Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd02c8d-9f45-355b-b121-bdff99806ef6.roa
File:                     2fd02c8d-9f45-355b-b121-bdff99806ef6.roa (raw, json)
Hash identifier:          6UJPSHIBpklSIR0kNvsLJ4jCufQf91wGbjx8Z9KlYh4=
Subject key identifier:   AB:2F:01:F4:E0:34:AD:21:71:8E:D5:D0:8F:28:60:2F:17:6E:50:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848451579D2698CDA7FFF45B6E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd02c8d-9f45-355b-b121-bdff99806ef6.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     396585
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:79:d2:69:8c:da:7f:ff:45:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=a0790efc-8385-4c89-b1fb-ddd96f353088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:e3:69:8e:bc:72:39:95:ed:34:b2:60:08:
                    93:79:a1:84:fe:e5:6c:0f:1c:2f:41:93:ce:38:93:
                    f9:f0:43:95:ba:15:94:e3:41:5a:78:1d:7b:c0:3d:
                    9e:37:a5:86:4f:f9:aa:eb:bb:58:dd:ec:9a:6c:e7:
                    41:03:37:10:66:67:80:2e:51:89:28:fb:ae:f5:65:
                    d3:d7:f1:9a:83:13:dc:35:9f:bc:7d:ab:25:3a:98:
                    bb:45:ff:3a:0f:c4:5a:36:bb:88:34:28:47:27:fd:
                    e7:50:1e:1b:6a:b8:4e:d7:27:e3:dc:31:8a:61:0f:
                    a4:4a:5a:8e:22:f7:c6:09:e4:1a:82:e8:18:72:df:
                    4e:bb:fb:78:c6:0b:46:96:8e:58:be:4b:ff:f0:72:
                    a5:8b:09:88:b0:7d:95:af:c5:2d:42:3b:55:8a:83:
                    83:0f:ec:19:cb:ba:67:5e:f8:d5:eb:c9:b3:c8:51:
                    91:64:48:9c:fc:0a:f0:5c:de:5e:d9:88:16:72:0f:
                    36:41:8d:67:5b:5a:18:8e:5a:06:3c:2c:cc:41:4c:
                    2b:9a:6a:a4:9b:05:30:86:ee:15:8b:da:86:48:05:
                    87:60:b8:17:fb:cd:4d:b1:88:47:6e:fd:d5:00:f2:
                    b0:cf:79:20:a0:09:2f:81:7d:db:c1:b2:a8:97:fc:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2F:01:F4:E0:34:AD:21:71:8E:D5:D0:8F:28:60:2F:17:6E:50:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fd02c8d-9f45-355b-b121-bdff99806ef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:78:bf:4e:9b:b4:ff:73:57:07:c3:4e:d6:43:c0:57:eb:0b:
         2b:2f:f4:7f:50:46:79:21:11:38:74:68:e0:b2:89:4b:4c:b2:
         e3:d4:dd:99:d7:e0:9d:cf:82:97:6a:67:20:88:84:d4:97:f6:
         9e:59:df:c4:79:6a:28:62:50:c7:08:5b:86:83:c3:1e:dd:35:
         a1:bc:48:03:07:f9:eb:57:67:02:62:5e:bd:56:e0:36:cc:06:
         d4:26:30:db:6f:93:b6:71:14:38:6b:72:46:6c:00:7d:48:98:
         59:ae:03:a7:ef:1b:4c:b6:77:b8:30:a7:49:ab:92:8a:43:75:
         de:49:5f:d2:fe:b6:b0:0f:7a:d5:fc:c2:f2:bf:5b:f3:6a:de:
         df:af:18:ab:97:30:75:20:52:b7:7c:ab:19:e7:86:da:d1:f6:
         b7:a7:70:37:4e:a6:8b:e8:a1:7c:28:4f:d4:11:e2:0e:cf:90:
         e3:3b:0b:de:45:8f:12:8e:15:41:e4:29:cb:0e:3e:6b:80:0c:
         0b:15:72:b4:67:7e:c0:10:64:b6:fe:b4:c1:bf:a5:76:af:b6:
         66:8d:5f:a3:94:df:5c:42:fe:a3:32:37:32:98:3c:8f:0a:c9:
         e7:23:da:25:29:3a:0b:19:54:13:fd:7d:ca:02:78:39:22:4c:
         23:c5:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----