Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/678ba640-5fe0-3d8e-9204-0700238b6763.roa
File:                     678ba640-5fe0-3d8e-9204-0700238b6763.roa (raw, json)
Hash identifier:          f5g5jWGEhk7u3Pnqq2Z5d/eJRi88sxXbekV5ZbrQ9sY=
Subject key identifier:   BB:D9:02:95:68:86:35:EB:44:9E:99:B3:25:B7:D6:3F:AD:F6:87:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F5868E41C3CFF7FBAD5E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/678ba640-5fe0-3d8e-9204-0700238b6763.roa
Signing time:             Thu 23 Jan 2025 13:38:21 +0000
ROA not before:           Thu 23 Jan 2025 13:38:21 +0000
ROA not after:            Wed 23 Apr 2025 12:38:21 +0000
asID:                     396550
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:86:8e:41:c3:cf:f7:fb:ad:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:21 2025 GMT
            Not After : Apr 23 12:38:21 2025 GMT
        Subject: CN=8ce422d9-7dd3-4be1-8af2-3f0138c0e541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:39:a7:7b:fb:19:03:c9:79:d2:b1:0a:f7:
                    90:e8:4e:08:ae:ee:de:53:48:b7:30:98:23:7c:df:
                    a0:25:db:d2:6e:f4:4f:8d:5b:80:46:65:a8:59:5c:
                    34:0e:99:02:56:0c:78:70:e5:be:66:e2:da:8e:e5:
                    34:a0:6a:3e:ec:0b:5a:62:02:52:4f:f6:f0:36:1a:
                    0e:cb:0c:2a:8c:71:c4:b5:73:53:d4:4d:e1:c7:ad:
                    55:19:1e:d7:17:fa:c4:ab:0d:30:3c:cd:dd:56:00:
                    8e:be:b2:47:54:80:c2:8e:a8:a1:a8:22:e1:ea:83:
                    8c:20:b8:b3:4c:97:00:20:1d:fd:09:b2:6b:c3:cb:
                    9f:7d:26:4b:ee:bb:de:75:01:82:f4:64:9e:64:6b:
                    60:0c:12:1a:c2:48:6d:67:14:31:aa:f6:bb:94:2f:
                    ba:a5:44:a5:9a:a9:84:f6:fb:f8:59:e9:72:c7:0b:
                    bb:a1:5f:4f:62:7a:be:ee:bb:25:a6:d5:2e:e4:e5:
                    f7:9f:ec:2e:b9:5e:73:a4:1e:ba:36:ea:2a:41:e9:
                    ae:e2:15:2f:b3:2d:70:2d:f1:0e:33:2c:e2:c6:79:
                    44:fc:c4:d3:9d:b6:bd:86:d8:cd:f5:11:b0:d3:3c:
                    12:11:7f:1d:27:e3:e0:cd:d8:ce:23:5a:9f:c6:e7:
                    77:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:02:95:68:86:35:EB:44:9E:99:B3:25:B7:D6:3F:AD:F6:87:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/678ba640-5fe0-3d8e-9204-0700238b6763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:5a:50:db:da:8b:c0:ca:50:0a:07:cf:38:5e:84:97:c3:
         74:1b:be:b7:57:b9:e4:fb:77:0f:d8:4f:f0:12:d0:ae:ac:8c:
         ad:78:b3:c5:dd:18:bc:b7:cd:64:c7:42:72:d2:f1:bf:a9:23:
         55:1a:8d:18:9a:d7:22:0f:a2:10:1e:c6:4a:1c:2c:23:5d:a8:
         01:e9:60:5a:7d:4b:a1:db:e8:44:f2:22:0e:55:82:d5:84:08:
         ce:cc:86:ef:a5:42:4c:b2:a1:da:99:ff:e9:87:9a:f6:9a:53:
         fe:39:c6:d8:7a:74:0f:b4:9f:2e:0e:52:10:26:17:c7:42:90:
         c4:75:f6:0b:02:be:b5:68:6d:8f:bf:07:fd:77:a0:e2:6f:73:
         4c:ef:70:b4:48:80:8c:fb:64:58:e8:9d:b6:e8:1d:42:82:db:
         21:d9:26:f3:17:cf:95:cc:96:32:3a:33:b3:b1:69:f3:09:be:
         07:85:f4:94:1e:9b:25:41:f6:e0:e9:2c:2c:2b:c7:15:20:0c:
         cf:88:7b:09:7d:b4:39:a8:4d:08:13:2c:18:2e:bc:cc:ff:08:
         15:f9:c8:0a:61:dc:e7:f8:03:bd:2c:9a:26:94:11:a7:6f:69:
         81:50:f7:b3:01:bf:e1:6b:92:3e:54:d5:02:8d:a0:af:3a:14:
         f6:00:32:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:11 2025 by rpki-client