Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64cbca0f-eebc-3aed-976e-dd22826fcb26.roa
File:                     64cbca0f-eebc-3aed-976e-dd22826fcb26.roa (raw, json)
Hash identifier:          N8c89INizW/nOlmYpwv6JxpyXAoHYtP17PQ+DmFRbYc=
Subject key identifier:   47:BB:ED:87:01:85:78:9B:90:16:D2:A7:73:3B:01:34:31:A1:58:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB7180B157DE7E8F91160
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64cbca0f-eebc-3aed-976e-dd22826fcb26.roa
Signing time:             Thu 16 Jan 2025 13:38:18 +0000
ROA not before:           Thu 16 Jan 2025 13:38:18 +0000
ROA not after:            Wed 16 Apr 2025 12:38:18 +0000
asID:                     396559
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b7:18:0b:15:7d:e7:e8:f9:11:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:18 2025 GMT
            Not After : Apr 16 12:38:18 2025 GMT
        Subject: CN=1b769922-a36c-473d-8188-4388fab4cc2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:96:cd:58:2a:e4:47:b1:bd:d8:eb:76:a8:
                    d9:52:0b:a3:98:c2:97:83:f1:9d:8c:5c:a2:b3:ec:
                    dd:1d:72:f3:31:05:cb:af:b6:cb:75:f6:4e:0d:6c:
                    ee:f7:66:53:0d:58:ad:3a:33:3a:33:a9:11:80:0f:
                    5f:e7:7d:01:2e:84:7d:be:d7:81:13:e3:44:4b:18:
                    cf:5f:46:12:8d:31:c4:dd:7f:ba:b4:8b:9d:82:6e:
                    cf:2a:dc:7c:01:2e:42:dd:bc:21:f2:4a:35:eb:7b:
                    37:1c:ec:e8:91:d7:57:a6:15:0d:4d:42:b6:79:68:
                    8f:cb:89:a0:bc:a6:09:3f:23:c5:d6:08:b8:1f:c7:
                    e9:b2:7f:5f:ad:23:f8:b4:6b:e5:94:d0:1f:3f:f8:
                    3b:b0:f2:d6:02:59:51:73:17:5f:f0:bb:ff:45:91:
                    7b:94:3b:55:8a:40:28:ba:7d:8b:6b:7d:bb:59:25:
                    77:5b:e1:88:40:fa:df:eb:2f:cb:80:1e:be:e5:3d:
                    db:9f:24:03:84:e1:75:f5:14:c5:91:f1:dc:db:ec:
                    2c:02:db:ea:6e:af:08:9e:d5:5c:e7:ae:35:ae:7f:
                    17:fd:26:cc:c4:15:d7:51:79:e0:d8:92:c6:77:b2:
                    a4:7a:cf:32:4e:fb:80:85:e2:28:08:2c:b7:f8:57:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BB:ED:87:01:85:78:9B:90:16:D2:A7:73:3B:01:34:31:A1:58:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64cbca0f-eebc-3aed-976e-dd22826fcb26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d9:f3:f1:0a:ed:b0:57:1f:93:d9:8e:e2:0a:90:05:bf:84:
         fd:38:b1:b8:5d:78:98:96:2f:ed:37:24:38:a7:83:5e:44:76:
         fa:02:e5:51:fb:ec:d9:84:7c:77:ab:69:d0:18:2c:73:4a:17:
         18:17:82:7e:87:77:e0:fd:ff:6b:aa:49:82:62:35:f5:60:87:
         5c:94:f7:ec:9d:13:b5:9e:39:60:f4:02:36:35:c1:30:95:22:
         e3:77:67:7e:53:e3:29:9f:26:58:8c:93:7f:11:23:6b:f2:6e:
         1a:e3:48:11:21:c7:fe:f5:dc:e2:9d:ac:e4:20:15:0c:2e:d1:
         51:41:48:5d:c7:c8:97:3f:88:bb:93:bd:a5:d8:1f:71:71:4c:
         1a:90:3e:28:c7:3a:b6:b9:67:bc:1b:36:dc:ce:76:ef:8e:1a:
         87:e4:1c:c6:25:f0:a3:0e:71:b6:f9:76:98:8a:0b:a8:9e:ea:
         4d:67:63:79:fe:a2:d3:3f:85:2e:9d:06:d5:7b:9a:ae:32:ab:
         74:26:f3:75:5d:25:12:9f:84:f8:96:40:0a:62:c7:46:6e:ae:
         ce:2b:d3:ad:b3:40:1e:6e:e2:e1:72:da:66:70:44:15:c3:47:
         03:26:a3:52:d3:23:65:f7:9f:fb:d3:ae:8a:3f:66:49:96:b5:
         cd:dd:dc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:13 2025 by rpki-client