Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da5c2c54-d7ab-3a10-a414-952cfb95fc78.roa
File:                     da5c2c54-d7ab-3a10-a414-952cfb95fc78.roa (raw, json)
Hash identifier:          BqnB1q3MbQIfdhNH+eZbmC7SI3Lj2Dy9N+AJoPbsC9g=
Subject key identifier:   DC:79:2E:D0:CB:97:CA:27:97:54:34:B4:B5:C4:10:2C:F3:03:F8:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB73C03F217271F698A900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da5c2c54-d7ab-3a10-a414-952cfb95fc78.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396560
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:73:c0:3f:21:72:71:f6:98:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=c36b2a85-1291-464f-b367-4e06a803e02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:be:3e:4b:bd:a3:69:9b:e5:88:c7:d4:30:
                    ba:e6:1e:6a:61:41:90:7b:b5:86:be:3a:da:60:62:
                    0e:cc:0a:f7:35:fa:24:ab:fe:bd:b9:4e:df:cc:72:
                    74:2a:78:e7:a0:34:ef:e6:00:1b:ee:67:e2:d8:e0:
                    94:ca:6c:d0:5f:75:55:8d:5c:39:9c:c0:8f:6b:18:
                    ea:3e:71:37:3a:58:13:c0:46:fa:cb:18:78:95:8c:
                    02:3b:7e:4e:6e:73:89:a6:44:a7:2e:d0:fb:9b:22:
                    57:ac:ab:6b:32:c9:82:ac:f5:5b:0f:0b:f1:84:aa:
                    61:8d:26:a4:e2:a0:0a:fa:89:bf:aa:0d:cd:4b:16:
                    ce:e5:65:62:f7:d5:74:3f:4f:51:68:54:0d:67:82:
                    86:3c:9e:5b:e0:fa:0e:06:81:ad:fd:2c:72:c9:94:
                    e8:00:16:bb:e9:c4:93:6b:34:ed:60:fb:39:68:74:
                    c3:aa:0e:98:ef:26:54:24:81:59:ea:2c:a3:9d:6b:
                    8d:d3:5a:d4:d6:6e:f1:44:f3:58:1d:8d:62:cb:b6:
                    10:d7:c5:a6:24:ab:d9:cc:89:56:0b:2d:fd:f3:9b:
                    81:14:a3:49:67:6a:cf:03:aa:b6:a4:45:b9:19:56:
                    c2:10:ea:9d:4b:f4:99:23:c0:b5:5c:df:85:a9:97:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:2E:D0:CB:97:CA:27:97:54:34:B4:B5:C4:10:2C:F3:03:F8:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da5c2c54-d7ab-3a10-a414-952cfb95fc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:53:ca:e5:87:3b:38:f0:e8:52:84:d5:22:de:85:06:4f:86:
         91:86:a5:f1:6f:d5:4c:7d:40:29:34:8b:41:f5:89:29:cb:dc:
         8e:96:45:d9:5c:e1:f3:2b:48:c3:4e:28:68:70:8f:4e:c6:d8:
         92:52:11:aa:9b:ba:3a:71:89:68:22:d9:22:63:0b:d7:8e:5c:
         bb:f4:bf:46:0d:66:04:41:d2:ad:18:d7:6a:4e:c7:7d:59:a7:
         0e:b2:94:99:00:d7:7e:1b:21:70:ea:ed:21:e9:a2:17:55:60:
         98:79:7f:11:c5:70:67:6f:86:1e:40:e0:29:95:e8:6e:94:d0:
         54:5e:31:77:92:d5:a5:03:87:a2:41:f5:bd:87:38:ff:ed:32:
         f9:79:e7:fd:8f:70:bb:2c:97:8d:9e:07:15:69:db:a0:00:d6:
         e9:14:cf:35:81:5c:e7:dd:69:fe:8d:c4:45:7d:75:31:9c:f1:
         ed:e4:41:d6:f3:d1:c6:c5:fa:ab:24:40:f8:cd:39:e9:0d:d6:
         3d:72:96:25:6b:28:f0:d6:1d:18:8c:79:e3:85:af:2f:63:39:
         e3:fd:94:d0:42:12:d5:8f:eb:74:28:02:a5:ce:1c:d9:13:4f:
         f4:23:ea:50:f4:fa:be:db:fb:c1:3c:ec:4a:22:b8:0c:94:d4:
         e7:f1:26:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:37 2025 by rpki-client