Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/387dcbbd-7246-3ae7-bab7-dfb48f94431d.roa
File:                     387dcbbd-7246-3ae7-bab7-dfb48f94431d.roa (raw, json)
Hash identifier:          /9IevXgGlrNSO616Sc1G3kI3VAq4tiNqoRnO99wF4xQ=
Subject key identifier:   2E:78:0B:2E:1D:A8:19:A5:0C:30:FB:6B:C2:C7:1B:11:23:DB:46:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530AFE90F6604710C1543000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/387dcbbd-7246-3ae7-bab7-dfb48f94431d.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     396575
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:fe:90:f6:60:47:10:c1:54:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=e1020f5b-0f57-48c5-99e6-5aa3fba257b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:db:5b:4d:50:c0:dc:6f:88:05:b8:74:a3:
                    a6:dc:58:00:a2:7b:24:34:4e:6a:4a:34:57:c0:e6:
                    57:b7:f6:30:b8:2d:33:f6:9a:a7:ba:5b:32:a9:77:
                    2d:87:8a:28:b5:d6:05:31:7e:22:1a:74:e6:49:38:
                    5e:ca:89:6e:9b:07:71:e4:36:82:bc:47:93:d2:a9:
                    f6:27:a8:09:36:1e:49:16:fe:f4:d7:75:7b:2f:04:
                    53:c6:31:ad:45:4e:50:12:be:5d:79:1d:81:31:ad:
                    ee:37:64:a7:31:f1:1c:e5:55:a3:c9:4c:81:60:13:
                    56:71:49:5b:ec:19:a5:45:c5:93:5c:b6:c4:ee:9b:
                    7e:41:83:86:00:0a:17:8a:22:16:f9:f3:a0:5c:1a:
                    a5:ed:3b:ad:d2:90:aa:2e:b6:89:9c:74:dd:8a:a5:
                    20:c9:d6:9b:0b:df:2f:c1:9f:6a:c7:14:3c:45:8f:
                    d3:ba:fe:a0:b4:9f:d5:e8:00:b7:b8:4e:15:79:b7:
                    a7:d9:11:02:21:f8:be:23:4e:06:31:11:28:fc:4b:
                    50:7b:37:bf:ff:6f:55:c7:69:98:ec:fd:52:a3:ec:
                    b1:6c:7a:4e:65:cc:a8:ba:52:09:8c:bb:a6:ad:ea:
                    7d:65:65:3c:be:02:13:83:b8:09:3e:d6:d7:42:d8:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:78:0B:2E:1D:A8:19:A5:0C:30:FB:6B:C2:C7:1B:11:23:DB:46:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/387dcbbd-7246-3ae7-bab7-dfb48f94431d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8f:dd:8a:7a:72:58:19:71:bc:40:25:f5:61:7f:c0:79:f2:
         3b:33:ce:2c:39:62:b1:22:f4:bf:fb:d2:43:c0:dc:b6:43:59:
         5c:6a:cb:47:aa:ed:99:9b:4a:8e:41:01:e7:c8:60:66:e3:7c:
         5d:a0:db:0f:db:16:f0:9a:3a:c6:8a:c9:ad:b0:73:81:1f:82:
         20:20:05:04:c9:3d:83:75:4a:96:15:af:11:9d:16:57:bd:8c:
         1d:dc:d1:3d:49:47:1a:68:b1:22:ea:ec:cf:e1:59:c3:54:65:
         ae:21:42:49:75:24:05:de:ca:37:3c:c0:66:84:ed:47:76:a1:
         9a:a2:e0:d8:7f:8f:d4:3c:8b:8d:76:bc:72:7f:c8:ae:47:de:
         f4:9f:09:ac:14:56:fe:f0:5e:de:cd:d6:4c:eb:4c:3e:53:09:
         84:9c:9d:24:4d:2f:7b:03:31:1b:6a:b7:83:d2:a4:8f:8c:69:
         2f:39:25:e6:75:d1:38:f3:10:be:af:7c:8f:29:26:0d:17:55:
         70:5d:14:4f:6e:1b:51:a9:03:fe:66:44:7e:32:b7:ef:df:7f:
         fc:e2:9a:e2:14:e1:6d:60:13:bb:db:a2:b0:61:df:1a:f8:31:
         d3:ec:57:24:7c:6e:37:31:74:f4:29:2d:4e:ac:a4:31:e4:1e:
         3a:9f:47:3b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhTCv6Q9mBHEMFUMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTEwMjBmNWItMGY1Ny00OGM1LTk5ZTYtNWFhM2ZiYTI1N2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnzbW01QwNxviAW4dKOm3FgAonskNE5qSjRX
wOZXt/YwuC0z9pqnulsyqXcth4ootdYFMX4iGnTmSTheyolumwdx5DaCvEeT0qn2
J6gJNh5JFv7013V7LwRTxjGtRU5QEr5deR2BMa3uN2SnMfEc5VWjyUyBYBNWcUlb
7BmlRcWTXLbE7pt+QYOGAAoXiiIW+fOgXBql7Tut0pCqLraJnHTdiqUgydabC98v
wZ9qxxQ8RY/Tuv6gtJ/V6AC3uE4Veben2RECIfi+I04GMREo/EtQeze//29Vx2mY
7P1So+yxbHpOZcyoulIJjLumrep9ZWU8vgITg7gJPtbXQtgNMQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFC54Cy4dqBmlDDD7a8LHGxEj20Z+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg3ZGNiYmQtNzI0Ni0z
YWU3LWJhYjctZGZiNDhmOTQ0MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAhj92KenJYGXG8QCX1YX/AefI7M84sOWKxIvS/
+9JDwNy2Q1lcastHqu2Zm0qOQQHnyGBm43xdoNsP2xbwmjrGismtsHOBH4IgIAUE
yT2DdUqWFa8RnRZXvYwd3NE9SUcaaLEi6uzP4VnDVGWuIUJJdSQF3so3PMBmhO1H
dqGaouDYf4/UPIuNdrxyf8iuR970nwmsFFb+8F7ezdZM60w+UwmEnJ0kTS97AzEb
areD0qSPjGkvOSXmddE48xC+r3yPKSYNF1VwXRRPbhtRqQP+ZkR+Mrfv33/84pri
FOFtYBO726KwYd8a+DHT7FckfG43MXT0KS1OrKQx5B46n0c7
-----END CERTIFICATE-----