Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa
File:                     0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa (raw, json)
Hash identifier:          Z4Wba6MD14k0r4LqeUzwRE4jyza6sgaIQBwFp3G7WEw=
Subject key identifier:   7E:D1:A2:95:8E:42:1E:C9:50:BB:C2:93:40:A4:0E:11:AB:68:CB:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F0454751F80B11DBD280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa
Signing time:             Thu 19 Dec 2024 13:45:07 +0000
ROA not before:           Thu 19 Dec 2024 13:45:07 +0000
ROA not after:            Wed 19 Mar 2025 12:45:07 +0000
asID:                     396606
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f0:45:47:51:f8:0b:11:db:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:07 2024 GMT
            Not After : Mar 19 12:45:07 2025 GMT
        Subject: CN=b6a5428b-dcc2-4f23-adf4-d15d3be56424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:05:40:3c:ab:fc:71:c9:52:f6:0b:f2:59:
                    8c:f7:ae:bc:87:2c:1b:c9:9f:58:2b:bb:e1:75:fd:
                    a0:92:7a:90:75:b4:fb:b0:cb:ef:31:14:dd:d9:92:
                    d2:d5:41:15:aa:e3:02:06:22:62:90:78:52:a5:4e:
                    43:2b:18:c1:cf:bd:82:c9:98:fa:84:ec:db:3d:8b:
                    cd:a7:57:67:41:2e:de:3c:26:5d:f9:0d:70:78:df:
                    d1:b5:f9:f2:6f:d7:a7:88:f0:7a:c3:0a:41:7d:88:
                    53:1a:b7:8d:f4:bc:52:70:ee:ee:3b:e0:29:36:f1:
                    cc:ff:5b:6a:f7:d5:82:2c:4e:67:16:4c:cf:46:9f:
                    8d:f2:1e:e4:5f:c9:65:93:37:b3:ed:37:6c:3d:00:
                    fe:fd:62:33:c3:67:13:a9:86:3e:88:6e:46:7d:e0:
                    5b:f0:ca:e4:19:81:cb:a7:ff:dd:d2:ab:ed:fd:5f:
                    b8:1c:9a:9e:1d:df:bf:8b:88:1d:f8:90:21:41:9c:
                    cb:7a:e7:2f:7d:fa:a5:0b:8f:eb:07:e3:e8:c4:a6:
                    42:a3:36:38:a6:ad:59:5d:a9:de:5c:2e:41:58:79:
                    99:e6:60:f7:d3:67:4f:b5:49:97:f0:c5:3f:c4:c5:
                    c3:fe:52:fd:7e:cf:1b:61:e2:5e:71:07:12:e8:09:
                    f1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D1:A2:95:8E:42:1E:C9:50:BB:C2:93:40:A4:0E:11:AB:68:CB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b64f2e1-ba27-3153-afb7-814781b7d0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:bb:22:61:06:8e:56:f9:38:f5:c7:dc:23:7f:2f:96:b3:
         2d:1e:8d:a8:72:bb:00:8b:44:dd:cc:9f:b3:cf:9d:d0:50:54:
         6f:2a:e9:05:b1:9b:5e:fd:e9:d3:c3:5f:64:70:9a:6c:19:37:
         31:66:19:58:0a:36:83:b9:c1:c8:0b:a9:14:22:ef:15:ca:11:
         d3:91:18:a8:83:18:7a:7a:c0:40:62:bd:d8:6e:f3:40:e8:d2:
         af:14:e1:be:b6:2d:04:19:86:8b:f9:c9:54:60:38:c5:27:16:
         c8:e8:02:0f:24:77:e3:82:e9:5e:c0:45:2a:c2:a2:85:44:26:
         ac:74:c8:58:5b:51:0b:46:e6:01:c7:cb:d0:a4:f8:16:6f:3d:
         71:cd:17:8f:f8:41:d3:0e:8e:b5:51:89:d5:33:36:da:92:4e:
         74:b4:ba:c7:b6:7c:f0:ee:32:7d:ac:71:a8:71:f2:7a:1b:8e:
         61:a7:5e:fd:21:92:6d:74:e7:c3:0f:78:46:09:c5:a2:3a:fe:
         7d:1a:6e:1c:99:6a:b1:fe:35:38:74:05:d7:04:f0:51:b5:26:
         ee:3b:2b:c3:2d:fa:89:49:03:0b:d0:30:e5:a7:a8:50:53:74:
         9d:27:e2:70:77:40:eb:c3:e2:10:2c:35:c5:fa:a7:c6:05:da:
         ca:b8:6f:8d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQvBFR1H4CxHb0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwN1oXDTI1MDMxOTEyNDUwN1owLzEtMCsGA1UEAxMk
YjZhNTQyOGItZGNjMi00ZjIzLWFkZjQtZDE1ZDNiZTU2NDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNUFQDyr/HHJUvYL8lmM9668hywbyZ9YK7vh
df2gknqQdbT7sMvvMRTd2ZLS1UEVquMCBiJikHhSpU5DKxjBz72CyZj6hOzbPYvN
p1dnQS7ePCZd+Q1weN/Rtfnyb9eniPB6wwpBfYhTGreN9LxScO7uO+ApNvHM/1tq
99WCLE5nFkzPRp+N8h7kX8llkzez7TdsPQD+/WIzw2cTqYY+iG5GfeBb8MrkGYHL
p//d0qvt/V+4HJqeHd+/i4gd+JAhQZzLeucvffqlC4/rB+PoxKZCozY4pq1ZXane
XC5BWHmZ5mD302dPtUmX8MU/xMXD/lL9fs8bYeJecQcS6Anx/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFH7RopWOQh7JULvCk0CkDhGraMtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI2NGYyZTEtYmEyNy0z
MTUzLWFmYjctODE0NzgxYjdkMGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/jbsiYQaOVvk49cfcI38vlrMtHo2ocrsAi0Td
zJ+zz53QUFRvKukFsZte/enTw19kcJpsGTcxZhlYCjaDucHIC6kUIu8VyhHTkRio
gxh6esBAYr3YbvNA6NKvFOG+ti0EGYaL+clUYDjFJxbI6AIPJHfjgulewEUqwqKF
RCasdMhYW1ELRuYBx8vQpPgWbz1xzReP+EHTDo61UYnVMzbakk50tLrHtnzw7jJ9
rHGocfJ6G45hp179IZJtdOfDD3hGCcWiOv59Gm4cmWqx/jU4dAXXBPBRtSbuOyvD
LfqJSQML0DDlp6hQU3SdJ+Jwd0Drw+IQLDXF+qfGBdrKuG+N
-----END CERTIFICATE-----