Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8c747-d14e-3794-b8d7-6f36751d5b98.roa
File:                     3db8c747-d14e-3794-b8d7-6f36751d5b98.roa (raw, json)
Hash identifier:          t7oyL2GgKwGt3wmyzp7MzOTwJgHyDdMQYeP9ZRw67rA=
Subject key identifier:   BB:F6:98:8C:9F:6B:AD:D9:E9:01:D5:CC:94:A7:52:92:36:C8:32:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAADBA72AB13D2B92A67F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8c747-d14e-3794-b8d7-6f36751d5b98.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     396541
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:db:a7:2a:b1:3d:2b:92:a6:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=33788ccf-21d9-41e3-9231-0e043bc28ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f2:44:de:22:44:1e:22:92:af:5e:ad:bd:03:
                    a1:cb:2e:20:b6:b9:cc:2f:7f:2d:87:f6:c3:ba:ec:
                    cb:7f:2d:1c:11:29:bb:cc:a1:29:07:6c:5e:79:64:
                    76:3b:ea:df:e9:88:6a:b8:7f:ca:ea:07:db:d4:68:
                    2b:c5:29:b0:e8:fa:e5:8e:df:02:53:9c:ca:9c:25:
                    88:c9:7f:47:ad:05:ef:9d:c8:5a:f3:23:26:c1:ff:
                    c6:68:27:df:a5:8b:aa:b6:7b:b1:79:49:95:70:19:
                    7b:96:7a:50:ba:10:4a:5d:4b:e4:26:b5:46:11:a3:
                    3a:1d:ab:ed:ce:e9:41:f7:12:94:e6:b4:86:cd:76:
                    9e:26:0d:2c:16:f5:95:12:b1:b5:e1:44:ac:65:e5:
                    0d:fd:bf:22:a8:f1:1b:8b:54:13:62:38:51:af:b3:
                    c3:2e:f2:3e:48:ba:4a:cc:06:22:7d:db:54:14:41:
                    d9:70:09:4b:4c:b2:18:c9:41:c6:3e:b5:b3:90:47:
                    1f:88:65:33:f8:30:72:fc:6f:83:ae:a3:5a:d8:44:
                    29:eb:13:ce:9e:3a:e3:05:77:6d:2b:d4:64:e6:33:
                    ae:b7:9e:ab:b5:a1:51:1c:b7:a1:93:70:26:7b:6b:
                    19:dc:a6:de:0d:fb:f1:3d:30:57:78:d5:b6:da:f6:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F6:98:8C:9F:6B:AD:D9:E9:01:D5:CC:94:A7:52:92:36:C8:32:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db8c747-d14e-3794-b8d7-6f36751d5b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:5f:13:4b:b1:50:7d:cd:bb:c9:d5:17:d8:2f:7c:cb:e4:
         28:51:23:37:3a:87:95:36:a6:bf:5b:f6:41:54:53:6a:0c:2b:
         d3:f8:82:40:12:11:ab:af:81:16:75:b4:dc:38:b9:64:a9:70:
         d7:ec:41:b5:e7:9e:f2:0a:97:c1:f8:7c:3a:48:f6:7d:12:62:
         cd:41:21:47:4c:72:53:26:eb:7a:e0:06:e2:11:43:04:56:f2:
         3b:38:ea:59:14:f8:d9:1c:a0:63:e5:a1:57:73:96:6b:03:6d:
         85:0d:ec:82:7a:2e:76:3f:aa:04:e4:9c:07:d8:ab:7f:dd:5a:
         b4:86:70:43:bc:c0:0f:ae:4c:62:25:e1:69:18:57:08:5c:54:
         27:99:b7:2b:bf:98:ba:60:fa:18:1e:0e:8d:ce:c8:f4:fa:1f:
         77:b9:33:fd:77:7d:93:72:85:5c:53:95:38:4c:8f:ca:0f:66:
         3c:70:70:c3:03:74:f6:4e:82:51:b6:0f:c5:df:62:9b:c3:b3:
         16:7e:80:b9:51:bb:63:8e:44:db:02:dd:ed:48:64:ac:6e:2c:
         de:d0:30:55:57:fe:f7:a0:d9:5a:83:00:d0:21:a2:fa:99:bd:
         62:f9:2c:13:c0:7b:45:91:06:b7:0b:32:3c:26:25:a5:1b:2c:
         1c:d9:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----