Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa
File:                     201187f7-8f78-3dca-bf5c-f203d896dd90.roa (raw, json)
Hash identifier:          1ISvITaZiqY+uAdOlTqASjgS0arKKuHBKgLgb4wweRc=
Subject key identifier:   32:A7:63:2E:37:CB:93:29:BF:99:DD:B0:FC:5A:D7:00:8E:9A:11:F0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584837200ECEFBE5F5CC8BBFF6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     396547
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:0e:ce:fb:e5:f5:cc:8b:bf:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=e7e6b74f-5053-4308-9b05-9b924c8cc822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:60:28:f1:b4:c7:8e:12:aa:91:68:a6:34:f8:
                    98:01:49:ea:36:0e:93:aa:ca:98:b6:02:3b:9d:10:
                    a8:e9:e0:c4:1d:65:8f:b4:41:28:55:5a:dd:b1:54:
                    09:df:79:9a:ae:58:e8:f4:d2:46:d8:65:f2:e0:28:
                    02:75:fa:43:39:77:58:4a:76:c2:23:2d:74:a6:59:
                    71:bb:ba:35:7c:7d:3a:d5:81:4e:04:53:20:0b:83:
                    d8:85:d8:76:de:5c:13:0d:14:4f:a1:7a:66:32:5f:
                    f9:6b:c9:98:29:58:4e:58:66:30:44:ba:ed:fe:0f:
                    37:3e:a2:3f:0b:e6:84:5a:c4:2d:8e:1e:ea:f4:c5:
                    c9:ef:92:a2:de:74:91:3b:22:ed:4c:64:c7:c4:61:
                    df:dd:72:fb:57:c3:08:68:b2:18:ff:f7:78:6f:b3:
                    6a:24:91:e5:87:7d:49:a8:cf:0d:af:28:ed:d6:c7:
                    13:28:1b:22:de:1d:d8:aa:6b:05:56:b8:80:11:41:
                    67:fb:3e:d8:36:2e:91:67:93:8e:dc:8d:fe:36:05:
                    8d:0c:bf:6f:ee:f6:bb:c2:f2:43:67:8e:52:93:b5:
                    dc:00:04:6e:42:54:5c:05:b9:30:c8:6b:08:a2:ac:
                    db:77:95:0a:e4:2c:d2:4d:b9:9b:15:c9:89:95:1b:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:63:2E:37:CB:93:29:BF:99:DD:B0:FC:5A:D7:00:8E:9A:11:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:f8:1f:08:fc:98:db:ea:e1:21:cf:80:a9:39:64:a7:92:
         79:01:28:e6:9e:de:d3:b9:c7:e5:ce:51:40:82:a4:38:b9:78:
         45:1d:e9:bb:29:25:7c:9f:37:c5:65:08:0f:3d:bf:20:97:6c:
         d3:e2:e5:4f:f7:cb:02:fe:d9:49:0f:62:27:dc:35:b2:5c:dd:
         af:97:17:8b:07:65:ed:a6:1a:1b:3b:43:24:f5:f7:e3:bb:b8:
         87:ee:f6:bc:5e:a4:65:bd:d5:be:37:0a:9c:41:37:fa:7f:0e:
         c6:de:40:b7:92:3f:68:f2:08:f7:f6:e1:fe:16:14:8b:4a:9d:
         0f:47:b8:0d:c6:b2:ba:72:1a:99:9f:10:ba:11:49:d3:17:16:
         50:8c:5a:fd:8d:3c:11:b8:56:81:ac:95:fd:fc:c7:90:88:2f:
         58:0f:fa:ae:de:78:f2:eb:2e:f1:ea:b7:d4:b0:0a:5d:51:6a:
         db:52:f0:93:9a:cc:d8:a7:7a:d5:80:8f:d7:21:73:a1:96:95:
         21:a3:ab:a3:74:62:eb:58:32:92:8b:36:8c:41:86:4b:35:2e:
         2a:29:7d:51:d0:f8:fc:bf:8e:38:90:1b:71:a8:99:aa:e6:bb:
         df:6b:43:2a:34:63:5b:21:1c:b4:fe:83:d7:54:aa:07:56:a0:
         68:2d:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----