Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8d52ec9-dddd-36a7-8121-3f46429838e5.roa
File:                     c8d52ec9-dddd-36a7-8121-3f46429838e5.roa (raw, json)
Hash identifier:          e/qhYv6qtdjcI4slOj+h3M2GG+QXvHJ4WEpxjxobyUI=
Subject key identifier:   D3:25:44:F2:3C:E7:13:C5:34:3D:89:FF:25:BE:3E:99:4A:03:0B:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842431E2CF5F01DC77BAD6E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8d52ec9-dddd-36a7-8121-3f46429838e5.roa
Signing time:             Thu 19 Dec 2024 13:45:28 +0000
ROA not before:           Thu 19 Dec 2024 13:45:28 +0000
ROA not after:            Wed 19 Mar 2025 12:45:28 +0000
asID:                     396552
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:1e:2c:f5:f0:1d:c7:7b:ad:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:28 2024 GMT
            Not After : Mar 19 12:45:28 2025 GMT
        Subject: CN=a8598c38-18ea-4251-86db-b56087830696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:7d:24:5a:59:4f:94:3a:c5:a3:ac:1a:bf:
                    9b:a7:85:d1:44:86:80:33:f9:09:c2:0f:0f:9a:a5:
                    a9:9d:2d:21:6e:0c:71:8e:e8:fd:ee:15:60:b8:17:
                    7b:b5:3e:3d:92:5e:f1:63:ce:d4:11:37:0b:32:ac:
                    97:bf:16:f3:d3:d3:dd:56:b8:aa:fe:1e:2e:dd:34:
                    2f:09:ae:6f:87:9d:88:09:ad:1a:cf:40:cf:fb:0e:
                    97:cd:f5:31:33:b9:05:f3:51:59:0d:48:84:8f:a8:
                    72:f8:ea:25:79:68:6e:d2:b4:d4:4f:7b:82:46:ef:
                    d8:5f:40:65:08:5c:dd:57:ae:2b:24:da:1a:52:2e:
                    41:f2:19:b0:3b:23:c5:e0:af:9b:35:a6:92:b4:95:
                    17:af:8a:d5:7f:c4:9f:e9:dd:8c:b4:7d:d2:33:d6:
                    d9:6c:53:40:68:36:5c:64:cb:50:7c:06:87:d5:18:
                    6d:15:6a:84:68:22:d9:34:aa:75:93:7d:82:7d:49:
                    6a:25:3e:48:60:a3:77:eb:60:58:cd:45:b0:44:54:
                    a6:14:2f:d6:11:cb:4a:b3:c6:15:66:89:f6:70:da:
                    e5:f5:14:6a:a3:37:79:c0:33:9a:76:47:1d:3e:40:
                    5d:b3:df:db:ca:2c:83:43:89:08:5a:32:34:bd:09:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:25:44:F2:3C:E7:13:C5:34:3D:89:FF:25:BE:3E:99:4A:03:0B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8d52ec9-dddd-36a7-8121-3f46429838e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5e:dc:92:ff:fe:3f:7a:00:b5:9b:ec:d9:ac:6c:bb:9e:f1:
         ed:8a:6b:79:6a:08:f0:d1:62:cc:6f:20:66:3b:17:78:cc:20:
         3e:99:11:e7:f6:3c:53:47:10:34:71:a9:79:ee:05:a6:57:0d:
         6b:45:9f:d2:8a:19:72:ff:15:e0:bb:c9:bf:6e:30:8c:9a:05:
         74:d7:2f:12:9e:42:b7:f2:0e:63:e3:76:75:f5:88:dd:7a:5d:
         aa:49:f7:8b:3d:66:54:0f:bc:53:81:59:fd:23:14:f3:bf:9b:
         35:f8:fa:16:20:4a:69:ee:4b:e4:f7:e3:ed:33:a3:f8:0c:fc:
         1a:5a:62:cc:6a:37:31:ce:a2:7e:a2:3f:90:a2:7a:00:b5:eb:
         49:b8:4b:06:20:6a:45:d7:60:da:6c:9b:11:b5:d2:5a:8e:0e:
         86:3f:1e:9b:0f:8a:d9:62:63:fd:c5:07:a2:96:b1:ea:4c:97:
         af:a3:af:43:e1:9b:d9:72:7d:15:6a:96:2c:0e:93:fc:73:25:
         d1:0c:08:41:7e:ad:4c:be:e9:2e:d5:dd:7b:a6:2b:e7:28:9f:
         02:55:0c:e4:72:1e:65:9b:c3:be:23:44:84:a0:9f:93:9b:40:
         51:f2:ac:cd:09:4a:de:01:89:79:51:8e:e0:76:df:95:e7:64:
         0a:93:9c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:07 2025 by rpki-client