Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa
File:                     284f6467-2199-3265-b43f-117ee3787a86.roa (raw, json)
Hash identifier:          lb5a0DYJ8skVw/c2hpf9hXrK0ODr0rMVqmHcVt9SsWg=
Subject key identifier:   7C:1E:B8:C1:E1:DB:C1:ED:AA:91:DC:19:CB:6C:EA:64:87:6B:EA:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584917DC15276F471EE119F59D7C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     396564
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:15:27:6f:47:1e:e1:19:f5:9d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=b5f493ec-6545-467d-9b9a-d4cda400aa6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:ba:41:4c:d7:d2:30:51:1b:d8:da:74:c2:
                    b9:4a:f2:eb:46:e6:3c:b7:fe:79:25:42:83:52:4d:
                    bc:e7:05:ba:7e:02:05:df:1c:84:1d:34:92:70:9e:
                    65:89:75:cd:22:d0:f5:42:94:ee:09:0c:07:2a:60:
                    91:47:30:4b:bc:7c:b1:fe:48:17:a1:cb:b3:b4:c4:
                    65:ea:34:92:c9:9e:02:11:37:19:b4:fd:9c:42:28:
                    d7:6d:5e:09:94:2e:ff:1c:23:e6:8c:55:75:bb:ed:
                    98:71:2a:57:1f:d1:e8:66:00:a7:fe:7c:c3:d2:35:
                    2d:44:70:de:1a:80:85:7d:b8:27:a2:8e:b9:fa:c5:
                    9e:57:b8:23:70:13:0b:b5:cc:da:ac:ab:eb:46:dc:
                    33:4b:f9:59:ce:a5:20:8e:5e:46:ef:5e:d9:6a:fb:
                    a7:b8:24:9e:09:fa:58:2e:01:26:64:ac:1e:f5:65:
                    9b:54:24:62:5b:d1:05:ea:58:e3:d3:4b:4c:aa:2c:
                    e2:b5:90:51:5f:61:ae:bd:0a:45:36:90:e7:1f:a4:
                    36:a0:c8:fc:c6:66:db:d6:86:ce:39:32:04:33:5b:
                    4a:f1:30:a4:76:d3:06:ed:10:19:ca:43:2d:94:ea:
                    90:b1:d9:39:2c:43:bb:ae:87:95:d1:7b:5f:ee:38:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1E:B8:C1:E1:DB:C1:ED:AA:91:DC:19:CB:6C:EA:64:87:6B:EA:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c0:88:d1:85:96:ca:df:f1:cb:1d:cf:97:11:ab:08:48:27:
         4b:1e:c1:41:de:59:21:43:6d:b3:bc:c6:e1:98:b3:ab:72:03:
         7f:da:04:1c:c2:94:22:d4:fe:06:38:cd:d5:2a:48:f2:c9:53:
         f3:07:fc:42:b7:76:4c:6f:e5:a2:72:c6:2e:83:8f:16:25:db:
         f3:cb:d6:b4:57:88:f1:f9:06:fe:2e:e3:df:82:06:87:02:d8:
         8a:07:0d:fe:99:0e:09:1b:0a:e8:a7:a2:e2:ce:67:6d:b2:0d:
         7d:c2:6a:68:36:34:0b:53:66:27:39:7b:e9:b2:7b:e4:28:18:
         47:83:39:e7:18:33:d1:27:06:80:64:82:00:73:53:b6:99:b3:
         80:41:5c:55:65:75:21:33:f1:a9:da:b1:8b:cf:06:c9:b0:1b:
         17:1b:56:55:68:54:cc:a8:12:16:c8:a5:9c:1f:6e:75:77:f1:
         00:c6:85:fc:b6:67:09:0d:cf:cb:18:29:a0:9c:77:b8:58:a4:
         35:35:42:7b:86:37:fc:85:8a:39:79:8b:5c:47:b1:2b:5e:9d:
         a8:85:00:28:eb:9a:f9:80:51:68:32:2c:cd:42:60:99:79:ea:
         27:66:d5:0c:1a:55:e4:2b:e7:17:9a:04:59:d6:1d:c9:b7:03:
         a0:05:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:38 2025 by rpki-client