Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa
File:                     32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa (raw, json)
Hash identifier:          GJreq+XBz1QLCqbDzEX/iol0fjE+wbEUEEMfcNLzFUM=
Subject key identifier:   28:07:DC:53:CB:02:74:9A:A6:BB:E3:93:A0:F1:D5:7F:D1:38:37:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849244E93420CE7C53D19DBDC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     36628
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:93:42:0c:e7:c5:3d:19:db:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=a0fbc658-bfce-49a0-9632-d9abc4c31632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:35:06:21:16:d5:0b:41:35:59:67:72:f4:
                    61:35:13:0a:b3:18:9a:33:71:3d:cd:08:76:59:ab:
                    c1:7f:84:e1:9a:5e:38:c1:a6:6b:b6:8f:ac:86:1c:
                    bd:98:cb:41:af:b9:74:8d:9a:ed:3a:c6:24:1b:e8:
                    04:df:25:92:db:9d:33:42:1c:a6:f9:31:81:a6:c5:
                    90:d7:c2:fd:9b:33:f0:cc:fe:57:6d:de:81:43:90:
                    47:c6:15:a1:64:5e:33:3f:d2:3c:47:2a:96:22:03:
                    cf:6d:d8:2f:51:51:34:3c:b9:9b:0b:18:de:29:66:
                    05:b1:ec:35:28:23:9a:1e:df:41:aa:ef:f7:a0:21:
                    3c:4a:83:7a:80:cc:71:6e:db:f8:61:9e:f5:8b:43:
                    da:7d:82:c1:66:09:c9:56:10:1e:32:b9:16:9a:dd:
                    4a:0d:74:54:68:74:ee:74:09:a5:8f:4e:e0:ac:d5:
                    52:e2:84:5e:a1:3e:35:fe:29:c3:b9:c2:a3:f4:f4:
                    68:32:02:cd:34:6a:66:70:8b:a1:11:22:8c:63:84:
                    24:2a:8d:cc:48:ed:41:51:38:b0:3f:1f:c4:30:23:
                    2f:f1:f4:87:7d:db:ef:fc:52:96:bc:0b:01:43:92:
                    5c:40:e5:ed:de:88:72:53:55:80:32:e2:b6:5d:38:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:07:DC:53:CB:02:74:9A:A6:BB:E3:93:A0:F1:D5:7F:D1:38:37:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32e3d2a9-cb29-3373-bdbe-4419c68fa5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:7c:42:93:c3:c7:21:55:b0:8b:ba:ec:1f:c9:e2:50:31:
         2d:15:5a:e0:72:e2:db:a0:4a:dc:44:34:19:e1:aa:e2:0f:4e:
         0f:d0:47:37:d1:0a:b9:db:4a:c1:31:83:37:cb:92:17:49:63:
         09:f0:5a:11:e4:3c:d0:ae:d3:d6:0b:fa:d4:5d:98:44:ad:08:
         d3:b8:1b:77:2b:5a:a1:d5:36:4f:46:8c:ac:42:d8:9f:e0:b7:
         62:86:1d:15:59:33:be:8b:2f:51:c9:6e:3b:51:56:50:8b:ff:
         34:ac:1f:c3:50:d2:ea:d8:f1:18:fe:ae:9e:68:28:bd:b6:89:
         dd:98:08:7b:e5:e7:d1:ca:fd:bd:10:e3:b9:40:62:cc:06:c4:
         ff:02:ca:48:4b:a3:f3:1c:93:64:51:41:59:6a:2e:5d:a1:f4:
         24:50:6f:a2:fd:d8:77:29:8b:f8:8d:a4:4f:6f:c6:40:af:6c:
         f8:ec:6a:88:7f:4f:59:ff:72:a2:10:cc:17:97:2c:71:b7:99:
         55:fd:45:7c:c3:b2:9e:de:1e:7d:c2:5e:96:25:3b:5f:1b:fc:
         43:3d:76:4d:d2:cd:2c:06:2e:18:0c:52:fc:25:21:db:0e:fd:
         ed:ea:c8:a2:2d:18:87:e8:14:7a:34:e3:4d:49:87:81:bb:02:
         d1:e1:79:ad
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkkTpNCDOfFPRnb3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
YTBmYmM2NTgtYmZjZS00OWEwLTk2MzItZDlhYmM0YzMxNjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyf01BiEW1QtBNVlncvRhNRMKsxiaM3E9zQh2
WavBf4Thml44waZrto+shhy9mMtBr7l0jZrtOsYkG+gE3yWS250zQhym+TGBpsWQ
18L9mzPwzP5Xbd6BQ5BHxhWhZF4zP9I8RyqWIgPPbdgvUVE0PLmbCxjeKWYFsew1
KCOaHt9Bqu/3oCE8SoN6gMxxbtv4YZ71i0PafYLBZgnJVhAeMrkWmt1KDXRUaHTu
dAmlj07grNVS4oReoT41/inDucKj9PRoMgLNNGpmcIuhESKMY4QkKo3MSO1BUTiw
Px/EMCMv8fSHfdvv/FKWvAsBQ5JcQOXt3ohyU1WAMuK2XTj4nQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCgH3FPLAnSaprvjk6Dx1X/RODfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJlM2QyYTktY2IyOS0z
MzczLWJkYmUtNDQxOWM2OGZhNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBJ0HxCk8PHIVWwi7rsH8niUDEtFVrgcuLboErc
RDQZ4ariD04P0Ec30Qq520rBMYM3y5IXSWMJ8FoR5DzQrtPWC/rUXZhErQjTuBt3
K1qh1TZPRoysQtif4Ldihh0VWTO+iy9RyW47UVZQi/80rB/DUNLq2PEY/q6eaCi9
tondmAh75efRyv29EOO5QGLMBsT/AspIS6PzHJNkUUFZai5dofQkUG+i/dh3KYv4
jaRPb8ZAr2z47GqIf09Z/3KiEMwXlyxxt5lV/UV8w7Ke3h59wl6WJTtfG/xDPXZN
0s0sBi4YDFL8JSHbDv3t6siiLRiH6BR6NONNSYeBuwLR4Xmt
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:00 2025 by rpki-client