Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69e2a6e0-6fd3-3a4a-b866-dffb226a92dc.roa
File:                     69e2a6e0-6fd3-3a4a-b866-dffb226a92dc.roa (raw, json)
Hash identifier:          dj1zGEDpluLHMraqk0sjSjYLXXsC8eFVWVAMX41BIV8=
Subject key identifier:   F8:53:D3:60:55:5E:EA:75:E7:AE:AF:D2:7C:26:47:27:0A:8E:C4:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DB7259E6D17A7482FA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69e2a6e0-6fd3-3a4a-b866-dffb226a92dc.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396541
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:db:72:59:e6:d1:7a:74:82:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=6df986b4-1ada-4666-8cbc-728daae747ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:e9:9c:1d:b9:bb:43:df:26:81:23:3a:54:
                    41:e1:d8:ef:11:51:15:44:5e:7f:d2:15:23:1f:49:
                    ee:30:26:56:1c:b4:c0:d4:3f:46:cb:33:ed:fe:d6:
                    43:a5:a2:ef:db:42:f1:01:fd:2f:23:d9:5b:dd:6f:
                    fd:fb:55:8d:d3:0b:45:e3:e0:04:01:76:65:e3:33:
                    90:09:ca:bd:b7:a2:f0:0f:4d:54:47:f3:d9:e1:b9:
                    9b:e5:4a:c0:75:72:b1:68:86:55:65:2f:cb:84:66:
                    18:e8:bb:af:a0:56:a9:9d:76:cd:13:ab:00:3b:66:
                    20:b8:f7:c7:6f:e9:28:01:68:f8:99:36:41:67:7a:
                    c1:3b:2c:49:b2:c9:8f:e9:dc:ad:fe:fd:00:be:30:
                    be:42:13:fe:0c:e2:ab:21:42:4d:a6:8c:62:32:a5:
                    19:78:95:91:98:b8:c3:fa:c8:ab:10:b0:05:7f:8c:
                    5e:28:a2:45:bc:c3:59:b5:53:85:c9:2c:70:a1:2b:
                    96:5d:0d:c6:9d:94:61:d7:19:2d:e6:0b:6a:48:b4:
                    6f:31:c9:00:d2:69:69:fe:e9:59:80:82:c7:5a:38:
                    23:d7:7d:58:1d:8a:38:f4:97:d5:4e:cb:75:9f:8b:
                    0b:4d:78:60:94:4d:ba:71:40:8b:d1:f6:6c:fc:46:
                    0b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:D3:60:55:5E:EA:75:E7:AE:AF:D2:7C:26:47:27:0A:8E:C4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69e2a6e0-6fd3-3a4a-b866-dffb226a92dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:ad:f4:13:ef:4b:e4:2c:4d:0c:eb:5e:e3:bb:65:0a:0d:
         49:70:2f:38:6f:23:c3:8b:cb:50:34:fd:cd:ec:e2:a3:ff:12:
         e4:ca:60:08:f5:c6:0e:1b:97:48:05:e1:ea:9a:4b:91:a6:52:
         ff:d8:f1:c5:2e:a2:b5:5b:a1:f8:1c:88:8c:d9:33:2e:8c:b7:
         ae:12:cc:90:cb:f1:e8:58:41:7b:ec:aa:b1:9a:93:82:84:09:
         df:0e:c1:ec:23:a7:34:9a:b8:fb:d8:58:06:94:7b:52:f5:66:
         b2:98:57:56:04:c7:e9:62:55:ce:25:47:d9:1d:77:12:12:f3:
         87:42:83:cd:07:9b:f0:25:ad:d7:28:dd:c9:c1:31:38:a3:e6:
         84:7c:db:55:81:81:3b:53:eb:5e:be:97:5f:b7:db:ba:7f:62:
         f9:f3:7f:41:73:51:1d:df:9a:6f:e7:df:fe:c1:40:5e:13:eb:
         c3:5e:07:90:58:32:94:5a:22:b7:cd:3f:b1:06:71:2d:26:97:
         5c:3d:0f:60:8b:8f:34:2a:dd:ee:c8:a6:0a:22:6a:49:92:e4:
         58:a6:cc:08:e6:16:12:7e:a4:6b:be:48:1f:33:88:c8:48:56:
         4f:31:fa:84:7a:f4:10:d2:3b:ba:94:d1:45:bd:7c:27:a9:2b:
         42:d5:d1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:23 2025 by rpki-client