Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6237ea8d-42a3-3d84-a418-1a0e80281c39.roa
File:                     6237ea8d-42a3-3d84-a418-1a0e80281c39.roa (raw, json)
Hash identifier:          m7oXWFMKqG4uqnl/2VBQtaUmGa5MCB0hBy8GOa+bRlg=
Subject key identifier:   AB:27:54:9C:D1:1A:C6:F1:7B:72:C7:6E:96:EF:66:3E:BA:A6:29:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CB737874E061D1AE4280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6237ea8d-42a3-3d84-a418-1a0e80281c39.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     36621
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:cb:73:78:74:e0:61:d1:ae:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=2de3f318-8f02-4859-9d0e-255e7d72d693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e0:c1:3a:04:3f:a3:66:82:62:d2:81:eb:c1:
                    00:41:32:76:ab:ff:07:ca:d0:b1:12:95:81:dd:f9:
                    3f:7b:b1:3d:7c:a5:eb:42:4a:0a:0e:47:e5:db:e6:
                    ae:11:26:2b:78:a4:75:2b:45:ea:24:5b:a7:99:69:
                    73:bf:5f:bc:a0:43:10:6b:11:4b:72:8a:d4:c8:35:
                    8f:54:1c:fd:a4:89:3b:8e:fe:da:c2:28:76:56:16:
                    f8:0e:f2:4a:16:51:90:6e:ca:21:65:5e:30:3e:24:
                    52:40:9f:1c:ae:63:ec:2e:43:07:aa:9c:67:d1:90:
                    21:5d:f1:41:04:2f:fc:22:3b:8a:b5:ee:91:71:cf:
                    ac:01:5b:cb:14:c1:84:f5:eb:03:62:9a:77:f7:c7:
                    77:32:4a:58:68:74:ba:da:68:77:3f:89:aa:e6:f2:
                    af:0b:69:2f:65:64:ac:32:6f:b1:ed:9c:ea:24:ce:
                    1f:e7:c3:52:e6:e2:60:83:69:d6:80:1e:2c:28:f7:
                    48:6a:17:32:e0:85:35:2e:90:cc:89:08:d7:f4:fb:
                    f0:d7:02:86:39:38:40:16:a1:a7:ca:a1:28:82:10:
                    da:bd:fe:a8:a6:f4:e4:5c:fa:cd:00:cc:de:63:37:
                    88:a6:b6:17:b5:b3:33:9a:71:b9:40:0d:ed:9f:eb:
                    1b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:54:9C:D1:1A:C6:F1:7B:72:C7:6E:96:EF:66:3E:BA:A6:29:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6237ea8d-42a3-3d84-a418-1a0e80281c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:d7:db:f8:ee:02:1b:fe:fb:f4:8d:1e:72:b9:1e:10:67:92:
         c3:7d:d3:1b:46:b7:b4:96:4c:db:4f:eb:42:5f:be:0f:4e:30:
         21:cd:db:e3:c7:c0:ce:8c:37:bf:77:17:cd:a0:d3:35:47:d9:
         58:b4:7b:e8:f5:d4:cb:b4:1d:55:86:95:f5:be:a9:03:03:cb:
         4d:b6:a4:1e:1d:b1:06:67:ea:39:6e:d1:f6:a6:c6:29:8b:1c:
         2c:3b:6e:1e:7e:0b:12:e4:27:79:77:5e:9e:92:e4:8c:62:ba:
         63:55:ed:e1:5f:16:56:2f:35:4d:da:52:61:0d:75:37:fb:d0:
         51:ae:93:51:9f:ed:76:1a:1c:23:e1:e2:4e:4e:5c:06:18:ff:
         05:48:71:3d:09:1d:0c:49:d3:56:0b:59:b1:9b:be:1e:5b:bc:
         34:09:cd:f7:6e:7d:b5:61:06:be:ac:30:9d:23:ef:57:ff:f9:
         db:57:1b:a1:ca:c0:9a:fc:6e:29:88:cd:3d:22:d1:16:48:f8:
         47:fd:10:60:1a:91:2d:30:81:c8:98:d9:2b:04:4f:ad:f4:a7:
         91:71:ed:14:d1:3c:b6:08:14:bb:d3:f0:2f:13:36:5a:ca:7f:
         86:d8:2e:0c:67:ef:fc:c6:c6:57:02:46:81:fa:2a:58:2f:04:
         41:e7:32:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:31 2025 by rpki-client