Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/030def59-bbf2-3b23-b1ab-1a53054ecd99.roa
File:                     030def59-bbf2-3b23-b1ab-1a53054ecd99.roa (raw, json)
Hash identifier:          zrmeoLJnaC8uRfrCJdBENtCJw8fPXFGPZa4UUv2y21o=
Subject key identifier:   92:A0:09:E9:83:F2:E3:92:9F:C1:11:16:F2:0F:48:6F:37:74:6D:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E4941618745F690250A48
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/030def59-bbf2-3b23-b1ab-1a53054ecd99.roa
Signing time:             Tue 21 Jan 2025 13:34:35 +0000
ROA not before:           Tue 21 Jan 2025 13:34:35 +0000
ROA not after:            Mon 21 Apr 2025 12:34:35 +0000
asID:                     396589
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:49:41:61:87:45:f6:90:25:0a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:35 2025 GMT
            Not After : Apr 21 12:34:35 2025 GMT
        Subject: CN=1adda667-526c-4910-975f-501ab3851244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:08:62:cb:de:be:20:81:99:20:9c:d2:fb:
                    cc:38:cd:04:8b:b8:31:44:cb:1e:86:c3:ac:47:96:
                    12:da:08:34:6b:2a:78:f8:a3:a9:7a:fb:1e:a7:6f:
                    7c:c4:21:35:a7:34:51:82:21:3f:52:e4:9b:03:2b:
                    40:29:9f:55:60:68:e2:fd:fe:b8:ab:d8:77:f9:fd:
                    0a:2b:23:14:9c:24:fa:e6:0f:11:f8:07:12:ea:83:
                    c1:3e:5d:33:68:8f:26:f1:82:bf:30:51:d8:34:f1:
                    8e:e9:b1:2c:43:ae:9a:ac:2c:0c:66:b9:bf:1b:7c:
                    a6:e0:07:4a:28:41:c2:68:8a:0a:88:ce:18:fa:26:
                    2c:a6:49:be:7d:c9:4e:f0:47:e0:56:99:ff:27:b0:
                    92:e3:8c:11:94:8a:e2:42:32:3f:21:53:c8:a9:31:
                    79:fa:ed:f1:0e:02:90:6d:fe:c4:99:3d:66:35:43:
                    42:45:e9:63:6d:dc:a7:2a:2d:a8:fb:e9:0c:6d:e5:
                    8a:6f:ea:e7:5a:fe:81:7f:0e:17:8d:15:46:96:42:
                    df:31:af:7c:0f:b3:39:9b:b1:31:23:a8:21:71:ac:
                    1f:ba:fa:20:97:73:ae:9c:ab:68:f6:b0:91:d5:3a:
                    15:1c:7d:1f:c9:b6:2b:bf:ac:9a:32:4d:76:dd:5d:
                    9b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:09:E9:83:F2:E3:92:9F:C1:11:16:F2:0F:48:6F:37:74:6D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/030def59-bbf2-3b23-b1ab-1a53054ecd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:93:99:46:ad:29:0f:ae:cb:7a:b6:58:27:5d:24:82:79:a4:
         dd:f1:59:7b:a8:d4:55:6d:af:21:41:0b:71:a3:fb:39:58:12:
         1c:bf:36:1c:27:0b:9a:f3:52:2a:b7:b9:5d:1f:d7:2b:6e:d8:
         8b:c1:09:9b:b0:cc:58:c6:6e:19:cc:30:ee:30:82:3a:c2:ed:
         b3:43:5a:65:da:3d:92:65:3e:95:33:a1:8f:90:48:cf:fc:68:
         93:3b:66:71:50:55:68:4b:bd:0c:bc:71:10:91:57:42:9e:aa:
         b0:e7:49:dc:92:5d:79:59:58:c5:95:d1:d9:46:fa:15:4b:52:
         87:89:19:82:5c:07:17:7e:ec:88:ca:d6:08:f7:67:66:de:e8:
         96:50:dd:80:02:2d:a0:2a:e0:24:c0:e2:c4:6c:ad:0d:77:eb:
         3d:d1:37:58:85:bf:c1:12:ca:db:05:54:cd:e9:15:33:a5:45:
         be:19:73:c0:24:2c:46:8f:b5:c9:d3:0c:2f:16:57:35:b9:82:
         67:c9:89:cb:b8:c8:f6:a8:53:8a:c1:95:c9:fe:c2:f6:16:68:
         08:7d:f1:f6:f1:70:94:99:c1:13:b0:55:89:99:a8:7e:a8:cf:
         09:fd:4b:81:cb:28:76:e8:96:9f:a7:29:c9:ed:8f:69:87:78:
         19:c5:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----