Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7a0391c-a019-3338-87f7-0c77c616de72.roa
File:                     c7a0391c-a019-3338-87f7-0c77c616de72.roa (raw, json)
Hash identifier:          /20TsxaJV44DQy2XHInlF3cG7O5DmcEgqHok8qrtybY=
Subject key identifier:   F1:D7:36:B4:C2:4D:D7:99:F4:46:50:7C:CE:39:2D:A1:70:A7:A0:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842434370CF923E88D1544530
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7a0391c-a019-3338-87f7-0c77c616de72.roa
Signing time:             Thu 19 Dec 2024 13:45:46 +0000
ROA not before:           Thu 19 Dec 2024 13:45:46 +0000
ROA not after:            Wed 19 Mar 2025 12:45:46 +0000
asID:                     396596
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:43:70:cf:92:3e:88:d1:54:45:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:46 2024 GMT
            Not After : Mar 19 12:45:46 2025 GMT
        Subject: CN=fb9e5dfa-8bcd-4380-854e-0c2755fe48f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b4:c3:7b:37:ca:f7:52:54:83:26:42:d6:ac:
                    0d:e1:ad:ec:b9:a9:75:e2:7e:7f:ef:4a:83:12:c7:
                    7f:7e:56:11:d6:98:30:9d:ad:98:11:73:d6:e5:d7:
                    b1:54:0f:a4:a9:73:cf:b2:c6:9b:9e:f3:e3:1f:f8:
                    94:b1:93:b4:a2:dd:d2:81:fe:a1:7e:eb:8e:be:f7:
                    85:49:d6:bd:f7:9d:65:8a:3b:20:bc:c3:ad:85:a2:
                    18:37:cc:a1:8a:c3:40:67:5b:57:de:1e:55:8b:be:
                    fb:74:ea:f5:d5:3e:3b:29:bb:30:10:d0:c5:61:41:
                    37:b0:a8:ee:00:cc:51:e9:ec:11:b9:d2:d3:41:48:
                    0b:a5:d5:0d:a7:4a:e3:b0:3d:b5:f0:49:5a:78:db:
                    20:6c:cc:37:d9:2c:c1:c1:e0:7c:96:d3:c1:01:7f:
                    26:0e:a7:b0:1e:ac:c7:ac:09:f2:72:3c:2a:4d:91:
                    8f:68:4c:07:5b:d3:2f:8a:93:ec:95:6c:3c:9b:bc:
                    a7:47:9e:d8:bc:fa:d9:f3:34:12:5f:20:90:2b:1a:
                    bc:3f:87:ff:cf:74:a2:bb:c2:3f:b2:6c:4a:04:b5:
                    eb:4d:c4:65:df:84:3e:c2:56:7b:83:fe:8c:7c:8c:
                    fb:da:91:28:41:fe:ec:58:4f:59:04:c5:31:31:44:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D7:36:B4:C2:4D:D7:99:F4:46:50:7C:CE:39:2D:A1:70:A7:A0:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7a0391c-a019-3338-87f7-0c77c616de72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ae:f9:22:b3:3f:7d:93:17:03:58:b4:0d:c5:e8:b5:7e:87:
         69:96:36:1b:97:a7:4e:b2:63:09:a2:52:94:78:0f:14:9d:54:
         08:ef:70:5c:0f:e4:c8:d4:cb:96:e3:49:17:3f:f3:99:76:54:
         73:99:32:4f:2d:7a:5e:90:64:72:99:b1:79:2c:f2:52:43:9c:
         dc:a4:c8:4e:e0:eb:a8:e9:0a:de:61:72:94:2e:9e:fb:ac:61:
         b2:40:f7:3e:fe:1b:e7:e2:23:38:2b:c2:34:28:f6:08:26:70:
         ae:69:4d:90:1f:49:cd:12:65:f1:e6:21:1d:3c:36:60:8f:3d:
         80:a0:80:31:2a:cd:d3:ec:d9:a8:8a:6b:48:5e:21:73:b7:9d:
         7a:80:0c:2f:44:18:70:64:5d:8d:0e:9e:b2:98:0d:b1:42:1c:
         be:6f:51:97:30:49:cd:96:a8:76:7d:97:56:b8:07:8e:f6:30:
         3b:64:76:84:fa:75:f3:b8:6d:50:0b:b7:75:fe:2b:18:19:cc:
         cd:fc:1e:83:d9:7a:87:af:74:15:e4:88:c0:9b:98:18:fc:77:
         55:ee:7a:f7:b2:34:d6:8c:37:f2:c8:42:4f:f5:aa:c8:3f:1e:
         1a:1e:fa:92:53:71:f6:79:31:36:c5:aa:35:13:00:2b:23:e0:
         d4:8e:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:43 2025 by rpki-client