Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42c51424-fe15-36c1-93f4-e254a5468829.roa
File:                     42c51424-fe15-36c1-93f4-e254a5468829.roa (raw, json)
Hash identifier:          0/4KhWxDtRlHWzf20/4T2Q2n3zz0H3y1AQzXVeyrUts=
Subject key identifier:   70:6E:48:6F:3F:82:F1:91:65:EB:81:60:D5:D7:0E:B5:CD:51:FA:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424334264C676B7E5A235380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42c51424-fe15-36c1-93f4-e254a5468829.roa
Signing time:             Thu 19 Dec 2024 13:45:39 +0000
ROA not before:           Thu 19 Dec 2024 13:45:39 +0000
ROA not after:            Wed 19 Mar 2025 12:45:39 +0000
asID:                     396540
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:34:26:4c:67:6b:7e:5a:23:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:39 2024 GMT
            Not After : Mar 19 12:45:39 2025 GMT
        Subject: CN=2b54dec8-eb82-444c-86e4-9ef762f53ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:15:20:cb:96:a2:6e:ab:9c:0a:47:e4:61:
                    4d:43:d3:8e:0a:c8:54:5d:25:a4:17:92:45:4f:c4:
                    31:9b:47:41:de:d0:d0:e6:cc:74:32:71:70:a7:06:
                    86:53:4d:3a:34:3b:d9:4c:f2:27:79:ed:62:a2:68:
                    9f:2f:a2:f1:8e:82:0e:65:0e:45:f6:8c:a4:0a:b9:
                    62:e7:9e:03:3d:02:25:fc:1b:04:9e:db:51:c1:7e:
                    16:ec:a9:8b:4a:f9:d2:a7:38:f1:19:b6:7e:95:d8:
                    d3:33:36:58:13:55:13:1b:79:88:45:b6:03:97:39:
                    19:1e:9a:e1:33:31:68:db:c8:ba:ef:22:9a:ab:69:
                    fa:05:6a:85:64:0c:98:89:86:70:79:83:12:4d:65:
                    7b:4e:c6:d3:75:af:a1:55:6a:32:af:61:e6:36:de:
                    ea:3f:ae:20:74:dc:e8:9c:ff:37:72:20:70:e9:41:
                    e4:39:b0:69:80:ac:0c:61:28:c8:6e:50:6a:8a:dd:
                    88:b6:25:97:07:4f:13:d3:dc:59:0c:9b:9d:f5:b8:
                    c3:0a:3d:d0:e6:55:7d:1e:4e:53:fb:f5:a9:aa:01:
                    5e:b4:75:06:c8:4f:44:c5:a5:ff:c1:de:7a:65:cc:
                    c1:3d:1a:b2:04:63:2d:9a:34:e9:bc:f9:10:01:1f:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6E:48:6F:3F:82:F1:91:65:EB:81:60:D5:D7:0E:B5:CD:51:FA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42c51424-fe15-36c1-93f4-e254a5468829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:76:c5:77:6c:ef:ff:3e:c0:ee:3a:cc:fb:e4:67:68:98:4c:
         57:d1:d9:4a:65:86:21:74:fa:f6:e3:ba:04:11:ca:86:f9:2a:
         ca:9a:f2:da:44:30:0f:cd:0d:27:ac:0b:1d:6c:2c:7d:74:bf:
         77:4d:89:e2:ef:ad:ce:0d:83:ae:ac:bf:44:38:25:f0:5a:31:
         9d:76:cd:55:db:d3:de:9b:32:dc:0e:dc:55:14:ca:8e:1f:10:
         1c:58:77:6c:3d:35:bf:e2:53:e6:bb:5e:bf:49:41:45:44:98:
         61:45:67:4f:88:02:19:b3:9e:d3:68:ef:d9:14:dc:22:1d:9d:
         84:b8:89:50:3e:d8:76:78:9a:a2:a9:8b:7d:48:38:85:bb:29:
         4a:dd:8b:80:92:e2:70:df:94:e1:29:1f:f3:86:e2:01:1c:b7:
         81:39:08:9e:34:2d:11:c4:00:c9:55:a3:11:54:fe:08:c8:d2:
         f5:a6:2c:9a:e0:6d:ff:63:bb:06:ef:06:ae:f8:71:5a:b7:3c:
         25:c4:8a:7f:e2:d6:83:41:50:b4:03:8f:ee:23:6c:5d:02:62:
         16:0a:93:8a:bb:a2:61:9c:a2:13:8b:a2:3e:81:ae:53:20:c5:
         2a:5f:db:45:3b:b7:2e:cc:6c:9a:b6:e0:ce:98:f6:c0:c6:f2:
         d2:36:70:29
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQzQmTGdrflojU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUzOVoXDTI1MDMxOTEyNDUzOVowLzEtMCsGA1UEAxMk
MmI1NGRlYzgtZWI4Mi00NDRjLTg2ZTQtOWVmNzYyZjUzYWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiYVIMuWom6rnApH5GFNQ9OOCshUXSWkF5JF
T8Qxm0dB3tDQ5sx0MnFwpwaGU006NDvZTPInee1iomifL6LxjoIOZQ5F9oykCrli
554DPQIl/BsEnttRwX4W7KmLSvnSpzjxGbZ+ldjTMzZYE1UTG3mIRbYDlzkZHprh
MzFo28i67yKaq2n6BWqFZAyYiYZweYMSTWV7TsbTda+hVWoyr2HmNt7qP64gdNzo
nP83ciBw6UHkObBpgKwMYSjIblBqit2ItiWXB08T09xZDJud9bjDCj3Q5lV9Hk5T
+/WpqgFetHUGyE9ExaX/wd56ZczBPRqyBGMtmjTpvPkQAR+24QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHBuSG8/gvGRZeuBYNXXDrXNUfq/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDJjNTE0MjQtZmUxNS0z
NmMxLTkzZjQtZTI1NGE1NDY4ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBydsV3bO//PsDuOsz75GdomExX0dlKZYYhdPr2
47oEEcqG+SrKmvLaRDAPzQ0nrAsdbCx9dL93TYni763ODYOurL9EOCXwWjGdds1V
29PemzLcDtxVFMqOHxAcWHdsPTW/4lPmu16/SUFFRJhhRWdPiAIZs57TaO/ZFNwi
HZ2EuIlQPth2eJqiqYt9SDiFuylK3YuAkuJw35ThKR/zhuIBHLeBOQieNC0RxADJ
VaMRVP4IyNL1piya4G3/Y7sG7wau+HFatzwlxIp/4taDQVC0A4/uI2xdAmIWCpOK
u6JhnKITi6I+ga5TIMUqX9tFO7cuzGyatuDOmPbAxvLSNnAp
-----END CERTIFICATE-----