Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
File:                     8e64b235-2f2a-3bdc-b562-b595318e343a.roa (raw, json)
Hash identifier:          WW7VsqImxUzs4IiTNH/clq9hY40HpW058Iu17Peuxl8=
Subject key identifier:   DF:14:50:36:C0:CD:AA:1C:8D:45:8B:9C:9F:6F:86:6C:6C:A5:8E:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584917DC1A11A6D09E130CFBDEB8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     397203
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:1a:11:a6:d0:9e:13:0c:fb:de:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=30dfc089-f934-44ab-b170-98613924b2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fb:d2:fc:8e:68:70:bf:a7:f3:e7:3b:9d:01:
                    53:74:ef:49:c0:16:8c:1f:5f:f2:8f:33:79:1b:c4:
                    8a:f4:3f:03:20:7b:ee:63:86:dc:9d:e1:78:ae:06:
                    95:96:17:18:35:e1:8b:5c:76:80:fb:e3:bc:3a:7c:
                    0f:65:b9:4f:2f:a2:29:4b:9a:9a:46:50:9d:ef:e6:
                    31:54:95:c0:2e:5e:40:ec:17:1c:51:ac:df:e1:95:
                    be:1c:11:f7:11:ff:e8:1a:70:74:0a:b1:e1:4c:a1:
                    ef:e6:7b:4e:c2:9e:04:83:66:1e:81:ba:a3:2b:ae:
                    07:4b:01:72:93:0a:2e:2c:e6:4e:63:ba:d6:cb:88:
                    53:59:de:d4:3e:f5:c8:34:2a:8c:0d:4c:a6:6b:2a:
                    13:53:6e:74:5c:a4:b6:fe:f3:5d:89:36:4f:43:83:
                    a5:bb:ec:5c:e6:63:bf:be:0c:b5:ea:de:08:63:9c:
                    72:f2:88:80:5a:e7:b2:ef:be:bc:12:03:0d:89:71:
                    77:e6:ca:1c:ad:84:5a:62:b5:f7:b5:a3:81:21:ec:
                    8d:19:3a:9d:49:33:36:34:d4:c2:8e:e4:6f:63:eb:
                    ad:ce:ac:8b:f4:0f:4b:f5:ae:78:cd:10:01:4e:33:
                    1a:cb:2c:87:2e:f1:52:8d:9e:e3:7f:1f:26:2d:d9:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:14:50:36:C0:CD:AA:1C:8D:45:8B:9C:9F:6F:86:6C:6C:A5:8E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e64b235-2f2a-3bdc-b562-b595318e343a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c7:da:3e:36:b6:1d:91:bd:b7:11:22:4f:ca:cd:a5:da:f2:
         20:0f:aa:d1:29:34:85:ac:9d:1c:bf:f8:4f:14:bb:97:e5:51:
         ea:b1:01:a5:c7:72:eb:5f:9f:95:60:2a:31:db:26:8c:54:db:
         68:10:2a:2b:4c:08:18:f2:38:37:e7:d5:39:ca:41:e9:35:d6:
         43:c8:ff:44:9a:54:af:aa:86:7c:71:36:39:c1:21:1f:61:25:
         8f:a7:56:cd:69:ed:7f:c4:ef:eb:d4:55:16:0f:17:1f:a0:8c:
         da:b9:32:21:e0:d1:60:a8:4d:d9:f3:07:56:61:31:56:71:b2:
         13:c2:9a:d2:fe:fe:2d:45:dc:ab:1f:47:84:06:a4:99:14:66:
         ef:f2:cb:15:e3:7b:18:bb:f9:f6:87:57:b8:06:79:40:35:2c:
         36:cc:fd:24:c7:72:5d:ef:58:af:33:44:a8:ef:d3:cb:b3:60:
         00:84:db:b7:47:53:9b:bd:03:a8:92:05:32:b6:35:06:44:df:
         df:1f:bd:1a:81:f3:59:af:ac:19:ba:be:1b:ba:be:31:b0:d9:
         7d:97:78:71:99:59:15:4c:9c:7e:b8:ad:38:1c:5f:9b:55:54:
         12:b5:95:a8:ae:46:c5:1e:44:18:10:1b:48:af:c9:bd:c8:42:
         d2:61:68:28
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkX3BoRptCeEwz73rgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
MzBkZmMwODktZjkzNC00NGFiLWIxNzAtOTg2MTM5MjRiMmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPvS/I5ocL+n8+c7nQFTdO9JwBaMH1/yjzN5
G8SK9D8DIHvuY4bcneF4rgaVlhcYNeGLXHaA++O8OnwPZblPL6IpS5qaRlCd7+Yx
VJXALl5A7BccUazf4ZW+HBH3Ef/oGnB0CrHhTKHv5ntOwp4Eg2YegbqjK64HSwFy
kwouLOZOY7rWy4hTWd7UPvXINCqMDUymayoTU250XKS2/vNdiTZPQ4Olu+xc5mO/
vgy16t4IY5xy8oiAWuey7768EgMNiXF35socrYRaYrX3taOBIeyNGTqdSTM2NNTC
juRvY+utzqyL9A9L9a54zRABTjMayyyHLvFSjZ7jfx8mLdkPOQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFN8UUDbAzaocjUWLnJ9vhmxspY5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGU2NGIyMzUtMmYyYS0z
YmRjLWI1NjItYjU5NTMxOGUzNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAIx9o+NrYdkb23ESJPys2l2vIgD6rRKTSFrJ0c
v/hPFLuX5VHqsQGlx3LrX5+VYCox2yaMVNtoECorTAgY8jg359U5ykHpNdZDyP9E
mlSvqoZ8cTY5wSEfYSWPp1bNae1/xO/r1FUWDxcfoIzauTIh4NFgqE3Z8wdWYTFW
cbITwprS/v4tRdyrH0eEBqSZFGbv8ssV43sYu/n2h1e4BnlANSw2zP0kx3Jd71iv
M0So79PLs2AAhNu3R1ObvQOokgUytjUGRN/fH70agfNZr6wZur4bur4xsNl9l3hx
mVkVTJx+uK04HF+bVVQStZWorkbFHkQYEBtIr8m9yELSYWgo
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:22 2025 by rpki-client