Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58a0b046-8be9-3fe9-af04-50e1a958031d.roa
File:                     58a0b046-8be9-3fe9-af04-50e1a958031d.roa (raw, json)
Hash identifier:          JoVY9c9msS90ZcSFCUuapuwxbzXYV6dXUFU1F6i5hGM=
Subject key identifier:   1C:84:DE:49:87:1F:68:D2:22:7E:FB:C5:EF:A5:FF:7B:64:82:18:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183BC871E2769B5DD1904C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58a0b046-8be9-3fe9-af04-50e1a958031d.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396602
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:bc:87:1e:27:69:b5:dd:19:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=eba1a3b8-cfc4-4a35-a957-075695e7eb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:97:c5:e9:93:5f:25:a0:2c:a2:a2:d6:0d:
                    8a:f7:db:2b:12:94:83:f0:ca:d5:c5:14:6d:22:d3:
                    c7:98:99:b8:9a:fa:27:64:49:43:04:4a:2a:e0:a7:
                    f1:d8:a2:5f:01:42:eb:61:9e:ef:41:b0:7d:e6:d5:
                    c9:1d:2b:be:2d:08:c4:f6:3e:38:c5:e4:68:be:1e:
                    e2:92:7e:65:ee:86:9d:cb:47:ce:d6:fd:f9:7a:15:
                    5f:68:f2:5f:c7:ba:19:57:af:0a:86:09:d1:36:66:
                    eb:c6:b1:86:0c:d4:75:2f:a1:0a:2c:eb:49:94:9c:
                    53:ce:44:9c:2e:55:fb:d9:50:79:87:25:1c:bb:59:
                    64:db:95:4d:0c:23:3d:49:b1:8e:b5:c8:2a:19:c2:
                    ed:95:50:bb:c9:70:05:75:f9:bb:6a:32:9b:8a:d0:
                    c5:be:74:8c:d8:4c:a5:49:1f:a9:b1:d8:86:41:a2:
                    70:a4:92:e0:6b:d5:73:95:42:30:0f:28:18:0f:08:
                    7b:35:d5:12:0c:99:5f:1a:46:a2:c7:92:fa:74:9c:
                    5d:14:bd:a8:24:68:e1:77:f7:14:b5:31:47:26:ea:
                    80:8a:2c:59:44:08:33:b5:e0:47:2a:d4:98:0a:63:
                    37:5d:8e:69:c0:7e:01:34:5c:71:0d:13:08:21:70:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:84:DE:49:87:1F:68:D2:22:7E:FB:C5:EF:A5:FF:7B:64:82:18:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58a0b046-8be9-3fe9-af04-50e1a958031d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ff:5f:96:6e:21:ae:4b:19:e9:6d:62:1d:88:c3:a6:54:cd:
         14:ef:92:b2:c3:fc:e9:06:4c:bb:83:46:25:38:62:fb:76:87:
         51:86:53:e5:98:7f:61:f0:0b:bc:7e:db:d7:39:f2:8e:70:f8:
         12:01:16:1b:16:20:49:5d:9d:f1:08:d6:0c:07:5d:08:f7:bd:
         f1:8f:d5:36:52:ed:57:08:8d:75:be:5f:f7:32:47:f9:45:2e:
         b5:2e:3b:59:6c:ce:b0:51:3c:65:2f:4e:7d:70:b0:11:e8:87:
         29:c4:29:c9:f7:3a:99:7c:83:8b:da:b4:2e:6d:5e:e7:2b:63:
         42:25:e9:7a:21:89:f1:92:bf:5a:b6:49:3b:70:c0:1e:56:01:
         7d:0f:bf:11:f4:ce:64:1f:2d:d6:0d:ef:78:7b:eb:a0:14:91:
         25:6d:73:8f:39:02:80:ba:de:b2:15:c2:7f:8f:c4:e5:90:c6:
         3d:21:a7:cf:91:21:7b:2d:42:a9:fa:03:15:fa:f9:36:b4:aa:
         99:af:7d:d0:cd:dd:72:bd:cd:6d:ec:33:ad:25:a2:05:b5:44:
         b0:16:07:60:28:21:c4:fb:85:47:6f:0e:c1:b4:a2:45:87:66:
         53:59:92:74:41:2c:92:0e:58:77:5b:66:f9:ab:61:ec:3c:72:
         94:bf:08:fd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkhg7yHHidptd0ZBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZWJhMWEzYjgtY2ZjNC00YTM1LWE5NTctMDc1Njk1ZTdlYjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkh+XxemTXyWgLKKi1g2K99srEpSD8MrVxRRt
ItPHmJm4mvonZElDBEoq4Kfx2KJfAULrYZ7vQbB95tXJHSu+LQjE9j44xeRovh7i
kn5l7oady0fO1v35ehVfaPJfx7oZV68KhgnRNmbrxrGGDNR1L6EKLOtJlJxTzkSc
LlX72VB5hyUcu1lk25VNDCM9SbGOtcgqGcLtlVC7yXAFdfm7ajKbitDFvnSM2Eyl
SR+psdiGQaJwpJLga9VzlUIwDygYDwh7NdUSDJlfGkaix5L6dJxdFL2oJGjhd/cU
tTFHJuqAiixZRAgzteBHKtSYCmM3XY5pwH4BNFxxDRMIIXBAqQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFByE3kmHH2jSIn77xe+l/3tkghgLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThhMGIwNDYtOGJlOS0z
ZmU5LWFmMDQtNTBlMWE5NTgwMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAR/1+WbiGuSxnpbWIdiMOmVM0U75Kyw/zpBky7
g0YlOGL7dodRhlPlmH9h8Au8ftvXOfKOcPgSARYbFiBJXZ3xCNYMB10I973xj9U2
Uu1XCI11vl/3Mkf5RS61LjtZbM6wUTxlL059cLAR6IcpxCnJ9zqZfIOL2rQubV7n
K2NCJel6IYnxkr9atkk7cMAeVgF9D78R9M5kHy3WDe94e+ugFJElbXOPOQKAut6y
FcJ/j8TlkMY9IafPkSF7LUKp+gMV+vk2tKqZr33Qzd1yvc1t7DOtJaIFtUSwFgdg
KCHE+4VHbw7BtKJFh2ZTWZJ0QSySDlh3W2b5q2HsPHKUvwj9
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:17 2025 by rpki-client