Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf954f2c-6a8f-3fc3-b7bd-82c2f0291c6c.roa
File:                     cf954f2c-6a8f-3fc3-b7bd-82c2f0291c6c.roa (raw, json)
Hash identifier:          aYJrqqdgpoJVJxg0URPI0WAJDIawsnXgnAcKyt2OYSo=
Subject key identifier:   0E:01:51:02:E8:47:B7:1D:05:D3:33:A6:17:4A:42:F0:3F:98:40:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484243111265FE8DE4D4F6F680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf954f2c-6a8f-3fc3-b7bd-82c2f0291c6c.roa
Signing time:             Thu 19 Dec 2024 13:45:22 +0000
ROA not before:           Thu 19 Dec 2024 13:45:22 +0000
ROA not after:            Wed 19 Mar 2025 12:45:22 +0000
asID:                     396590
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:11:12:65:fe:8d:e4:d4:f6:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:22 2024 GMT
            Not After : Mar 19 12:45:22 2025 GMT
        Subject: CN=4f5eb465-eb5d-49b2-ac46-d73e4cd4b254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:1e:f6:dc:36:61:29:46:f8:ab:76:9f:1f:
                    17:e1:b1:fa:f4:e0:a7:5c:2d:aa:80:fe:cf:2f:21:
                    3a:0d:ba:1a:5b:0d:b9:3f:4c:0e:78:35:9a:d0:99:
                    6e:63:58:bf:7a:6d:8f:2c:54:5e:97:54:1d:62:4c:
                    29:06:01:5c:aa:1b:13:f8:3d:39:8e:9d:66:ff:c3:
                    3d:0b:dd:dd:88:8a:27:04:0f:6e:25:44:1f:b3:6b:
                    7d:73:7d:c8:54:3e:50:54:e2:63:57:92:58:be:f6:
                    66:2e:5c:77:f2:96:8b:7b:e0:d9:f1:8b:f6:cd:b1:
                    18:10:a9:be:5c:4e:e7:1f:f8:18:9e:e1:a8:db:43:
                    d5:af:b7:1e:50:87:eb:65:79:bc:60:18:19:5d:85:
                    76:f6:52:c2:f7:b6:dd:63:e9:3a:a3:c2:92:dc:d2:
                    58:0d:79:4c:b3:d2:2b:1c:02:b1:2a:1b:9b:d8:f1:
                    52:ab:86:ae:39:11:22:ad:fa:7a:ca:71:7c:62:39:
                    53:2c:cb:fd:aa:31:73:ea:10:06:8a:d6:50:a4:68:
                    55:a9:03:a0:cb:ac:1e:22:12:86:ea:e2:1b:37:95:
                    63:ea:41:57:ab:76:d3:90:41:3c:06:ca:13:b0:bc:
                    db:a0:b5:e5:97:20:b7:aa:2e:f2:62:e8:27:ed:79:
                    1b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:01:51:02:E8:47:B7:1D:05:D3:33:A6:17:4A:42:F0:3F:98:40:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf954f2c-6a8f-3fc3-b7bd-82c2f0291c6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:6e:c8:39:a4:df:9f:2e:bb:b6:da:ab:0e:2f:17:80:59:
         18:43:f8:24:06:c0:bc:75:39:0a:4d:75:fb:0d:0d:19:28:eb:
         1c:54:c5:27:31:cf:c7:27:eb:c2:02:d2:15:b0:00:9d:90:88:
         b4:8e:cf:1a:cd:66:7c:06:b5:2e:8d:99:9f:e7:04:20:18:62:
         3a:03:13:7e:5a:cf:2f:92:ae:94:fb:18:8d:11:78:97:06:22:
         3c:dd:16:b6:c6:ca:8a:c5:94:a2:1d:ee:3e:5f:2f:6a:92:d6:
         26:b1:b2:3c:79:2c:9e:f8:7e:6f:40:28:b6:ec:d3:45:60:40:
         1c:ce:f5:4f:ea:ab:b2:7e:e1:74:8c:43:e1:8e:24:f2:5c:48:
         92:fd:65:9a:1c:93:3a:09:46:b1:15:97:d0:93:f6:ae:8d:d4:
         51:2d:c3:90:96:32:b3:e9:18:c5:05:b6:01:0f:da:08:9d:3d:
         bc:d1:34:e5:b4:1b:0c:3b:a8:3d:36:6e:33:1e:00:00:07:a4:
         68:27:7f:fd:c3:d6:74:c0:2f:ce:d7:21:47:1d:1b:ca:86:4f:
         58:2b:d5:0c:c7:52:f8:81:c5:03:1a:f7:06:ef:9f:5d:9b:22:
         a0:ad:87:fa:8c:f6:a4:d4:ad:2b:23:4b:b4:f0:5d:93:00:3d:
         2d:75:bf:d5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQxESZf6N5NT29oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUyMloXDTI1MDMxOTEyNDUyMlowLzEtMCsGA1UEAxMk
NGY1ZWI0NjUtZWI1ZC00OWIyLWFjNDYtZDczZTRjZDRiMjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmswe9tw2YSlG+Kt2nx8X4bH69OCnXC2qgP7P
LyE6DboaWw25P0wOeDWa0JluY1i/em2PLFRel1QdYkwpBgFcqhsT+D05jp1m/8M9
C93diIonBA9uJUQfs2t9c33IVD5QVOJjV5JYvvZmLlx38paLe+DZ8Yv2zbEYEKm+
XE7nH/gYnuGo20PVr7ceUIfrZXm8YBgZXYV29lLC97bdY+k6o8KS3NJYDXlMs9Ir
HAKxKhub2PFSq4auOREirfp6ynF8YjlTLMv9qjFz6hAGitZQpGhVqQOgy6weIhKG
6uIbN5Vj6kFXq3bTkEE8BsoTsLzboLXllyC3qi7yYugn7XkbSQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFA4BUQLoR7cdBdMzphdKQvA/mEBFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y5NTRmMmMtNmE4Zi0z
ZmMzLWI3YmQtODJjMmYwMjkxYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAVxG7IOaTfny67ttqrDi8XgFkYQ/gkBsC8dTkK
TXX7DQ0ZKOscVMUnMc/HJ+vCAtIVsACdkIi0js8azWZ8BrUujZmf5wQgGGI6AxN+
Ws8vkq6U+xiNEXiXBiI83Ra2xsqKxZSiHe4+Xy9qktYmsbI8eSye+H5vQCi27NNF
YEAczvVP6quyfuF0jEPhjiTyXEiS/WWaHJM6CUaxFZfQk/aujdRRLcOQljKz6RjF
BbYBD9oInT280TTltBsMO6g9Nm4zHgAAB6RoJ3/9w9Z0wC/O1yFHHRvKhk9YK9UM
x1L4gcUDGvcG759dmyKgrYf6jPak1K0rI0u08F2TAD0tdb/V
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:48:50 2025 by rpki-client