Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa
File:                     cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa (raw, json)
Hash identifier:          dITYwhZ7KPFF64/adE2XB4uESZ70qGA1Z43oc1O55KI=
Subject key identifier:   34:6A:EE:0F:F2:C5:A6:7B:72:78:14:AC:61:62:E2:75:09:D8:8A:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F585B230079ADF012EC580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa
Signing time:             Thu 23 Jan 2025 13:38:21 +0000
ROA not before:           Thu 23 Jan 2025 13:38:21 +0000
ROA not after:            Wed 23 Apr 2025 12:38:21 +0000
asID:                     397210
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:85:b2:30:07:9a:df:01:2e:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:21 2025 GMT
            Not After : Apr 23 12:38:21 2025 GMT
        Subject: CN=69c5cc2e-4c0c-4349-b5fc-720a0d599ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:06:0e:99:cf:23:59:cf:31:9c:3a:86:78:d8:
                    0c:4b:d3:f7:e0:c4:36:9d:89:b0:e2:a5:19:0b:ed:
                    50:d0:9b:ee:54:f2:55:01:d6:09:9e:f1:2d:35:c1:
                    d5:d7:05:66:9d:38:cc:c7:2f:e6:4c:8e:d6:ef:2f:
                    c4:1f:56:33:47:5b:ef:b2:f8:59:d5:72:72:ab:3a:
                    03:db:1b:a2:d2:33:29:4c:46:e4:d2:4c:4e:02:fd:
                    60:63:c2:8b:c3:05:b1:1e:bd:a7:90:91:60:54:3e:
                    5c:1a:a0:8a:0f:a2:80:cc:b7:1e:a4:61:cf:2d:f5:
                    d1:67:49:7b:96:fc:74:02:df:6f:d6:3d:2d:96:94:
                    40:e5:fe:a3:15:d4:6d:1d:bd:0b:50:51:83:f9:01:
                    e4:c6:03:0a:0b:e6:26:d4:2a:6e:98:a5:72:99:08:
                    f6:b2:7b:b1:3c:f9:17:ef:e4:d0:d4:20:16:8b:5e:
                    af:89:db:cd:ef:4e:a7:d9:c0:f6:a7:a3:50:1d:6a:
                    24:85:41:d0:c7:f2:ea:cd:a2:f3:63:93:c7:66:0d:
                    5f:95:5d:03:43:5e:bb:d4:1f:a9:6f:b0:5a:c7:af:
                    ab:e0:ec:ec:60:cf:1f:b0:10:93:15:06:dc:78:c0:
                    b4:20:1d:9d:0f:92:a7:88:5a:49:3c:4c:51:20:e8:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:EE:0F:F2:C5:A6:7B:72:78:14:AC:61:62:E2:75:09:D8:8A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:19:36:af:3a:45:39:46:2e:13:e6:01:6f:92:42:a7:a5:ad:
         82:22:d1:b3:74:ec:cb:26:90:0a:e9:09:77:d4:7d:92:0b:dc:
         ac:1c:f9:a6:76:a9:10:44:f5:06:38:03:40:49:3c:49:34:8c:
         a8:7a:90:30:bc:58:80:36:d0:c1:69:7f:c9:ce:5c:42:b7:b5:
         ec:e6:80:7f:e8:9d:22:88:4a:8c:d4:44:1b:39:56:cf:f5:0e:
         05:6b:e5:54:81:eb:1e:38:82:78:66:83:76:a4:30:6d:63:cf:
         45:41:93:01:bb:58:5a:70:7f:eb:59:98:ba:54:46:5b:ea:a2:
         64:93:f1:7e:2c:47:72:6b:4d:5c:6e:5e:63:76:8c:cd:74:dd:
         41:56:b7:67:50:f7:8c:ad:67:de:bf:90:8f:4e:ea:8f:55:60:
         7c:c1:6d:dd:a7:c6:50:ea:2b:b7:1e:e9:d1:29:18:86:bd:8e:
         dd:44:83:7d:6e:28:b4:cd:db:49:bf:1d:fd:2e:b3:b8:f9:1d:
         3b:33:56:01:d6:26:ca:1e:81:ee:e6:62:58:6c:e6:38:9c:02:
         8e:ca:ec:7d:fc:45:1b:77:04:7d:d7:cb:89:88:6d:e4:3f:8a:
         c5:49:9b:cc:90:c5:b0:26:6b:52:3e:be:b6:55:02:6f:70:72:
         6e:20:ef:dd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEij9YWyMAea3wEuxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMzEzMzgyMVoXDTI1MDQyMzEyMzgyMVowLzEtMCsGA1UEAxMk
NjljNWNjMmUtNGMwYy00MzQ5LWI1ZmMtNzIwYTBkNTk5ZWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQYOmc8jWc8xnDqGeNgMS9P34MQ2nYmw4qUZ
C+1Q0JvuVPJVAdYJnvEtNcHV1wVmnTjMxy/mTI7W7y/EH1YzR1vvsvhZ1XJyqzoD
2xui0jMpTEbk0kxOAv1gY8KLwwWxHr2nkJFgVD5cGqCKD6KAzLcepGHPLfXRZ0l7
lvx0At9v1j0tlpRA5f6jFdRtHb0LUFGD+QHkxgMKC+Ym1CpumKVymQj2snuxPPkX
7+TQ1CAWi16vidvN706n2cD2p6NQHWokhUHQx/LqzaLzY5PHZg1flV0DQ1671B+p
b7Bax6+r4OzsYM8fsBCTFQbceMC0IB2dD5KniFpJPExRIOgJiQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDRq7g/yxaZ7cngUrGFi4nUJ2IoJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzZDJiYTQtNTI5ZC0z
YjBiLTgxNzMtODJlZjkzNzhjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC6GTavOkU5Ri4T5gFvkkKnpa2CItGzdOzLJpAK
6Ql31H2SC9ysHPmmdqkQRPUGOANASTxJNIyoepAwvFiANtDBaX/JzlxCt7Xs5oB/
6J0iiEqM1EQbOVbP9Q4Fa+VUgeseOIJ4ZoN2pDBtY89FQZMBu1hacH/rWZi6VEZb
6qJkk/F+LEdya01cbl5jdozNdN1BVrdnUPeMrWfev5CPTuqPVWB8wW3dp8ZQ6iu3
HunRKRiGvY7dRIN9bii0zdtJvx39LrO4+R07M1YB1ibKHoHu5mJYbOY4nAKOyux9
/EUbdwR918uJiG3kP4rFSZvMkMWwJmtSPr62VQJvcHJuIO/d
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:33 2025 by rpki-client