Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa
File:                     d13daf58-78a7-37b3-8c65-2e98fba1c338.roa (raw, json)
Hash identifier:          QXXxX3vQ0DPff/V1GaORVmQXwb0UxRQrviVEsqKB24I=
Subject key identifier:   3E:46:95:28:A9:37:FC:10:EB:3B:2E:DF:16:F4:D1:80:FA:72:C4:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858483720119B24CD584851AF7680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     396605
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:11:9b:24:cd:58:48:51:af:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=8848ba88-a40e-49c0-a8fd-c08d1c78774d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:6f:02:69:f7:0a:0d:b2:24:fe:37:50:10:
                    f4:af:6a:cf:bc:98:1f:99:a2:a4:b3:3e:a3:6c:f9:
                    ab:ec:4f:3b:e9:51:24:43:1a:04:cb:5a:3b:dd:ba:
                    5a:bd:30:7c:5d:1e:96:c7:fb:92:29:0f:2b:2b:8b:
                    59:75:f1:45:b4:58:69:f6:5d:d4:54:6b:b3:fe:96:
                    f9:29:dd:16:c5:90:8a:7e:44:b3:4a:d4:b9:f9:85:
                    28:87:af:f6:04:2f:bb:d3:95:c5:7e:56:86:dd:85:
                    39:60:f5:60:65:55:f4:d4:3e:b7:ae:cf:35:6b:c8:
                    7f:f5:ff:d4:a4:ca:75:f2:a1:37:47:13:6b:cc:52:
                    39:a9:11:b5:e5:0d:c3:58:f7:fd:4f:3b:d5:8b:a3:
                    82:08:d6:a8:21:48:f5:d2:fc:96:85:7c:3d:14:37:
                    22:d8:36:f7:d5:68:ca:f1:6f:9e:dd:94:b5:b5:f7:
                    2f:9e:e5:c8:8e:26:b4:bd:97:51:60:d5:d6:25:d8:
                    da:67:d9:ca:aa:1f:ff:d5:57:9c:ae:42:2c:ae:c2:
                    22:67:39:30:7c:63:ac:ec:4b:d0:56:0b:93:87:a5:
                    e6:ea:be:8c:ce:d3:c7:ef:74:9d:a4:aa:3f:dc:8a:
                    68:8d:69:05:8a:6f:66:57:f8:c9:25:ad:11:e2:b8:
                    4e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:46:95:28:A9:37:FC:10:EB:3B:2E:DF:16:F4:D1:80:FA:72:C4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d13daf58-78a7-37b3-8c65-2e98fba1c338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:86:96:dc:37:79:ae:f8:01:48:3f:d5:5a:d1:dd:bd:62:20:
         58:83:a1:fb:4f:9c:b4:2e:08:e7:bb:32:09:5e:a0:c6:3c:71:
         12:75:ea:b4:3c:81:df:e3:9d:b7:87:6a:b5:ce:98:39:7a:e1:
         35:6b:1c:9f:2e:85:f3:17:1e:64:8a:28:2c:8c:ac:9f:2e:71:
         e6:10:a8:3f:c0:9b:05:97:d5:7c:a7:a7:14:c3:65:d1:41:ab:
         59:ce:70:f5:cb:ac:33:c1:14:a7:9e:26:87:05:42:9d:bc:53:
         83:74:0f:4b:c5:eb:81:aa:03:f0:6b:b6:5f:97:ef:49:d2:85:
         f2:50:94:00:b3:81:a2:2b:48:0b:72:65:94:bf:94:42:1c:10:
         df:7e:d8:f2:f1:7b:84:7e:28:27:5b:d9:c8:9b:3f:2d:c0:cc:
         56:97:b5:52:24:fc:3d:95:4c:fa:c4:85:13:a3:0b:66:81:df:
         3c:6d:41:66:d3:5d:a6:21:da:0c:9e:2a:97:23:72:88:b5:af:
         97:d6:f0:eb:71:f9:16:02:93:d3:df:5a:d3:cb:28:eb:ed:44:
         be:bb:7b:ae:7f:80:00:3b:6d:79:36:b1:91:38:70:73:10:4b:
         3d:95:0e:62:c7:06:dc:8f:8b:ec:38:e3:b8:d1:f9:10:fc:a0:
         42:1d:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:02 2025 by rpki-client