Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c579dba5-ede7-3a9a-898b-c620d4248622.roa
File:                     c579dba5-ede7-3a9a-898b-c620d4248622.roa (raw, json)
Hash identifier:          bpXbrz42ua64BYdHG5lhv5GQgKeY06dV1BDw06wMK50=
Subject key identifier:   CA:68:4D:FE:D0:C7:69:AA:0D:20:FF:36:70:CE:46:7E:65:16:0C:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB73146803C5030F1FF200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c579dba5-ede7-3a9a-898b-c620d4248622.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396573
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:73:14:68:03:c5:03:0f:1f:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=741b72fd-f96b-42df-b9aa-8501dafa44de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:89:94:61:1f:ee:68:38:8f:1b:0d:c1:28:
                    df:f1:e9:d7:fc:ce:83:08:d6:75:91:af:54:76:73:
                    25:e5:6b:fe:54:f0:2c:44:9e:09:b0:62:82:3f:fc:
                    9c:03:97:85:14:f9:ca:90:5e:59:e3:8c:9a:18:36:
                    85:47:1b:35:fa:5e:49:b3:19:92:59:8e:df:3d:1c:
                    17:f6:b7:e9:ef:bf:04:fd:4e:8c:5f:0f:dc:91:16:
                    dd:7b:c2:26:90:a3:93:96:df:e2:c3:7f:aa:69:4e:
                    e9:53:26:06:66:7d:ff:af:c1:05:38:5b:d1:f4:35:
                    c7:53:35:98:18:6b:c5:44:d7:f9:4d:48:09:9b:57:
                    33:1d:64:f8:9d:6b:90:1e:ab:84:78:f6:b0:db:3e:
                    ef:f8:3d:ec:6e:1a:f5:d9:fc:71:24:c8:8c:3f:c9:
                    02:c9:15:30:54:d3:7d:db:4d:5e:7e:8a:68:06:22:
                    72:35:fc:54:76:3a:e4:66:e8:24:36:21:9e:2e:99:
                    d2:5f:f8:1d:30:7c:2b:b9:a6:fe:9f:e0:63:e1:8b:
                    a1:77:32:cf:1e:1f:b3:43:24:d3:c5:79:c8:77:d1:
                    67:31:40:fd:99:24:af:da:c3:69:e6:9f:65:0d:1c:
                    84:3a:0e:80:ab:6d:fa:c1:a4:80:4b:f9:37:21:d6:
                    f6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:68:4D:FE:D0:C7:69:AA:0D:20:FF:36:70:CE:46:7E:65:16:0C:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c579dba5-ede7-3a9a-898b-c620d4248622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:24:0c:a0:35:37:0b:47:2e:2d:1b:b0:d0:2a:a2:f2:2e:
         be:bf:e6:86:6a:44:48:c3:97:87:09:3c:24:b8:84:dc:bd:95:
         ba:1c:d7:d1:3e:9e:c4:59:66:f0:0e:85:df:4c:10:e8:e7:73:
         ae:ab:4c:bb:87:5c:60:9e:bc:3b:dc:2f:78:7f:c7:00:61:14:
         6f:03:86:33:b5:b2:55:f6:95:98:68:94:4c:92:82:5a:5f:e7:
         cf:57:d6:19:67:12:ad:49:de:53:a5:da:35:07:3e:08:ee:b1:
         93:2f:f9:fc:59:e0:10:d7:c6:41:6e:8f:ac:d4:0c:62:f2:00:
         67:a7:19:41:c9:4f:9e:4f:1d:85:d1:9d:23:1d:2b:39:29:5a:
         e7:e6:60:9b:c1:6f:b4:b3:31:f2:a9:5e:a1:9f:d8:96:9e:7b:
         92:ce:84:75:5c:66:5b:75:be:d5:71:8a:f0:aa:97:f9:75:f1:
         01:7f:45:dc:61:04:60:e1:49:a0:d6:16:7c:d3:e6:60:dc:ff:
         17:68:65:4c:5a:e1:fc:44:b9:d6:d5:5f:08:73:2d:65:2b:80:
         66:f6:b2:f6:81:fc:9c:6c:bb:74:66:b8:11:62:85:c6:5e:c7:
         35:87:a6:7d:f7:df:43:da:37:a2:53:7c:49:21:61:1b:fb:b0:
         2d:93:c0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:04 2025 by rpki-client