Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa
File:                     ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa (raw, json)
Hash identifier:          +qNKiRNkDhq+8/goBvJmPqHFgZ2ATALQEP8laSo9j+k=
Subject key identifier:   52:87:B5:2B:75:53:07:2D:B0:A1:FD:6D:F9:D5:91:68:58:4B:B6:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842432D8247C06F8B233115A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa
Signing time:             Thu 19 Dec 2024 13:45:36 +0000
ROA not before:           Thu 19 Dec 2024 13:45:36 +0000
ROA not after:            Wed 19 Mar 2025 12:45:36 +0000
asID:                     211369
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:2d:82:47:c0:6f:8b:23:31:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:36 2024 GMT
            Not After : Mar 19 12:45:36 2025 GMT
        Subject: CN=fb0357f0-54f2-4fcd-af25-38a0dab0d204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:e0:b3:fc:2e:96:2b:5f:83:e7:40:86:7e:
                    15:18:b4:f5:5b:1a:95:a6:ba:01:34:ad:16:85:03:
                    96:26:27:d9:d4:89:95:3e:e2:a8:b6:aa:25:86:ff:
                    a5:b2:da:50:20:2d:c8:a7:a4:fc:12:5f:1f:cd:e1:
                    5a:d5:b5:e1:2c:af:2d:6a:62:54:b7:57:cd:b2:cd:
                    a5:f7:8e:64:86:c1:18:4e:f7:c3:e9:34:fb:53:35:
                    c7:ad:eb:d0:52:a3:99:fa:bf:f7:a0:8c:db:82:de:
                    f9:fc:63:66:db:21:77:3d:3d:1e:7a:50:d5:78:89:
                    3d:0d:f7:7a:84:cf:10:c0:53:f2:7a:7c:e8:9e:33:
                    96:35:bd:b3:2c:b6:c6:67:79:01:e1:0d:23:e9:78:
                    c9:81:4f:6c:d5:b7:f2:80:7d:63:d7:c8:e6:16:71:
                    d1:ec:ce:99:21:2b:c8:a1:05:d6:ff:ec:c3:b4:69:
                    97:97:8a:5e:99:63:55:a8:69:c7:a3:9d:39:fe:a7:
                    5d:73:3d:03:9e:98:4f:a1:3f:bc:3d:37:f1:2e:ea:
                    c3:f0:04:d4:68:64:99:fe:66:1e:68:19:93:6d:72:
                    76:86:7e:95:03:67:e7:86:7f:7c:bc:b5:db:18:4e:
                    13:4e:93:97:4a:7f:ea:ce:96:b4:b9:13:13:60:33:
                    cf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:87:B5:2B:75:53:07:2D:B0:A1:FD:6D:F9:D5:91:68:58:4B:B6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ed730c7f-1b8a-3da4-9ca7-5e5249e2bd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ae:37:bd:02:29:40:7f:e4:2a:81:f8:72:39:a6:ff:8a:ce:
         c5:18:3d:90:85:fb:e0:0e:3e:3d:58:85:7a:f1:cb:e9:ad:a6:
         11:75:31:db:1e:7e:58:d4:c6:af:8d:c0:85:7f:db:56:a1:b9:
         42:53:23:59:d3:8c:72:bf:73:b0:32:2e:4e:74:fe:c3:d4:82:
         67:2e:c8:a7:31:40:19:5d:aa:71:df:93:80:e7:e1:1a:ce:bf:
         b7:91:98:d8:d3:5e:94:7e:e5:a7:43:06:37:da:b0:51:48:7e:
         36:a2:95:fe:06:d1:9b:39:ab:94:fc:09:73:d3:be:74:cb:fc:
         c2:0e:fc:d2:52:55:f6:1d:ca:12:34:51:b6:33:94:38:7f:b2:
         10:13:f9:25:ba:5d:b1:b9:40:b5:5e:c5:79:39:43:8f:0e:c1:
         02:2a:20:5e:85:d9:0c:c8:f0:90:d1:32:57:3a:bf:a3:cc:1c:
         27:22:0c:fd:3a:36:8c:6e:67:d9:e4:b7:cf:f2:10:ea:4f:e7:
         e4:af:91:7e:ad:c9:1e:46:24:97:ec:20:7f:06:3c:6d:03:78:
         df:ab:ba:dc:68:54:2c:67:45:b2:6a:e1:e9:97:e2:61:aa:e1:
         a9:93:2e:fa:80:0e:45:95:59:86:7d:65:ba:25:2f:56:e7:51:
         aa:9d:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:21 2025 by rpki-client