Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa
File:                     1523e39a-7cf2-37e3-9369-b0d63da25707.roa (raw, json)
Hash identifier:          PiUKnFaANIEsHeKVl8szMQwIYz1JqP3x47Fv2C/4pG4=
Subject key identifier:   2B:F6:1F:2E:81:DD:CD:F1:68:7A:F7:6E:E0:40:C3:EE:42:94:4C:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A047E7BF185E750DA3CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     36626
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:47:e7:bf:18:5e:75:0d:a3:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=403676ee-851c-484c-a8e8-8194de85aaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:99:04:76:9d:04:da:1d:03:54:a4:17:40:
                    47:8e:36:41:59:1d:74:53:b9:ef:23:15:ac:d8:a1:
                    d3:43:73:0e:62:4b:68:e2:e1:6a:4b:1c:37:1e:a0:
                    66:0c:79:06:a8:8e:43:87:01:6b:0a:3a:ff:1f:27:
                    ca:2d:1c:6b:35:ec:4c:3d:6f:a8:4c:7a:78:e1:c5:
                    5b:0b:0d:3c:e9:ea:77:b2:9f:65:72:23:c4:e1:08:
                    e1:8b:ee:7a:45:5e:10:3b:4e:f6:74:38:9c:83:0e:
                    ec:05:3a:72:af:18:bf:19:11:2c:9c:29:ec:de:88:
                    bc:99:9c:47:a7:25:74:05:2f:47:4d:d7:47:5b:30:
                    6c:89:84:34:eb:54:73:f5:80:12:1c:cd:85:b3:41:
                    d2:58:83:fc:36:6e:84:c9:64:89:e7:0e:53:bd:c5:
                    0c:a5:c3:89:10:23:c7:81:42:e2:46:5c:77:1e:c2:
                    8d:2d:52:a0:b1:0b:6f:c1:f2:18:8f:55:fb:aa:b1:
                    40:04:91:23:51:4f:68:bc:0c:8f:1f:0f:d2:9d:cc:
                    68:2c:fa:5a:ad:eb:d4:37:98:d7:42:3e:98:e6:f7:
                    ce:ac:90:ad:29:1e:b1:c2:76:09:a6:15:a5:db:8f:
                    ec:d2:80:38:48:51:5c:1f:4b:70:db:27:ca:a1:57:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F6:1F:2E:81:DD:CD:F1:68:7A:F7:6E:E0:40:C3:EE:42:94:4C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1523e39a-7cf2-37e3-9369-b0d63da25707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:4e:2c:24:f8:86:e5:ce:c9:cd:c3:4b:64:f7:c6:b1:70:e9:
         fc:15:f9:dd:c5:e0:98:e3:1a:3e:cf:b1:a5:91:d3:51:2b:a3:
         6c:b7:d7:e1:ae:ff:ef:48:ea:d5:33:f5:27:58:45:69:bb:61:
         00:1e:91:74:c0:7b:e6:10:08:da:0a:05:e9:89:22:8e:a6:c1:
         19:7d:35:05:d3:cb:dc:73:89:13:e9:87:69:2b:74:e4:c0:6a:
         0a:e9:97:9b:84:e9:9d:d7:d1:8e:cb:b5:a2:8b:57:1e:e0:47:
         3d:ed:f1:1b:3e:0d:09:ba:00:9c:12:a3:cb:36:0d:d3:c7:7f:
         55:53:fc:de:4e:d2:2c:ab:e1:4a:72:b6:bf:15:b0:8c:39:eb:
         8b:71:ca:3a:65:6a:89:e1:b6:e1:c2:98:d0:8e:5a:d5:25:e0:
         29:0b:84:cd:2c:ef:71:44:4b:8c:fc:17:c3:28:86:be:c8:0e:
         e9:fc:15:28:bf:f9:61:ef:99:9d:01:bd:42:50:6f:9b:bf:29:
         e0:53:02:5b:6f:a5:b6:fa:84:fc:25:73:c8:83:b8:61:33:38:
         79:08:17:fe:8b:74:a2:78:55:8d:05:a3:86:2e:31:99:ed:a9:
         43:d3:3c:cd:3d:64:d8:a5:22:01:65:20:e9:38:b9:50:1f:3a:
         4a:14:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----