Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c8fa82d-c63d-346d-8e57-18d866c46917.roa
File:                     1c8fa82d-c63d-346d-8e57-18d866c46917.roa (raw, json)
Hash identifier:          mCbn7uqAFQM4QCFAn6CM2cCe3xhYJu77911mXrVK270=
Subject key identifier:   24:BD:5C:73:76:92:CD:78:DE:E9:38:A5:10:9B:52:69:73:C8:97:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A04C731AB4EC6181666D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c8fa82d-c63d-346d-8e57-18d866c46917.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396590
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4c:73:1a:b4:ec:61:81:66:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=3da82210-3e11-42b8-8a85-1fb0fbd24079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:63:21:c4:19:31:61:10:20:22:97:bd:29:
                    a9:62:b6:a3:a4:4e:e3:da:43:02:22:f3:ea:66:97:
                    3b:cd:26:e4:09:a6:56:9d:e9:3a:c7:6b:d7:82:0e:
                    07:74:71:d2:7f:c0:de:4f:12:ba:20:6d:21:f9:8d:
                    08:35:a1:97:a4:0e:de:eb:95:15:02:fa:9e:6b:5d:
                    83:90:ce:3e:19:ca:4a:ef:09:df:bf:dc:ac:a6:a6:
                    c6:f9:eb:52:16:bc:d7:e5:b9:e9:89:20:fc:8d:fd:
                    78:63:12:7a:e7:81:7a:d3:3e:91:f6:a9:aa:1a:ef:
                    b5:88:5b:2d:38:dd:fb:a9:02:62:3f:cd:40:9d:fd:
                    97:86:54:01:78:bc:93:54:7f:4f:39:43:b5:a8:5a:
                    c5:61:7f:ba:44:66:9a:19:58:00:25:c1:7b:8a:6b:
                    7c:14:b3:ad:43:d9:7a:1c:39:41:4f:73:1b:05:76:
                    42:63:24:b9:ef:ea:10:bd:7d:fa:4d:2f:b9:57:b1:
                    91:fa:eb:0e:86:a4:48:d0:c0:66:12:01:ee:a4:56:
                    12:56:66:b0:d7:b5:d3:60:b0:35:8d:53:15:c7:78:
                    47:07:d5:ed:c2:15:e6:7c:50:ab:6b:ef:d0:b5:26:
                    e5:09:84:e5:7f:76:13:43:1e:29:6c:3c:66:6f:9c:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BD:5C:73:76:92:CD:78:DE:E9:38:A5:10:9B:52:69:73:C8:97:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c8fa82d-c63d-346d-8e57-18d866c46917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:68:84:dd:fb:16:35:bc:04:39:5c:d8:e1:4d:25:3c:e6:
         40:bd:83:7c:a0:39:a2:df:30:84:c4:4a:48:ea:fa:39:23:07:
         69:f5:89:12:86:c1:e2:63:c2:bc:86:09:81:9b:61:13:c0:b1:
         28:99:a8:c3:9e:05:f1:9a:f3:fc:a3:0f:71:7c:d8:6f:22:cc:
         01:8a:85:69:61:3f:50:da:97:07:b3:0e:1d:99:37:96:ba:d7:
         6f:5f:2c:45:00:34:ac:ae:2f:ca:f4:bc:76:c7:2e:3c:34:99:
         75:d7:ef:3e:67:0c:39:9a:11:2c:c0:a0:6f:2f:5f:0c:2e:bb:
         7d:6e:6f:be:0f:e0:06:a8:46:45:52:f6:74:02:22:3b:26:5d:
         a1:ae:78:9b:63:21:7a:f5:53:c0:7b:e5:93:5b:26:26:a1:ee:
         08:a8:f3:21:14:cf:6c:17:e7:71:3e:59:86:2b:68:30:7c:d7:
         b2:24:ee:0d:c0:c0:34:8c:4c:8e:bc:6e:56:76:0d:a6:f5:74:
         de:54:ea:e9:94:43:b7:78:d6:5a:55:8d:7a:a2:7e:cc:4a:39:
         3b:6f:a8:57:e6:0f:0d:45:ae:46:55:66:7a:ec:87:3e:5e:fb:
         c7:89:42:e6:bc:0b:37:8a:dd:b6:26:99:4a:5d:9f:a9:cb:97:
         31:19:fc:8d
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoExzGrTsYYFmbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
M2RhODIyMTAtM2UxMS00MmI4LThhODUtMWZiMGZiZDI0MDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhljIcQZMWEQICKXvSmpYrajpE7j2kMCIvPq
Zpc7zSbkCaZWnek6x2vXgg4HdHHSf8DeTxK6IG0h+Y0INaGXpA7e65UVAvqea12D
kM4+GcpK7wnfv9yspqbG+etSFrzX5bnpiSD8jf14YxJ654F60z6R9qmqGu+1iFst
ON37qQJiP81Anf2XhlQBeLyTVH9POUO1qFrFYX+6RGaaGVgAJcF7imt8FLOtQ9l6
HDlBT3MbBXZCYyS57+oQvX36TS+5V7GR+usOhqRI0MBmEgHupFYSVmaw17XTYLA1
jVMVx3hHB9XtwhXmfFCra+/QtSblCYTlf3YTQx4pbDxmb5xZlwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCS9XHN2ks143uk4pRCbUmlzyJc0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWM4ZmE4MmQtYzYzZC0z
NDZkLThlNTctMThkODY2YzQ2OTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQANtmiE3fsWNbwEOVzY4U0lPOZAvYN8oDmi3zCE
xEpI6vo5Iwdp9YkShsHiY8K8hgmBm2ETwLEomajDngXxmvP8ow9xfNhvIswBioVp
YT9Q2pcHsw4dmTeWutdvXyxFADSsri/K9Lx2xy48NJl11+8+Zww5mhEswKBvL18M
Lrt9bm++D+AGqEZFUvZ0AiI7Jl2hrnibYyF69VPAe+WTWyYmoe4IqPMhFM9sF+dx
PlmGK2gwfNeyJO4NwMA0jEyOvG5Wdg2m9XTeVOrplEO3eNZaVY16on7MSjk7b6hX
5g8NRa5GVWZ67Ic+XvvHiULmvAs3it22JplKXZ+py5cxGfyN
-----END CERTIFICATE-----