Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcc6b6c2-cfad-345f-914b-565f3611976e.roa
File:                     fcc6b6c2-cfad-345f-914b-565f3611976e.roa (raw, json)
Hash identifier:          OfavR0oodhFK4csnnFgemSyrJstouci/mxfY3FEmEW8=
Subject key identifier:   49:AF:96:CF:D2:62:AC:CC:03:02:2B:07:B0:54:8A:7C:18:E0:20:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584940398200DE39CB57B1420A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcc6b6c2-cfad-345f-914b-565f3611976e.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     396540
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:82:00:de:39:cb:57:b1:42:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=84a81f0f-3d01-4ab4-9dae-1bca01c759b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:df:b7:d4:ec:46:e9:69:1a:38:97:54:07:
                    11:dc:b2:7d:29:4f:36:af:d7:30:3e:5d:d3:c1:85:
                    bc:8c:25:e3:f4:e4:a2:46:04:5b:ca:1b:24:b3:6e:
                    5d:90:bd:c0:65:7a:95:ec:b1:77:59:85:0d:03:b7:
                    85:ce:91:c0:67:fa:6e:41:d7:46:7e:66:78:5c:50:
                    44:9e:ba:6c:a6:b0:88:66:ac:2a:2e:17:96:ef:a8:
                    30:c8:4d:75:bc:53:c3:dc:48:03:8d:55:3d:51:5c:
                    bd:47:0c:4a:5c:07:6c:16:e7:a0:c3:31:65:65:f7:
                    66:18:28:18:39:93:38:1e:32:aa:08:0b:5a:ba:77:
                    1b:f3:32:57:f3:bc:2a:e9:bd:e4:eb:c4:40:0f:89:
                    01:0a:17:1c:c4:77:f3:6b:27:fb:f0:11:5f:ed:2c:
                    d5:e4:88:9c:b0:c8:b0:89:5f:9f:cb:4e:41:9a:d0:
                    6c:49:d3:f2:c2:d0:a3:bf:8a:ae:4e:65:be:71:43:
                    3d:57:b1:af:1a:6f:06:9e:d0:ec:be:76:89:68:fd:
                    e2:ff:34:e8:66:84:58:97:45:de:5c:3b:8f:da:6a:
                    0a:91:85:96:b4:1d:b9:60:e7:f1:dd:fb:5a:41:63:
                    6c:d1:ac:c7:3c:a5:13:dd:54:e9:22:0f:b7:2f:83:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:96:CF:D2:62:AC:CC:03:02:2B:07:B0:54:8A:7C:18:E0:20:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcc6b6c2-cfad-345f-914b-565f3611976e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:4e:a3:ef:5d:c8:b1:11:46:6b:f7:4d:1c:56:fb:0a:7c:
         3d:5e:e1:40:ad:88:44:61:58:57:4f:4c:8c:73:f7:1b:92:5d:
         fc:aa:80:79:73:23:0d:90:07:71:b0:27:a1:e6:e7:dd:07:e5:
         99:8d:f6:cf:4a:54:e3:17:31:93:37:ba:2c:4c:95:3a:0b:a1:
         dc:76:e7:a1:ea:71:ae:27:12:81:43:13:ef:e9:05:62:2c:23:
         17:20:6f:dd:b0:a5:0e:8e:36:ef:dc:b2:c8:64:0e:08:5a:8d:
         24:1d:85:82:68:8c:32:41:7b:70:63:7c:72:15:0a:73:c8:d2:
         30:de:be:f8:af:0e:07:ab:af:36:22:95:b1:5b:88:03:96:e6:
         34:2d:a0:c3:cf:9d:da:d9:bd:13:c8:65:1f:8a:0d:45:ea:19:
         56:63:03:f5:3b:a1:0e:b9:87:44:0b:64:1e:e6:cb:24:9b:5c:
         f2:ae:ac:19:4a:78:28:01:3b:eb:a5:34:58:f6:e5:0c:7d:ff:
         a7:89:11:55:fb:1b:36:49:b6:1d:72:02:df:7a:86:8a:8b:c5:
         bb:70:c3:b9:7c:79:83:ae:dc:86:3d:05:cb:0a:fb:3f:3e:36:
         67:91:94:c2:9e:7a:1a:4a:0c:dc:ad:4d:36:91:ed:9f:4b:6d:
         6c:ca:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:39 2025 by rpki-client