Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25a3a0f4-a4ec-3414-85ea-324d44ca31d9.roa
File:                     25a3a0f4-a4ec-3414-85ea-324d44ca31d9.roa (raw, json)
Hash identifier:          GOyZuqKeOUrSTtI3RuSRdbtvEh6xdu+KIZmCQ6pIdB0=
Subject key identifier:   4D:F9:8D:F2:C4:55:E0:BC:B3:16:D4:87:75:6A:37:1D:FA:E7:E1:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842432DEA5BAB700AFEF5BC60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25a3a0f4-a4ec-3414-85ea-324d44ca31d9.roa
Signing time:             Thu 19 Dec 2024 13:45:36 +0000
ROA not before:           Thu 19 Dec 2024 13:45:36 +0000
ROA not after:            Wed 19 Mar 2025 12:45:36 +0000
asID:                     397195
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:2d:ea:5b:ab:70:0a:fe:f5:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:36 2024 GMT
            Not After : Mar 19 12:45:36 2025 GMT
        Subject: CN=cfb89518-9e37-46c1-aedd-0c79013f0031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:63:24:88:57:c1:b1:9d:95:44:05:67:10:
                    74:c1:5e:6d:41:70:df:ea:82:d0:4f:4e:c4:f7:6b:
                    c2:aa:73:59:e9:c2:e0:2b:3d:2a:35:d5:40:ad:77:
                    2d:a3:cb:00:ed:d1:99:3c:4f:a1:07:e9:5f:35:31:
                    39:43:70:19:04:16:8d:1e:3e:61:22:d9:0a:2b:b8:
                    b5:30:2b:f7:c3:0f:07:9d:05:13:69:53:20:9a:28:
                    12:51:d0:d7:b9:68:8e:96:c3:1c:3b:35:ca:87:f4:
                    7b:1f:23:2c:5f:a1:20:d3:92:3c:61:3a:f9:f9:2f:
                    17:17:cf:b3:bb:f5:db:e5:69:11:d0:51:7b:a2:01:
                    00:23:16:dc:7f:06:ad:91:37:8c:9c:36:5f:fd:2c:
                    be:37:b0:91:bd:7e:f5:ea:84:27:b4:1f:55:d8:a2:
                    b8:58:32:f7:65:e2:36:c8:70:66:6f:ab:c9:16:3b:
                    46:ae:d0:77:29:0c:90:66:9b:f3:7f:c7:39:5c:b1:
                    3a:eb:76:3a:56:bd:01:06:b6:78:ca:2a:2f:48:fd:
                    70:e7:e7:6c:a7:91:65:fe:62:f0:82:80:1f:6a:19:
                    9c:6d:f5:a5:17:52:79:98:c3:6e:26:6a:88:5e:dc:
                    f5:47:64:cd:fb:50:3b:1b:ab:2c:9b:36:4f:af:a1:
                    00:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:8D:F2:C4:55:E0:BC:B3:16:D4:87:75:6A:37:1D:FA:E7:E1:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25a3a0f4-a4ec-3414-85ea-324d44ca31d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f2:31:02:9c:c9:c5:ac:da:8f:56:dc:db:a9:c9:96:f4:0e:
         7d:f0:95:e0:14:64:b0:17:e4:b2:9e:b4:31:63:bd:c0:32:ee:
         f9:ca:5d:16:7a:74:e6:c4:f1:b7:db:9a:87:85:ca:02:4f:ff:
         4e:2f:66:7d:45:cb:a5:ab:a1:b0:5b:ff:94:33:1c:99:f6:e5:
         b3:b4:a4:de:60:31:27:c5:98:27:d8:ac:96:d8:59:4b:33:d8:
         2e:52:ab:0c:ae:cc:24:44:c3:02:62:db:35:4a:be:a0:32:3c:
         a1:3f:40:07:3a:76:87:45:24:36:0e:f5:be:fa:a6:91:db:60:
         b2:ac:84:1f:47:29:b4:48:6d:b5:5e:70:32:a6:84:43:9d:d5:
         69:8c:43:9d:8e:ab:fa:e0:c1:3e:34:33:ca:6f:12:14:44:6f:
         06:68:c5:18:4f:d7:bb:32:70:10:fd:7d:c8:52:ec:c8:ae:23:
         16:7a:84:c5:14:16:96:1d:56:84:42:ab:07:dc:e0:1b:96:9b:
         1f:19:5a:e1:f9:e6:58:55:31:f0:42:80:0f:52:22:95:c9:5e:
         dc:63:b8:44:6d:ff:97:fa:75:d6:bc:60:44:0b:86:61:e9:28:
         c5:03:19:53:64:99:5b:5b:e8:00:c6:a5:d3:4e:cd:f4:e5:bb:
         e6:2c:ea:fb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQy3qW6twCv71vGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUzNloXDTI1MDMxOTEyNDUzNlowLzEtMCsGA1UEAxMk
Y2ZiODk1MTgtOWUzNy00NmMxLWFlZGQtMGM3OTAxM2YwMDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfdjJIhXwbGdlUQFZxB0wV5tQXDf6oLQT07E
92vCqnNZ6cLgKz0qNdVArXcto8sA7dGZPE+hB+lfNTE5Q3AZBBaNHj5hItkKK7i1
MCv3ww8HnQUTaVMgmigSUdDXuWiOlsMcOzXKh/R7HyMsX6Eg05I8YTr5+S8XF8+z
u/Xb5WkR0FF7ogEAIxbcfwatkTeMnDZf/Sy+N7CRvX716oQntB9V2KK4WDL3ZeI2
yHBmb6vJFjtGrtB3KQyQZpvzf8c5XLE663Y6Vr0BBrZ4yiovSP1w5+dsp5Fl/mLw
goAfahmcbfWlF1J5mMNuJmqIXtz1R2TN+1A7G6ssmzZPr6EAlQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE35jfLEVeC8sxbUh3VqNx365+HxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVhM2EwZjQtYTRlYy0z
NDE0LTg1ZWEtMzI0ZDQ0Y2EzMWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBh8jECnMnFrNqPVtzbqcmW9A598JXgFGSwF+Sy
nrQxY73AMu75yl0WenTmxPG325qHhcoCT/9OL2Z9Rculq6GwW/+UMxyZ9uWztKTe
YDEnxZgn2KyW2FlLM9guUqsMrswkRMMCYts1Sr6gMjyhP0AHOnaHRSQ2DvW++qaR
22CyrIQfRym0SG21XnAypoRDndVpjEOdjqv64ME+NDPKbxIURG8GaMUYT9e7MnAQ
/X3IUuzIriMWeoTFFBaWHVaEQqsH3OAblpsfGVrh+eZYVTHwQoAPUiKVyV7cY7hE
bf+X+nXWvGBEC4Zh6SjFAxlTZJlbW+gAxqXTTs305bvmLOr7
-----END CERTIFICATE-----