de:
                    8b:ab:07:58:0e:07:2f:0c:3c:06:36:d6:ef:d8:bf:
                    ca:5f:ee:29:09:2c:28:e0:84:c0:95:cf:16:26:e5:
                    32:1b:a3:98:92:77:f1:f3:c1:a0:6b:4a:29:52:44:
                    ba:da:7c:1a:00:36:ce:cc:de:c8:de:a6:5d:11:49:
                    e3:29:32:bb:6c:42:f4:77:e9:c7:89:b6:62:91:5f:
                    91:31:cd:39:a2:cc:af:66:b3:d2:d6:1d:0a:a9:e5:
                    3e:ec:f3:7a:59:3d:9c:59:b9:1e:4d:7d:53:bd:d6:
                    4d:65:46:de:7a:19:e1:03:d9:dd:2b:75:7d:6e:55:
                    cd:07:d4:68:f9:31:b2:df:03:56:ac:6b:2e:58:29:
                    d0:15:bc:43:c6:13:58:6b:1c:45:51:19:f8:8a:03:
                    0c:b7:05:56:b8:9d:a6:84:9b:84:bc:86:d6:0c:f5:
                    6c:0b:31:17:df:76:ec:84:e1:07:fa:a4:a6:a7:aa:
                    9f:f4:e0:0a:32:d0:41:cc:19:ef:97:d6:47:6b:32:
                    ae:95:66:49:9f:e5:cf:ad:7f:95:b5:ca:f8:6a:81:
                    da:a5:84:9a:c2:d9:a0:b3:1e:1e:7e:6d:ec:d7:54:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:64:85:77:B0:24:0E:C9:AA:51:F3:00:6D:C6:C0:DD:A6:5A:59:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c47fdc9a-06d9-37eb-b668-b64a80403e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:88:06:18:30:f9:7d:49:32:3d:e0:24:44:dd:6d:46:53:b6:
         db:84:0f:52:5e:bc:b6:18:26:02:70:e0:86:44:63:2a:7c:a1:
         d9:3d:ff:52:04:3e:3c:50:80:66:f1:b9:cd:f7:48:9c:61:ae:
         7b:cd:b0:a8:5b:b9:59:b8:d2:74:94:e1:b6:14:2d:f3:4c:81:
         9c:ae:e5:1a:1f:e2:9f:4a:89:cc:85:c5:65:53:60:f4:18:e7:
         87:79:ba:a9:30:6c:44:be:c8:5b:42:ff:94:29:69:bd:95:e4:
         b5:f5:2d:22:3e:c9:64:f3:03:0e:a3:1a:16:fb:87:7e:57:e0:
         13:a9:96:ce:e4:ae:63:ca:f9:f7:2e:19:35:17:2a:44:45:29:
         1f:cf:59:71:29:90:c2:77:f9:2f:59:78:30:54:40:c1:45:c3:
         58:0b:35:3e:4b:aa:95:91:79:85:bf:c4:a8:d0:45:a8:0b:c1:
         c5:14:cf:cf:05:59:8c:32:f1:2e:52:f9:b6:6e:2f:1e:3d:f0:
         d3:a4:13:5f:9b:9d:bc:be:41:9e:c7:32:e5:9b:51:a5:7b:69:
         a7:8d:9f:02:61:11:88:d7:03:bb:e9:24:ed:e6:b3:c8:52:46:
         e7:ed:da:a8:49:c0:f0:09:3f:4a:52:1c:39:4e:56:97:eb:06:
         7e:fc:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:36:55 2025 by rpki-client