Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3066b42-0790-3a6d-909c-8526aab61d52.roa
File:                     c3066b42-0790-3a6d-909c-8526aab61d52.roa (raw, json)
Hash identifier:          C+gYL6+Z40kzwPeUxTOz3PY9dUTR6Z/uCBP09oUmfRg=
Subject key identifier:   2B:94:89:E6:C1:0A:79:4F:EF:C5:7B:E3:8F:6A:25:A0:12:62:3A:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BA5636247CFC052825775E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3066b42-0790-3a6d-909c-8526aab61d52.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396560
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:36:24:7c:fc:05:28:25:77:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=550b766f-9b62-479d-97d9-d5cd19d05412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:9e:64:5f:77:ca:1b:17:a0:8a:15:38:45:
                    9e:4a:ed:d9:2b:19:41:db:63:fa:7d:64:9f:48:57:
                    63:95:e5:c8:01:f7:71:a7:b8:e1:8d:cc:2c:86:6a:
                    97:f9:96:3a:b3:bf:ae:4d:d9:4c:41:9f:08:73:4f:
                    78:6a:5a:5d:9a:54:59:b6:66:cf:b2:3c:15:48:6c:
                    b5:6a:e9:f6:52:9d:37:cd:0b:cd:bb:4a:31:f1:0b:
                    96:3e:19:7f:9c:34:f4:d5:6a:4f:a9:32:ec:f7:19:
                    e1:fe:d2:90:0b:26:30:11:4a:4e:4d:29:ec:9e:ec:
                    29:e1:79:f1:34:51:0a:b9:e8:63:c5:5a:93:d1:94:
                    e6:7c:ea:01:4a:9c:29:60:db:e8:48:4f:96:9a:8b:
                    b2:54:57:f2:23:68:05:43:4d:e7:d4:42:26:44:17:
                    95:92:18:08:20:b7:48:9a:ac:ac:6e:cb:02:66:a8:
                    0d:8e:02:89:70:fd:1f:d6:af:56:7c:03:f0:f2:c0:
                    f7:96:f8:a5:8c:22:5a:7d:26:f0:5c:42:18:76:df:
                    6f:46:12:cf:3e:70:5e:5d:98:6c:52:81:f2:19:72:
                    bb:cf:e3:6d:fd:17:42:4c:e7:50:9c:16:a3:5d:24:
                    bd:cb:a2:19:4f:dd:0b:fb:03:4c:8c:4d:b6:57:78:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:89:E6:C1:0A:79:4F:EF:C5:7B:E3:8F:6A:25:A0:12:62:3A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3066b42-0790-3a6d-909c-8526aab61d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:43:13:e0:1d:13:80:d5:4b:90:d9:de:35:af:5b:6e:83:
         11:09:88:0b:04:4a:69:5a:91:21:20:84:9b:42:06:b9:b6:21:
         33:2d:48:13:93:3d:3f:2c:0b:64:2f:4f:a3:16:97:dc:5f:e1:
         c6:21:dc:b2:95:6e:12:98:55:52:dd:88:b9:96:ac:61:b5:ac:
         5c:a7:00:27:0a:b7:b4:9b:54:cc:ff:b3:a3:bf:4f:db:6c:41:
         bf:5f:e0:b4:66:b5:f0:c1:1c:95:16:71:5f:bf:09:0c:34:d4:
         ec:55:3e:cb:a5:47:b7:75:3a:19:6d:57:99:f4:da:5e:7b:a5:
         05:64:5f:9a:4c:07:38:2d:7f:80:20:16:b2:33:bd:89:63:3a:
         db:ef:76:aa:55:12:73:8e:ec:fc:4c:0c:9e:dd:ce:3e:49:5c:
         8f:ec:25:c6:6c:c9:07:dd:fb:2b:94:2a:8d:b6:00:a5:2f:ef:
         fb:ba:aa:15:3b:19:7b:f2:8c:e9:1e:c7:7c:74:05:a6:3d:1b:
         10:30:7b:a8:3d:ce:14:2e:1b:6f:94:ba:23:dd:ea:18:1d:1e:
         f3:70:ab:5d:48:89:6e:62:be:59:5b:9c:0f:55:4a:e4:b3:e8:
         ea:91:3f:7a:10:ba:77:7e:02:1c:82:78:26:ba:d1:e3:5c:a6:
         13:a7:69:a2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEi6VjYkfPwFKCV3XkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEzMTE0MDA1MVoXDTI1MDUwMTEzMDA1MVowLzEtMCsGA1UEAxMk
NTUwYjc2NmYtOWI2Mi00NzlkLTk3ZDktZDVjZDE5ZDA1NDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU6eZF93yhsXoIoVOEWeSu3ZKxlB22P6fWSf
SFdjleXIAfdxp7jhjcwshmqX+ZY6s7+uTdlMQZ8Ic094alpdmlRZtmbPsjwVSGy1
aun2Up03zQvNu0ox8QuWPhl/nDT01WpPqTLs9xnh/tKQCyYwEUpOTSnsnuwp4Xnx
NFEKuehjxVqT0ZTmfOoBSpwpYNvoSE+WmouyVFfyI2gFQ03n1EImRBeVkhgIILdI
mqysbssCZqgNjgKJcP0f1q9WfAPw8sD3lviljCJafSbwXEIYdt9vRhLPPnBeXZhs
UoHyGXK7z+Nt/RdCTOdQnBajXSS9y6IZT90L+wNMjE22V3juAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCuUiebBCnlP78V7449qJaASYjr0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzMwNjZiNDItMDc5MC0z
YTZkLTkwOWMtODUyNmFhYjYxZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB8L0MT4B0TgNVLkNneNa9bboMRCYgLBEppWpEh
IISbQga5tiEzLUgTkz0/LAtkL0+jFpfcX+HGIdyylW4SmFVS3Yi5lqxhtaxcpwAn
Cre0m1TM/7Ojv0/bbEG/X+C0ZrXwwRyVFnFfvwkMNNTsVT7LpUe3dToZbVeZ9Npe
e6UFZF+aTAc4LX+AIBayM72JYzrb73aqVRJzjuz8TAye3c4+SVyP7CXGbMkH3fsr
lCqNtgClL+/7uqoVOxl78ozpHsd8dAWmPRsQMHuoPc4ULhtvlLoj3eoYHR7zcKtd
SIluYr5ZW5wPVUrks+jqkT96ELp3fgIcgngmutHjXKYTp2mi
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:38:15 2025 by rpki-client