Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bffa3c-0cff-310f-9749-fc810daba093.roa
File:                     50bffa3c-0cff-310f-9749-fc810daba093.roa (raw, json)
Hash identifier:          YI7lp0nCrmklYF4SNa9wh3Z4QZqblNdIul/kMTNabe0=
Subject key identifier:   90:09:B8:B0:C7:17:C9:EE:10:DC:AB:72:5B:ED:97:E1:F8:7B:2C:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FD8C3E70D8771F847F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bffa3c-0cff-310f-9749-fc810daba093.roa
Signing time:             Thu 19 Dec 2024 13:45:13 +0000
ROA not before:           Thu 19 Dec 2024 13:45:13 +0000
ROA not after:            Wed 19 Mar 2025 12:45:13 +0000
asID:                     396617
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fd:8c:3e:70:d8:77:1f:84:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:13 2024 GMT
            Not After : Mar 19 12:45:13 2025 GMT
        Subject: CN=af2b818e-42de-4e3a-aedd-54d532c32561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f7:32:21:f0:65:ff:61:36:0d:48:11:61:1f:
                    3f:df:86:8b:95:7b:a7:c9:f4:d6:c4:02:67:a3:1b:
                    0b:36:1d:4b:9c:5f:b9:50:ae:dd:1d:0c:75:42:e3:
                    c7:1c:0c:29:8b:6e:fa:3d:f0:a8:5e:c2:52:f0:21:
                    83:1b:07:9d:d4:af:8d:16:7f:04:df:bc:6b:7c:2e:
                    bf:1b:aa:b5:a9:56:70:d4:e2:e8:89:82:1a:69:bf:
                    a0:b2:4a:87:22:0e:a7:e6:92:54:0a:b9:32:c3:fc:
                    43:0f:39:79:82:e4:ec:91:1b:b2:11:8b:28:70:00:
                    fc:50:fb:ed:81:bf:4c:af:ca:35:fe:d5:83:cd:5b:
                    53:54:da:ef:ee:34:d2:48:ad:40:1b:3b:6c:d5:0b:
                    81:90:0f:dc:17:d4:72:22:ea:2e:eb:0e:7e:45:7f:
                    f3:8a:b5:03:55:cd:35:63:70:c9:0e:29:2f:26:b6:
                    7f:08:c2:51:43:49:46:c1:be:2c:cc:da:d6:ef:c3:
                    73:f4:d4:4d:8d:ec:53:36:36:72:9d:f9:6d:8a:b5:
                    c8:5d:44:02:ce:13:94:5e:c6:0a:7b:a3:91:71:ae:
                    d5:82:f4:ed:ad:85:2f:be:a8:d3:ca:6c:cc:d9:b9:
                    02:ff:2d:12:7e:ba:ec:bc:b6:28:77:88:f6:49:c6:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:09:B8:B0:C7:17:C9:EE:10:DC:AB:72:5B:ED:97:E1:F8:7B:2C:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bffa3c-0cff-310f-9749-fc810daba093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:dd:01:75:10:40:73:25:95:aa:f8:6b:b4:32:8e:42:c2:
         16:39:33:9d:90:23:13:c5:bc:ff:b4:31:e1:5c:db:03:e4:a2:
         ad:c6:04:74:54:db:ad:6d:34:f3:f9:be:91:c6:be:01:7c:61:
         b2:a7:48:70:8e:f2:32:f0:c4:1f:8c:f8:18:bd:80:f8:1f:84:
         bf:9c:c4:cf:3c:c6:3b:11:10:6d:27:68:57:76:5a:bc:6d:3b:
         dc:07:9d:4d:ca:28:67:70:48:bf:8e:d0:6b:f4:42:3c:19:7f:
         cc:46:9b:52:35:b7:46:9a:50:4e:43:c0:49:bb:f9:e1:f3:4a:
         b8:19:19:24:33:40:b3:71:b0:56:76:a2:a6:c9:73:df:2a:ca:
         c4:dd:66:c3:30:bf:78:02:7d:1c:80:55:7a:3a:b2:24:a3:34:
         44:18:20:43:d2:3c:a6:73:52:09:0a:65:a5:7c:81:77:6c:26:
         9c:c7:84:bd:62:1e:f4:05:c8:d2:e0:df:d2:61:b0:de:34:15:
         c8:53:bd:ca:6c:52:d1:25:a5:c5:78:2e:e6:78:97:f1:4c:dc:
         3f:a7:70:3e:bf:b1:20:f6:f0:99:23:ff:1b:24:86:30:37:b4:
         ff:b0:04:33:a0:05:b1:0c:bf:2d:06:28:90:09:d1:c5:9e:aa:
         f9:27:80:a5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQv2MPnDYdx+Ef4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxM1oXDTI1MDMxOTEyNDUxM1owLzEtMCsGA1UEAxMk
YWYyYjgxOGUtNDJkZS00ZTNhLWFlZGQtNTRkNTMyYzMyNTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifcyIfBl/2E2DUgRYR8/34aLlXunyfTWxAJn
oxsLNh1LnF+5UK7dHQx1QuPHHAwpi276PfCoXsJS8CGDGwed1K+NFn8E37xrfC6/
G6q1qVZw1OLoiYIaab+gskqHIg6n5pJUCrkyw/xDDzl5guTskRuyEYsocAD8UPvt
gb9Mr8o1/tWDzVtTVNrv7jTSSK1AGzts1QuBkA/cF9RyIuou6w5+RX/zirUDVc01
Y3DJDikvJrZ/CMJRQ0lGwb4szNrW78Nz9NRNjexTNjZynfltirXIXUQCzhOUXsYK
e6ORca7VgvTtrYUvvqjTymzM2bkC/y0SfrrsvLYod4j2Scb4lQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJAJuLDHF8nuENyrclvtl+H4eywEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTBiZmZhM2MtMGNmZi0z
MTBmLTk3NDktZmM4MTBkYWJhMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA+rd0BdRBAcyWVqvhrtDKOQsIWOTOdkCMTxbz/
tDHhXNsD5KKtxgR0VNutbTTz+b6Rxr4BfGGyp0hwjvIy8MQfjPgYvYD4H4S/nMTP
PMY7ERBtJ2hXdlq8bTvcB51NyihncEi/jtBr9EI8GX/MRptSNbdGmlBOQ8BJu/nh
80q4GRkkM0CzcbBWdqKmyXPfKsrE3WbDML94An0cgFV6OrIkozREGCBD0jymc1IJ
CmWlfIF3bCacx4S9Yh70BcjS4N/SYbDeNBXIU73KbFLRJaXFeC7meJfxTNw/p3A+
v7Eg9vCZI/8bJIYwN7T/sAQzoAWxDL8tBiiQCdHFnqr5J4Cl
-----END CERTIFICATE-----