Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93d9aaa8-7351-3482-ade5-56143620f759.roa
File:                     93d9aaa8-7351-3482-ade5-56143620f759.roa (raw, json)
Hash identifier:          bJg2DQBPiWh8QMsfloF4Kppt/uypl/PFtvds0AViLtw=
Subject key identifier:   12:A6:C6:9C:87:CE:BC:77:25:A1:B4:27:BD:AD:3F:A0:41:6C:62:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F0CAB6F3734B7CD72F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93d9aaa8-7351-3482-ade5-56143620f759.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396581
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f0:ca:b6:f3:73:4b:7c:d7:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=2507ba2c-05c6-43e2-b121-4791f690e247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:0a:f3:03:da:01:6e:25:e9:9c:83:be:8a:
                    bd:c4:8f:55:f2:c3:01:64:99:48:c6:68:68:96:d9:
                    b7:16:44:07:e5:7e:c5:ca:c6:5a:8e:d0:f9:27:ff:
                    25:49:2d:eb:f9:17:61:4f:0f:1b:4f:1a:08:99:04:
                    ab:21:ef:c7:96:de:7a:e8:9b:06:05:ba:87:e6:3f:
                    98:dc:aa:a5:35:3b:f7:e8:72:f2:b3:1a:59:1f:ab:
                    98:c4:1b:3b:95:5b:be:d9:92:18:ed:96:dc:19:2b:
                    34:98:9d:12:bd:5b:4e:23:0c:96:e6:02:d0:10:03:
                    37:44:70:da:8b:ae:4f:a6:2d:ce:7e:a4:69:4c:74:
                    dc:19:9d:5f:c7:65:4c:f4:7b:da:34:6a:0e:a7:d5:
                    0d:23:32:3c:5b:a1:bb:1a:4d:82:d8:03:a4:f0:23:
                    05:36:11:7f:86:ef:6e:32:cd:ce:1e:40:2c:64:1e:
                    ad:3a:a0:ae:0c:16:b8:cc:84:15:fd:89:3c:5b:c7:
                    cb:21:63:ea:2a:bc:83:05:fe:ef:0a:5b:3a:8b:45:
                    19:c5:55:84:18:98:68:8f:43:3f:25:43:e4:1a:75:
                    28:73:46:c9:55:4d:57:26:85:76:7d:95:a2:21:c9:
                    f3:c1:76:da:e6:d7:b8:7d:25:16:43:8d:10:70:8d:
                    aa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A6:C6:9C:87:CE:BC:77:25:A1:B4:27:BD:AD:3F:A0:41:6C:62:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/93d9aaa8-7351-3482-ade5-56143620f759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:cb:69:88:0d:c5:e7:3a:36:6f:27:00:3a:74:19:4b:b7:91:
         e9:fd:07:d4:81:5d:92:e1:12:a2:21:bb:7d:19:b7:ba:19:8a:
         b4:3b:bc:06:6c:df:31:ed:1f:1f:8a:7d:93:5c:c3:0c:a7:b8:
         8a:d5:67:73:29:0b:3c:b7:a8:53:7a:76:3b:9d:af:52:cb:06:
         79:9c:de:ed:f5:7d:a4:12:fc:35:08:43:39:d9:5d:e6:a0:65:
         01:db:81:fb:ce:7e:d5:50:f1:7f:00:68:23:60:f1:1d:46:4e:
         af:2f:91:60:40:13:6a:76:7d:a6:f2:90:1f:43:3b:5f:73:74:
         74:de:86:6f:29:3d:78:db:b3:3b:b2:37:9a:ee:a1:68:1a:f6:
         a9:de:9c:1e:09:59:2c:b2:b9:68:8f:58:c8:08:e0:f4:67:bc:
         56:cd:c7:cf:11:e4:ce:82:89:3d:3a:b7:19:c6:44:3a:56:b8:
         b1:88:15:a6:fa:57:20:73:7d:1c:e0:9f:e1:ec:40:b7:b3:d8:
         4b:08:c5:1a:e5:ec:af:81:ad:13:53:bd:74:78:c2:1f:cf:df:
         09:63:fc:7d:ac:ea:5f:b1:de:1b:d6:03:d8:0c:3d:96:65:1f:
         7e:a9:60:8b:88:92:74:17:49:25:eb:dd:65:8d:14:79:33:30:
         3e:48:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:42 2025 by rpki-client