Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa
File:                     da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa (raw, json)
Hash identifier:          HEsO8Dfk77X3S+RQ6fIXZ5erw9PbJM7Y+b+lyrcGNMk=
Subject key identifier:   A4:FB:3F:6E:8E:03:2F:DC:51:EA:6C:A3:5D:0C:B4:D1:7B:0B:0E:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A04A06EC8E4A26FB870180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396549
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4a:06:ec:8e:4a:26:fb:87:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=c741a33e-fd1d-40ee-ae11-21ca619fb4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:96:a0:cd:04:14:00:29:05:2b:6a:6d:86:
                    05:83:85:2d:92:4b:33:7f:df:65:b2:8f:73:29:b2:
                    57:38:ed:35:87:7a:62:73:6b:07:9f:64:51:7e:ac:
                    e4:3d:3a:88:72:b4:18:71:db:f4:1e:87:ee:3c:80:
                    69:a5:fb:86:75:65:80:04:88:2b:8c:df:9d:92:16:
                    e5:f8:9d:7a:15:6e:18:fd:f4:54:ae:fc:6f:a8:a8:
                    23:59:59:10:52:fb:7b:db:e1:87:40:43:d3:59:e0:
                    54:29:9f:78:b9:1c:b1:f9:05:df:56:93:7b:ae:bd:
                    eb:30:23:14:06:c4:d5:94:af:37:25:36:1a:6d:7c:
                    23:67:da:c4:4b:49:48:70:16:ce:0e:81:21:e8:53:
                    77:a2:91:f2:76:6f:b1:8d:1f:56:3a:02:da:ae:ce:
                    a8:1b:1c:b7:ed:d1:c6:9f:f4:60:3d:1e:54:0f:8f:
                    a9:b7:92:d4:80:b2:47:cf:b2:66:dc:6b:ac:f6:b5:
                    64:f3:67:4c:b7:93:2e:08:49:ff:9c:f0:f2:35:2c:
                    7b:4e:27:e3:63:b4:e8:3a:93:45:38:1e:b1:ec:d4:
                    9e:a8:5f:d8:78:5d:13:3e:6e:26:c3:c8:7e:7e:17:
                    b7:79:f9:d1:c8:bb:01:29:85:aa:3b:80:f0:81:bb:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:3F:6E:8E:03:2F:DC:51:EA:6C:A3:5D:0C:B4:D1:7B:0B:0E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da249cf7-3c8b-3ce9-b8b7-d919013e658b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:97:8a:10:e1:54:30:f6:19:91:31:e6:51:52:d6:a6:30:
         b9:ec:33:96:72:46:a2:4d:c8:b1:a5:ff:59:d5:16:4f:46:cb:
         e0:50:cf:40:46:d4:cd:40:c5:35:3c:3d:8c:31:db:08:e6:a6:
         fc:90:8a:d0:b2:df:39:c0:ae:ac:03:f5:f1:0b:a3:1f:ce:d2:
         28:6f:88:40:e6:4c:e9:af:14:50:b1:77:da:96:f2:0a:70:f5:
         d6:c6:60:03:ac:b7:00:dc:bf:1f:7c:e3:e4:51:c1:08:4b:be:
         43:7b:78:58:12:8c:34:f8:ff:b0:eb:c2:ba:9d:bb:1d:d4:f0:
         b3:a1:d1:b9:1c:95:a9:22:ba:5e:c6:ae:e3:51:74:85:c9:db:
         dc:e6:fe:1f:15:7d:50:a5:54:fe:0a:bb:0c:ee:71:3f:6e:84:
         a4:9a:f1:8b:64:fc:a5:05:cd:07:83:d6:f0:f2:b8:4c:ea:65:
         a6:d5:e5:86:5d:51:c7:94:08:fd:9e:37:d9:7a:e2:ef:f2:ca:
         fe:9b:1a:ce:a2:65:2e:db:9c:77:01:5e:85:2a:1a:63:df:fd:
         b5:fd:c5:b1:1f:51:31:e1:0b:d8:a0:8c:73:93:74:10:45:a0:
         6c:c2:ca:30:51:58:a1:4a:b0:6b:70:cc:b8:fe:a6:6e:b4:0a:
         59:88:d5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:40 2025 by rpki-client