Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3668a0bf-f4b0-30af-8663-b9226839d3ea.roa
File:                     3668a0bf-f4b0-30af-8663-b9226839d3ea.roa (raw, json)
Hash identifier:          +sv7tm5uTLFwYPEkUo1Vm9wg7M/PDFiTypq9XuTOm3Y=
Subject key identifier:   ED:26:1E:FA:18:97:77:81:6F:9C:9D:BF:0A:B3:01:4A:28:A1:40:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAAD977B43ED41CB06BB740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3668a0bf-f4b0-30af-8663-b9226839d3ea.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     397212
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:d9:77:b4:3e:d4:1c:b0:6b:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=08024754-5b1e-41da-b27b-255fa52bddda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e9:e1:56:ae:b2:67:d7:24:83:af:68:e2:d4:
                    56:58:0d:98:fb:8e:4c:fd:fa:c7:cf:bf:b6:d1:fb:
                    07:c4:39:ed:2f:28:dc:76:fd:4f:f4:5a:d7:bc:a6:
                    d8:55:46:bc:f8:0d:d9:8a:07:93:d5:c4:39:ab:43:
                    89:0f:68:ee:66:63:de:c9:6f:9a:04:61:2b:78:db:
                    2f:5d:f2:da:34:7a:c9:7a:ef:19:0c:22:32:51:bf:
                    a7:73:af:5f:f5:ab:eb:eb:f4:f3:ac:ef:cd:1f:e5:
                    0a:c6:30:e5:21:ea:ec:ca:af:40:fc:bc:1b:ec:03:
                    94:f2:e0:13:17:ef:b3:c3:40:c9:56:77:83:db:bd:
                    29:ae:2f:c3:d2:89:74:bb:ba:5a:da:03:9c:54:8c:
                    a0:90:d8:9a:64:9f:0c:3f:80:e5:77:90:77:d3:47:
                    b6:72:f3:bd:c9:f5:ab:fe:fb:3e:37:a4:6f:a2:d9:
                    30:66:13:9c:6b:a5:d0:2d:2e:cf:58:28:89:29:19:
                    3b:a8:f2:a9:7b:97:c9:43:7e:55:71:fa:48:b6:09:
                    69:ee:fb:9c:59:45:9f:47:27:86:f4:f7:0c:2a:f8:
                    77:b5:3e:28:f0:ba:72:90:58:b6:aa:a8:ab:ee:d4:
                    64:b0:89:8c:cb:82:90:98:bb:be:83:c5:eb:8d:4d:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:26:1E:FA:18:97:77:81:6F:9C:9D:BF:0A:B3:01:4A:28:A1:40:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3668a0bf-f4b0-30af-8663-b9226839d3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:77:eb:8b:28:86:fc:65:65:0c:96:8f:98:5f:08:38:37:
         36:ca:22:f1:86:7f:6e:b4:96:39:db:af:74:94:13:76:94:49:
         8a:38:dd:f1:c7:44:4b:98:19:9e:28:5c:76:fc:32:78:46:d7:
         10:38:36:e4:60:f6:ef:9b:4b:76:3f:11:97:7b:97:09:ae:b7:
         0d:1d:99:de:90:2b:55:cc:c5:d2:8b:99:e5:82:8c:3c:d7:8e:
         17:0c:47:01:2d:64:d2:04:9f:fa:03:b7:54:24:83:e1:32:c4:
         47:e7:06:fa:1b:33:8c:5e:c9:af:47:f3:9f:03:1a:22:1a:88:
         c0:ab:09:4e:25:8e:86:af:d9:db:54:68:7c:0c:13:57:e8:bf:
         88:12:a7:51:81:32:0f:da:7c:99:70:0b:9e:b0:72:f9:c4:ad:
         1c:59:32:0d:69:57:86:5b:c7:d0:d0:c8:bf:dd:34:44:94:4e:
         d8:92:1a:45:07:50:9b:72:ae:05:2e:b3:0a:c9:d0:0f:e9:30:
         2c:0f:d0:58:3d:8f:f8:7a:f1:dc:e8:eb:79:41:d3:26:43:ad:
         00:be:93:14:1e:8f:27:88:97:22:1a:90:24:82:1d:52:ca:de:
         75:09:6e:32:22:e2:12:ae:10:ed:c5:c4:18:b9:08:48:39:11:
         87:ba:8c:c7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtl3tD7UHLBrt0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
MDgwMjQ3NTQtNWIxZS00MWRhLWIyN2ItMjU1ZmE1MmJkZGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgenhVq6yZ9ckg69o4tRWWA2Y+45M/frHz7+2
0fsHxDntLyjcdv1P9FrXvKbYVUa8+A3ZigeT1cQ5q0OJD2juZmPeyW+aBGEreNsv
XfLaNHrJeu8ZDCIyUb+nc69f9avr6/TzrO/NH+UKxjDlIersyq9A/Lwb7AOU8uAT
F++zw0DJVneD270pri/D0ol0u7pa2gOcVIygkNiaZJ8MP4Dld5B300e2cvO9yfWr
/vs+N6RvotkwZhOca6XQLS7PWCiJKRk7qPKpe5fJQ35VcfpItglp7vucWUWfRyeG
9PcMKvh3tT4o8LpykFi2qqir7tRksImMy4KQmLu+g8XrjU1IswIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO0mHvoYl3eBb5ydvwqzAUoooUDBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzY2OGEwYmYtZjRiMC0z
MGFmLTg2NjMtYjkyMjY4MzlkM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB1HHfriyiG/GVlDJaPmF8IODc2yiLxhn9utJY5
2690lBN2lEmKON3xx0RLmBmeKFx2/DJ4RtcQODbkYPbvm0t2PxGXe5cJrrcNHZne
kCtVzMXSi5nlgow8144XDEcBLWTSBJ/6A7dUJIPhMsRH5wb6GzOMXsmvR/OfAxoi
GojAqwlOJY6Gr9nbVGh8DBNX6L+IEqdRgTIP2nyZcAuesHL5xK0cWTINaVeGW8fQ
0Mi/3TRElE7YkhpFB1Cbcq4FLrMKydAP6TAsD9BYPY/4evHc6Ot5QdMmQ60AvpMU
Ho8niJciGpAkgh1Syt51CW4yIuISrhDtxcQYuQhIORGHuozH
-----END CERTIFICATE-----