Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bda75b5-efce-330f-8ab9-6aeda95371af.roa
File:                     1bda75b5-efce-330f-8ab9-6aeda95371af.roa (raw, json)
Hash identifier:          SAPSRHdmwT+ZhTNMnzgVa6tip3i4vEM/vlWP4b7KV4A=
Subject key identifier:   5B:D9:AA:6F:73:45:60:49:A3:25:DF:AB:40:E6:1B:3D:16:D1:F3:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849244E92CE06C670EFCF8CBD60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bda75b5-efce-330f-8ab9-6aeda95371af.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     396558
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:92:ce:06:c6:70:ef:cf:8c:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=891ffd74-abb2-4fc0-9adb-0f81e783a564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:4b:02:37:b4:2c:76:14:8d:e2:f2:c3:ec:
                    ed:33:0c:b5:2c:3b:8c:c4:e1:aa:79:4c:e7:a7:51:
                    28:6a:84:34:ad:85:3e:72:0d:df:95:2a:90:88:b7:
                    99:a1:a4:4e:ff:21:b8:61:de:26:18:a6:3f:4a:a2:
                    c4:00:c1:22:58:ec:36:d3:19:3a:25:2f:51:a6:e3:
                    fa:8e:09:dd:9d:ff:6c:1c:68:e0:96:05:5b:a4:d3:
                    48:96:cd:a2:a5:a3:1b:3f:0f:1b:f2:af:93:9c:7c:
                    b6:bb:b2:f4:91:6c:c0:e7:68:3c:08:dc:cd:5a:00:
                    03:33:d3:a0:c4:00:02:ea:d8:fd:cf:2d:56:27:50:
                    cb:c2:6a:69:3c:13:0b:30:5e:30:a8:79:50:b4:85:
                    b4:e2:31:f3:fa:64:b5:f6:b8:28:b0:af:ff:2b:ae:
                    2d:dc:64:05:97:12:12:d0:f1:73:d5:5f:2a:21:88:
                    40:45:be:ae:4a:00:84:21:9e:05:e4:99:d9:02:97:
                    5b:31:f8:6b:1c:2b:09:7a:0c:c7:e2:18:6f:a5:1e:
                    c6:19:ea:86:bd:8f:50:7f:ec:e1:12:99:f1:8b:0d:
                    4f:e8:b4:26:28:8b:85:4e:b0:96:dd:de:a9:e7:84:
                    98:2c:cc:4a:43:d1:86:96:f9:93:82:3d:6f:7d:1e:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D9:AA:6F:73:45:60:49:A3:25:DF:AB:40:E6:1B:3D:16:D1:F3:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bda75b5-efce-330f-8ab9-6aeda95371af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:91:0a:9b:93:47:c5:3d:b5:51:2f:25:fc:c5:10:a7:f1:
         3f:67:c3:10:08:ec:65:10:04:f2:29:fb:3a:f2:39:78:2a:ce:
         19:2f:2c:ba:6a:e8:e2:1e:d0:6d:d4:d9:d3:7a:57:fe:aa:68:
         3d:4d:bf:56:9f:86:38:a8:f9:f7:52:9f:ec:da:b3:b1:b5:e9:
         a6:3a:85:5a:7e:06:82:11:dd:20:b7:d5:65:32:d1:1b:fa:9d:
         63:69:85:92:f9:f8:2d:15:a5:6b:d8:ef:6e:ea:d1:b9:0a:a8:
         f0:dd:d1:10:91:75:2f:9f:ce:d8:30:9b:24:f9:0b:fe:69:8e:
         a2:2c:7c:6c:2b:09:96:16:28:5d:43:3d:5b:26:cb:0f:df:1c:
         46:91:ef:66:e3:9d:6e:c7:b3:8c:00:de:36:9a:71:fc:de:5d:
         d6:ae:80:4b:17:50:e6:c9:4b:9c:a9:f6:b8:c4:9c:8a:93:16:
         6f:77:a3:d9:d6:73:37:ac:0d:1f:9f:2d:f7:76:ea:93:ab:bb:
         c7:85:b0:af:17:46:89:93:9a:3e:15:44:0e:b8:8a:c4:88:63:
         cf:aa:d6:6c:9c:64:86:5f:ef:2a:d0:9e:7a:b6:b9:01:09:c1:
         d3:e0:98:c5:2a:02:d8:d0:ff:5b:58:29:4a:24:e3:3c:b1:41:
         32:35:32:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:38 2025 by rpki-client