Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a1629f1-31ab-39be-93be-e9e824b6120d.roa
File:                     4a1629f1-31ab-39be-93be-e9e824b6120d.roa (raw, json)
Hash identifier:          gSHMM3if2YO/W21TQzR1fiAqQ9QQdTREUg4bH1zevlk=
Subject key identifier:   D4:36:DB:7F:3F:66:0B:37:67:AF:7B:15:7E:88:D6:3D:61:F0:F1:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424312C04F15C434C9EC9E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a1629f1-31ab-39be-93be-e9e824b6120d.roa
Signing time:             Thu 19 Dec 2024 13:45:23 +0000
ROA not before:           Thu 19 Dec 2024 13:45:23 +0000
ROA not after:            Wed 19 Mar 2025 12:45:23 +0000
asID:                     36624
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:12:c0:4f:15:c4:34:c9:ec:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:23 2024 GMT
            Not After : Mar 19 12:45:23 2025 GMT
        Subject: CN=353f294e-d99e-459c-9ea0-a30a86850e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:8b:de:05:41:49:25:55:ce:06:d3:5b:97:
                    d5:36:6b:28:aa:28:96:2d:44:4b:24:7f:9c:33:03:
                    37:62:8e:ed:3f:24:22:fa:40:bb:2a:b9:16:61:6e:
                    65:ac:bd:50:01:67:a0:81:87:89:30:94:7e:c4:4a:
                    a4:45:9b:67:ba:c8:da:ae:33:dc:0d:21:21:b5:f3:
                    70:4e:04:d9:9b:ea:2c:60:f7:09:20:ba:c0:ee:9b:
                    0a:d1:ed:f3:f4:7e:ed:70:24:47:56:2e:67:80:46:
                    e2:db:be:9b:88:f6:f4:dd:90:3e:33:22:05:b9:50:
                    15:7f:1b:b3:6a:4c:31:7a:9a:2c:d5:81:da:97:85:
                    dd:1d:42:68:85:1f:cc:8e:eb:97:78:41:49:bc:29:
                    bf:7a:70:e1:2a:d9:4b:c2:3b:7a:43:c1:e6:3b:0b:
                    b6:23:dd:f1:7f:87:3a:cb:4c:50:2b:a8:23:ee:95:
                    af:99:42:90:48:e8:4b:a5:a3:a8:98:5a:3c:1d:7d:
                    61:2f:16:cb:4b:cb:9d:0a:43:92:f7:9c:d3:71:51:
                    64:5d:5c:8c:6f:d0:2b:db:16:d7:9e:28:7e:bc:26:
                    c6:61:ba:40:ed:b9:6a:8d:9f:03:27:db:af:bc:65:
                    64:db:c0:90:01:39:29:9f:20:46:90:7d:94:3e:ca:
                    b0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:36:DB:7F:3F:66:0B:37:67:AF:7B:15:7E:88:D6:3D:61:F0:F1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a1629f1-31ab-39be-93be-e9e824b6120d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e5:c4:f8:5c:16:7b:72:a3:61:c7:bc:59:09:cb:c6:50:ea:
         89:9c:64:f8:81:49:80:2e:18:00:3b:6a:3b:25:0c:db:ff:45:
         11:51:14:a2:c6:49:7a:ac:58:47:63:5d:70:09:c0:6e:84:a6:
         9e:3e:4a:26:0b:60:63:be:1c:ca:d7:e4:66:13:ca:c6:d4:cf:
         31:22:13:04:a7:40:14:79:a8:ff:fd:ea:37:34:1b:85:3e:ca:
         1c:8f:bf:f1:11:e5:54:ab:6c:e6:52:b0:8a:32:b0:05:68:70:
         4e:e0:d0:c8:e4:2b:2c:f5:2a:ca:fe:78:98:5b:3f:5f:27:f8:
         d6:30:74:ec:49:cf:f7:2c:5b:4e:94:f8:ad:4c:9b:59:ff:25:
         b6:bb:9d:90:a0:bf:88:a8:64:b6:69:57:82:2e:2d:48:a2:a7:
         2e:9d:64:44:94:44:df:d5:58:a1:18:90:76:52:8e:0c:e9:56:
         75:64:85:d4:1d:fe:42:a9:28:e9:3b:e4:fb:38:fc:03:cf:53:
         82:7c:fc:58:c8:e1:a9:ad:65:a0:40:9b:c5:1b:89:9b:ad:f2:
         b4:92:d1:83:6a:cb:90:aa:16:19:56:2d:ba:46:d0:16:c4:44:
         95:98:bf:0a:11:01:29:18:f6:da:cb:86:39:51:fd:c3:05:13:
         ae:9d:70:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----