Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fd45e93-d1c8-3e86-870f-48bdc8c05964.roa
File:                     8fd45e93-d1c8-3e86-870f-48bdc8c05964.roa (raw, json)
Hash identifier:          KUfs8FciSAlQEGjRCaXNgxbO8T2NcGAdmkEaX/Mbyd8=
Subject key identifier:   EA:F0:ED:3D:31:C4:BA:51:0D:56:FB:39:AB:85:D3:E2:1C:BF:EC:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB7117E8CBBDBE414CAD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fd45e93-d1c8-3e86-870f-48bdc8c05964.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396609
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:71:17:e8:cb:bd:be:41:4c:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=9111b0cd-f602-457c-b45d-f22a497f658a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:26:7f:c6:ee:2e:e9:be:f8:7b:68:ec:17:
                    05:02:8d:d1:5a:c1:b1:99:cc:89:28:3b:e1:4e:6c:
                    96:04:05:f1:97:f7:44:0a:d4:c6:cd:d1:ab:7f:27:
                    21:99:36:44:02:9b:67:3f:fe:a4:0b:33:4b:c8:7f:
                    42:42:2f:de:f7:9c:10:6f:4d:a7:2b:c8:24:fd:4a:
                    42:9a:15:c6:a4:19:5a:4c:4e:a8:78:66:66:6e:ed:
                    e2:40:4d:3b:25:f8:65:98:8b:14:41:10:dc:ba:2c:
                    5c:e7:37:c5:a8:c0:8d:5e:c1:ae:55:96:a4:ca:53:
                    53:d1:c0:bc:52:08:92:e6:4c:0e:6c:93:64:d6:81:
                    a4:4c:3e:88:15:12:1c:e1:6d:39:59:a6:9b:4b:fb:
                    bf:b9:6f:93:b6:c4:0b:80:16:b4:21:f4:9e:ee:ee:
                    b7:31:96:7b:5b:c0:96:75:59:f4:15:96:37:77:94:
                    92:13:1f:30:72:f4:a9:40:28:b1:c8:db:e2:b9:a9:
                    da:da:92:24:ad:e5:e5:30:94:f9:f6:85:b8:3c:c6:
                    c8:bf:ae:09:4c:7a:61:22:ed:0a:3e:dd:75:fa:53:
                    b2:3b:64:53:07:b1:b2:9f:a1:5b:0b:72:77:55:e7:
                    2f:cd:2d:2a:cf:ca:4b:73:ff:e5:76:37:52:16:38:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F0:ED:3D:31:C4:BA:51:0D:56:FB:39:AB:85:D3:E2:1C:BF:EC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fd45e93-d1c8-3e86-870f-48bdc8c05964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:15:98:0f:7c:ac:cf:7f:5a:98:dc:43:53:09:bc:85:f0:62:
         04:21:2b:14:00:d6:17:6c:5d:9b:ab:02:a3:41:e8:4f:07:ec:
         bd:15:19:f7:63:fd:84:80:8e:bf:61:a0:01:b7:41:6e:54:8b:
         3d:6e:9b:1e:8e:4a:c3:b7:9b:67:52:c5:12:0d:59:8d:ba:04:
         ba:23:0e:84:1e:d2:58:e2:0c:40:90:b4:22:ab:47:29:f5:fb:
         77:21:9f:1f:78:10:24:28:a7:a4:90:14:4e:dd:c0:bc:82:f0:
         b3:0e:c5:45:de:bc:ca:57:e1:5f:66:8b:1d:b5:f7:1b:36:78:
         d3:e8:7d:9a:73:39:9d:a9:ca:9c:1f:b0:c4:28:d5:43:48:1d:
         6d:7f:4f:af:45:d6:b5:56:4d:21:38:6f:39:7c:f1:fb:ed:bb:
         71:a5:95:ab:06:6d:77:6f:e9:1e:a7:05:ce:93:8c:af:c4:c5:
         4b:ed:04:67:9e:9d:95:66:c0:f4:bf:87:8c:57:6f:2d:14:c1:
         a7:13:63:0b:bf:86:4c:bc:bc:2d:81:19:30:7a:06:1e:57:2b:
         f0:d3:a3:72:97:77:c5:99:44:35:c4:82:17:83:dc:ae:78:1b:
         e7:31:97:c7:ee:72:d6:7d:2d:0a:ac:50:cd:00:e5:db:e7:cd:
         13:cd:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:26 2025 by rpki-client