Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/005eac0c-fa52-3d1b-ad45-6e2ac79171a8.roa
File:                     005eac0c-fa52-3d1b-ad45-6e2ac79171a8.roa (raw, json)
Hash identifier:          zpiqUQOs/CEpDjXVGiq5gFvyrdGDxitBtNyHLKYQQ4w=
Subject key identifier:   53:46:75:F9:B6:E4:7B:69:32:22:A6:C7:54:70:4C:5D:D0:99:4A:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9B4D6105242FCA81CC10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/005eac0c-fa52-3d1b-ad45-6e2ac79171a8.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396610
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9b:4d:61:05:24:2f:ca:81:cc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=201f3539-6101-4ae9-aedb-347a9e1c6e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:30:d0:45:12:e0:1b:e7:76:76:28:50:f9:
                    20:a1:ca:55:03:79:0c:8d:db:ba:80:15:aa:90:d9:
                    4f:7a:df:f2:fa:ff:f3:0a:8b:3d:fe:b1:ee:16:74:
                    85:e8:69:f8:4a:e0:f2:4b:ef:50:b8:7f:45:e8:fc:
                    5f:33:99:62:b0:4c:70:77:7f:ea:9e:51:75:98:9a:
                    40:ed:42:a2:d0:7b:41:59:9e:6a:dd:b0:42:75:3c:
                    da:88:8e:62:7e:95:67:f0:76:76:7a:fd:53:25:e9:
                    ac:7a:7d:19:af:2a:c8:5e:7b:51:3d:89:51:80:f1:
                    64:e5:d2:2c:1c:54:46:e2:57:00:16:0d:26:d3:ea:
                    7b:da:e6:e8:53:03:23:d3:75:cc:04:b7:81:8d:1a:
                    70:ba:75:f0:20:3d:00:0f:33:b1:02:c5:66:18:7b:
                    d2:aa:e7:f2:cc:b1:fc:5c:20:24:da:59:09:98:74:
                    85:63:a0:01:89:34:f1:07:fa:db:08:e1:95:a3:0c:
                    6c:24:eb:4a:a9:2f:6c:d1:a1:14:3c:24:f3:81:46:
                    f9:9c:84:fa:07:a7:7d:32:8a:7a:99:f2:6f:86:ae:
                    ba:fb:a7:32:5d:a5:dc:07:66:cd:d4:66:f2:e0:4b:
                    df:21:33:ac:77:df:89:d8:a3:14:f8:71:1f:e9:50:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:75:F9:B6:E4:7B:69:32:22:A6:C7:54:70:4C:5D:D0:99:4A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/005eac0c-fa52-3d1b-ad45-6e2ac79171a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:81:3a:4f:1b:0b:65:c0:73:2a:de:38:6f:82:60:31:5f:50:
         ff:fd:72:92:55:92:8f:1d:1e:13:98:ca:6c:73:59:38:eb:f3:
         40:13:22:50:21:c9:67:31:99:ad:ca:61:2b:eb:c9:49:de:39:
         bb:a1:8f:a1:00:1f:0b:41:09:48:10:0e:c3:b9:89:74:31:76:
         92:ef:b0:26:9f:1c:d1:97:0f:33:1d:24:c0:c1:88:42:05:39:
         92:f0:7b:d7:7d:0e:66:9b:b8:a4:fb:3a:5d:05:96:6c:98:20:
         13:ad:43:81:6e:96:80:81:0a:49:2b:ad:59:44:7d:39:20:4b:
         4e:1a:fe:50:ec:cc:96:1f:e7:aa:4a:7a:32:0f:61:02:ad:26:
         6c:a9:29:21:5e:bf:6d:b6:8c:61:79:b9:42:55:8b:4c:d3:3a:
         f3:f0:cb:ed:40:fe:75:b8:d0:44:0b:52:50:0b:f5:c2:29:20:
         30:7e:04:f6:0e:61:29:54:ca:87:09:11:72:fb:63:e5:23:d2:
         e9:2f:8e:85:15:b3:f5:00:9a:69:4c:55:36:60:a1:f9:37:8b:
         36:3f:66:11:b7:f8:2e:c3:9b:43:4c:cf:9c:49:0b:06:43:6a:
         76:c6:38:25:9d:a3:cc:fe:66:3b:3b:24:16:7d:c0:29:9e:e1:
         08:6c:e7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:37 2025 by rpki-client