Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa
File:                     210d4d14-2a06-3f69-b6aa-fef29ada604f.roa (raw, json)
Hash identifier:          hS98i3p0lUx3uL3OQr39R4BYOI1lRojTQ5QFqzdw6uQ=
Subject key identifier:   0B:76:A7:66:ED:0D:70:CD:9E:66:0E:3A:01:1C:F1:91:53:D1:C8:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB73B10F72D3E7AA1F2280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396563
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:73:b1:0f:72:d3:e7:aa:1f:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=5adbae2e-1b64-43b1-832b-8fad3f93c6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:5b:63:b5:fa:59:bf:c6:45:6b:ca:b6:17:
                    aa:f4:b1:90:9b:e3:43:7e:ad:20:21:ce:38:04:56:
                    a8:5c:02:eb:ae:b1:5e:62:14:79:0e:df:09:fb:e1:
                    14:7b:e8:9c:0b:99:26:5b:f6:a1:9e:bd:e3:c4:a1:
                    b4:0a:a1:aa:77:cd:fc:44:93:a2:72:7b:70:4f:a8:
                    98:2e:df:73:26:d7:91:4a:4a:6d:60:2b:f7:5a:5f:
                    43:8d:c7:2b:08:45:3a:1c:66:44:f9:8b:20:12:85:
                    7c:eb:53:27:d5:5d:1a:61:40:ee:b4:00:c7:d7:28:
                    2d:62:cc:fb:f2:74:41:b5:fb:38:36:3b:d9:36:e1:
                    a7:1b:57:85:84:fb:34:9f:04:3a:72:44:23:0c:45:
                    6f:e8:e2:25:89:b0:35:85:dc:88:24:e3:fe:b1:88:
                    42:ee:aa:a0:ef:3f:99:3c:3b:51:77:9c:58:44:52:
                    a2:ec:3a:03:d8:cb:0c:4c:43:8d:64:df:8b:d8:cb:
                    2b:7f:88:02:07:b3:0f:e5:96:d7:eb:4f:ce:96:1f:
                    f6:7d:63:47:d2:cc:6c:50:74:24:3a:f8:74:7c:32:
                    c9:51:97:2b:79:ec:0f:2a:13:ff:15:dd:94:c3:0b:
                    df:98:2e:fa:62:43:63:cc:76:e5:0a:d5:fd:b5:23:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:76:A7:66:ED:0D:70:CD:9E:66:0E:3A:01:1C:F1:91:53:D1:C8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:60:d1:92:6d:d4:c9:0b:31:4f:ce:6c:5c:b5:6b:65:77:3e:
         95:1a:40:b8:74:a4:21:54:b2:f0:71:fc:d2:1d:7d:bd:72:ec:
         e4:da:a5:eb:b9:fd:4c:96:9e:c4:3d:f0:aa:56:c7:41:f5:0d:
         7d:90:52:3e:5b:1e:12:b9:be:4e:37:08:58:02:79:cb:39:19:
         b7:1d:07:c7:cf:0d:23:22:1c:2e:3b:66:39:9d:3d:40:b4:ec:
         2a:70:f9:3d:2e:c2:cb:ce:9e:21:ee:b7:89:c8:ae:9a:55:14:
         c7:f3:78:29:31:3d:0c:f1:d1:51:d7:09:a9:8a:50:c8:a9:ec:
         7f:5c:3d:da:47:df:05:b3:97:71:82:85:7c:22:b2:56:58:d3:
         22:b5:80:b2:21:36:31:5c:ce:b3:9c:c2:61:fc:e4:6c:61:90:
         4f:b7:a5:42:61:e0:29:48:de:4d:45:e7:79:f3:c5:f9:65:34:
         fe:79:b3:6c:b7:8d:9b:4a:0f:69:f7:90:6d:69:db:6c:54:0b:
         f1:0e:00:1c:67:1e:5a:89:96:84:9e:50:05:59:46:e8:64:8b:
         f4:43:13:32:16:8a:7a:11:67:a2:6c:64:b2:03:2b:3b:f0:e0:
         59:f7:e1:b3:d7:d0:d5:b7:d7:15:dd:6c:a6:20:e2:61:63:7e:
         d8:ad:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----