Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa
File:                     0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa (raw, json)
Hash identifier:          +QS5sT1WSYkYJ4G2LD4R5nxV622jsfZ8X0Rperlq5as=
Subject key identifier:   1B:F5:7D:63:AA:2D:3A:51:81:14:B6:76:A0:2A:CA:89:4F:B0:D5:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A04D4459FC4F093BE44200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396576
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4d:44:59:fc:4f:09:3b:e4:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=8017450e-b9fc-4992-bae0-117d9d797b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:25:48:64:d9:0d:f2:bc:1e:92:04:0c:f0:9f:
                    f8:6d:35:fc:e5:60:3d:f9:30:82:04:70:20:b3:ba:
                    64:2c:26:48:aa:69:6b:09:f1:7f:d4:e1:84:3e:92:
                    3d:63:28:91:11:e8:32:a5:6d:f8:51:13:e7:5c:1c:
                    eb:ff:49:a0:ea:e0:34:1f:cb:36:99:22:a6:3d:a9:
                    08:24:da:b1:c9:3f:ba:0f:75:55:04:ce:ed:0e:88:
                    24:7e:59:53:c7:8e:8f:01:7a:bd:68:fe:f2:58:a2:
                    b2:81:7e:d4:5e:d9:a6:90:a1:2a:fb:e1:19:06:2d:
                    c3:ef:3a:3e:fd:62:73:b2:4a:bb:02:ba:53:24:0c:
                    3e:1a:27:0c:17:c0:8d:ae:dc:c0:b4:df:a1:2f:07:
                    3d:11:7d:b0:91:d9:ba:70:88:b5:99:77:f8:4e:26:
                    ad:1e:80:90:f4:e1:b3:c9:86:35:d8:52:49:d5:75:
                    22:10:0b:0f:b3:a0:81:04:d6:d5:df:6d:20:d1:0e:
                    58:51:d2:44:c4:f3:73:d8:57:72:1c:54:a8:28:e5:
                    c0:bf:0e:a7:cb:11:ad:40:29:5d:c7:d5:51:ee:d0:
                    3f:13:ba:74:ab:69:54:78:40:b1:18:a2:7a:a7:25:
                    e3:3a:df:30:c8:39:65:df:a6:29:b0:3e:d3:9f:3c:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F5:7D:63:AA:2D:3A:51:81:14:B6:76:A0:2A:CA:89:4F:B0:D5:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a3769c7-d835-3126-a9c1-a9e36395ebd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:cd:3f:84:cc:09:be:f8:3b:27:12:f3:5a:3b:92:38:de:
         27:66:88:b0:cc:61:1c:f7:a2:57:d9:45:f2:69:17:0b:70:e6:
         0b:44:b6:96:c4:52:9d:92:7a:37:32:76:e6:ab:1d:ee:8b:9b:
         8d:23:b7:4d:d1:26:69:aa:2e:48:c8:46:2c:02:dd:4d:c3:32:
         d8:48:5b:90:29:4b:76:41:6f:0a:d6:de:d3:d2:44:9d:86:43:
         98:23:54:1b:95:ef:1a:1d:60:18:d8:29:61:6a:b0:e7:74:cd:
         29:bc:ea:5c:8e:18:e2:32:21:d1:62:9b:49:5c:c7:65:4f:7a:
         d7:22:e0:f2:53:76:48:c8:5c:b0:53:e6:b7:b5:46:50:f7:cb:
         1f:f3:71:fa:c8:bd:a2:a2:22:d5:ac:1a:89:21:dc:90:c6:60:
         a0:ca:33:a8:98:95:73:f7:6a:30:70:b5:8f:37:24:98:41:ff:
         89:fc:21:d4:f2:c3:43:6a:7b:80:19:55:d2:45:5a:11:f9:b9:
         66:ca:3f:e8:18:b3:ef:35:03:1a:db:9c:a1:bd:e7:f3:4c:f9:
         77:7a:0f:4a:aa:bd:15:8f:e4:ce:21:65:88:dd:f4:67:52:8d:
         63:d0:cd:04:3f:1a:7c:42:71:52:9c:ed:71:50:9f:be:d1:2b:
         a3:3c:49:ee
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoE1EWfxPCTvkQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
ODAxNzQ1MGUtYjlmYy00OTkyLWJhZTAtMTE3ZDlkNzk3Yjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCVIZNkN8rwekgQM8J/4bTX85WA9+TCCBHAg
s7pkLCZIqmlrCfF/1OGEPpI9YyiREegypW34URPnXBzr/0mg6uA0H8s2mSKmPakI
JNqxyT+6D3VVBM7tDogkfllTx46PAXq9aP7yWKKygX7UXtmmkKEq++EZBi3D7zo+
/WJzskq7ArpTJAw+GicMF8CNrtzAtN+hLwc9EX2wkdm6cIi1mXf4TiatHoCQ9OGz
yYY12FJJ1XUiEAsPs6CBBNbV320g0Q5YUdJExPNz2FdyHFSoKOXAvw6nyxGtQCld
x9VR7tA/E7p0q2lUeECxGKJ6pyXjOt8wyDll36YpsD7TnzxqywIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBv1fWOqLTpRgRS2dqAqyolPsNXpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGEzNzY5YzctZDgzNS0z
MTI2LWE5YzEtYTllMzYzOTVlYmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBgys0/hMwJvvg7JxLzWjuSON4nZoiwzGEc96JX
2UXyaRcLcOYLRLaWxFKdkno3Mnbmqx3ui5uNI7dN0SZpqi5IyEYsAt1NwzLYSFuQ
KUt2QW8K1t7T0kSdhkOYI1Qble8aHWAY2ClharDndM0pvOpcjhjiMiHRYptJXMdl
T3rXIuDyU3ZIyFywU+a3tUZQ98sf83H6yL2ioiLVrBqJIdyQxmCgyjOomJVz92ow
cLWPNySYQf+J/CHU8sNDanuAGVXSRVoR+blmyj/oGLPvNQMa25yhvefzTPl3eg9K
qr0Vj+TOIWWI3fRnUo1j0M0EPxp8QnFSnO1xUJ++0SujPEnu
-----END CERTIFICATE-----