Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52cccbfc-58fb-3d56-82f4-4586085c9912.roa
File:                     52cccbfc-58fb-3d56-82f4-4586085c9912.roa (raw, json)
Hash identifier:          w33jPmh78aafRsAevdAeZZjgXCqsUwFictXMVH/OwAA=
Subject key identifier:   57:20:CB:19:E2:7E:DA:89:07:C8:C6:57:FA:86:D7:25:05:66:24:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E2ED03ECD145150FC2A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52cccbfc-58fb-3d56-82f4-4586085c9912.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397201
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e2:ed:03:ec:d1:45:15:0f:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=17ef1c7b-deb8-45b9-89aa-2041241de5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:56:21:7c:9a:62:3d:97:94:41:5d:a1:98:
                    99:34:f6:0d:c4:1a:35:98:02:f0:ca:d3:73:43:36:
                    68:79:7a:eb:33:7b:04:60:fc:2d:f1:ea:a4:9a:89:
                    41:35:18:96:fa:24:df:c4:84:bd:43:8f:0b:03:df:
                    6d:dd:75:f0:82:1b:aa:db:ff:20:f2:87:c8:56:ad:
                    e1:55:a3:5a:e4:76:5c:87:56:44:fa:7e:b4:6e:80:
                    c9:10:88:f5:ca:e4:11:56:74:51:b7:23:30:e4:f2:
                    83:81:41:73:e8:51:45:c5:16:e7:f3:e6:2e:c8:e0:
                    d9:f5:4b:6f:96:c5:4f:13:e3:58:72:1f:e7:7b:cc:
                    1c:b6:6f:c6:22:d2:b4:a7:d4:66:8b:b2:b0:9a:ef:
                    6c:e6:aa:67:91:b5:5e:d4:7e:bb:2a:ac:65:8c:31:
                    9c:52:53:c8:3d:62:7f:d7:13:35:e9:2e:bd:3a:be:
                    9e:97:57:f9:c7:7a:a7:da:f2:3c:d4:a1:f8:6e:d2:
                    f7:fa:b2:0d:3a:ad:3a:39:fb:ba:5c:51:dd:40:6a:
                    81:53:aa:f0:6c:14:e2:4f:43:9d:6f:bf:4a:96:91:
                    b6:74:3a:a9:27:86:d3:3e:8f:b5:7b:6b:5c:7e:e1:
                    71:d7:44:b6:cf:02:8f:70:da:b6:c7:e1:7a:43:02:
                    b4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:CB:19:E2:7E:DA:89:07:C8:C6:57:FA:86:D7:25:05:66:24:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/52cccbfc-58fb-3d56-82f4-4586085c9912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:af:05:c2:45:ec:b6:98:1c:bd:73:c2:6e:50:00:c0:fe:
         a1:8b:a1:16:e8:be:41:f4:b4:91:bc:5b:e0:09:f5:4a:18:32:
         db:f4:66:d1:b3:5e:d9:43:f3:68:36:af:ad:df:b6:cf:e0:10:
         0d:c7:74:55:f4:d8:ed:04:13:af:1e:61:31:b2:e8:05:bb:9e:
         43:54:dd:72:cb:00:48:37:91:12:93:9c:46:4d:90:4e:92:60:
         70:16:fa:e5:21:84:59:bb:c7:fc:cf:f8:98:55:41:46:3b:f9:
         18:02:95:c5:dc:47:38:b2:86:77:5e:27:15:c6:b1:86:72:de:
         e8:7e:59:5d:8c:47:ab:0f:c5:40:85:4e:ba:78:55:05:90:a5:
         36:16:af:f5:15:ce:29:a1:b8:4d:64:4b:e6:5c:4f:05:90:7c:
         e5:ad:e1:73:9b:ca:b6:d6:e3:39:63:2b:ed:d3:d9:3d:26:1f:
         d0:64:5b:05:0a:09:5e:ef:7e:ff:f3:f2:bf:6a:d3:02:6c:21:
         40:b3:88:a0:91:ad:87:e1:ce:ff:77:d1:9f:6a:64:77:0e:a9:
         cd:d3:7a:54:fb:5d:3a:18:5b:0c:b4:ad:a2:cd:9a:a9:8d:db:
         09:5b:4a:4d:88:3e:a8:a5:1f:5e:f1:c7:46:9f:5c:f9:c7:9c:
         b8:f9:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:21 2025 by rpki-client