Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b20b378-8e7c-3761-ac07-0190d72e73ea.roa
File:                     7b20b378-8e7c-3761-ac07-0190d72e73ea.roa (raw, json)
Hash identifier:          V5fy8y2Xp/MLHpql2adNdGStoVBGj3gV5EOnaaPc/Bw=
Subject key identifier:   CE:9F:02:29:AA:97:43:5B:F4:01:EA:E2:40:A3:C1:67:41:BD:F7:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584917DC1863CA387D39B1AED6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b20b378-8e7c-3761-ac07-0190d72e73ea.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     396588
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:18:63:ca:38:7d:39:b1:ae:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=94961c51-42fd-495b-8924-3b1e70dc8740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b5:50:e7:34:38:06:bb:ad:19:79:5d:9d:ba:
                    0b:f3:c9:d6:63:36:1a:cb:b7:fb:c4:d5:57:69:1f:
                    0f:1c:dd:da:8a:f0:12:17:eb:8a:66:a5:d1:fd:3b:
                    71:06:74:b2:e6:a2:52:83:c9:4e:e3:47:b3:80:d3:
                    f0:65:df:d4:bc:7d:5c:64:00:55:ac:0a:bc:0a:f3:
                    88:c7:cb:be:f4:8b:66:5a:88:f7:62:8a:d6:9c:f5:
                    73:c6:62:c8:33:55:b0:82:17:31:ec:d6:4d:69:12:
                    d1:3f:8a:ea:7c:06:4a:3e:09:13:5f:ae:5f:fb:28:
                    3e:cb:3c:5a:80:06:92:48:b5:b6:82:3e:50:79:e3:
                    90:87:0e:f2:d2:76:2a:59:ad:c3:e1:87:82:08:82:
                    83:48:3b:96:49:02:c8:f2:5a:53:4c:c1:31:47:c7:
                    ea:5a:1d:b8:41:8e:3a:b5:2f:a3:ca:f2:a5:f1:ab:
                    26:ad:ac:cd:7c:7c:7a:f9:a8:d6:4d:db:7d:3e:56:
                    ff:80:92:00:a1:8c:8e:30:50:83:fc:1f:93:f8:74:
                    a6:2f:55:b7:84:2f:fa:ce:f4:13:c1:6f:dc:59:8e:
                    17:e4:7a:cf:4c:21:5d:65:f3:67:d4:6f:d1:84:81:
                    0c:22:2e:65:15:34:17:73:f6:70:c5:71:50:de:da:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9F:02:29:AA:97:43:5B:F4:01:EA:E2:40:A3:C1:67:41:BD:F7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b20b378-8e7c-3761-ac07-0190d72e73ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:d8:e5:90:00:d9:f9:12:a1:d9:f3:47:3d:fb:58:18:0b:f8:
         12:c3:f3:bb:f1:33:8f:b6:3f:12:35:80:54:ac:92:1c:4c:56:
         9e:ad:b7:d7:e5:bf:7b:d2:26:78:f7:69:00:e1:ae:9f:21:15:
         13:55:09:3e:47:68:f0:38:5a:a1:4b:bb:2f:23:18:cf:3a:46:
         48:2e:15:e6:d3:2f:6b:0a:d4:9f:4f:ea:e8:ca:de:8d:93:af:
         9e:5b:f2:38:92:b1:e8:71:6b:a2:c3:58:3f:f3:c1:cc:c6:36:
         2d:74:4c:95:5e:c5:c1:91:0e:09:ef:bc:c7:e3:9b:87:d6:38:
         59:e4:26:06:5a:73:9a:ad:3e:27:8a:66:fe:22:05:4c:db:bf:
         eb:48:68:39:86:de:de:7a:bc:10:b5:a6:45:24:7a:c0:a9:28:
         0d:4e:ee:75:7a:db:e4:4e:7a:c5:7f:20:ef:92:f0:de:f1:b2:
         ba:f7:1b:20:a4:73:9c:a5:b1:46:7f:27:a4:8f:a7:0b:fd:e7:
         71:7f:9a:3f:b6:59:ae:0c:be:32:70:00:5e:b8:ad:3c:80:cd:
         09:80:da:12:bc:f4:3b:13:63:15:e1:13:78:6b:f5:ee:33:b7:
         69:e5:95:b7:ee:51:e0:8f:53:09:8f:0c:d8:bb:13:24:85:ca:
         e7:58:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:02 2025 by rpki-client