Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76f27537-3faa-3539-9b22-1e7b93e642a4.roa
File:                     76f27537-3faa-3539-9b22-1e7b93e642a4.roa (raw, json)
Hash identifier:          sViR19uGIcTRB/Hob+ADA5MZZTyzQ70GaqIvIIQNvXA=
Subject key identifier:   5F:3A:9B:F7:FF:BE:5C:12:E1:52:39:11:A8:54:C0:E3:48:76:15:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530AFEEA61CCE5FA13A32FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76f27537-3faa-3539-9b22-1e7b93e642a4.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     396826
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:fe:ea:61:cc:e5:fa:13:a3:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=e4b1939a-b262-4f9e-9dcb-d55939af5837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:0e:a4:94:a5:d6:d9:0c:1d:0a:06:a1:0f:
                    51:5c:32:96:50:66:4a:19:51:7d:43:5a:06:bb:37:
                    7f:39:2f:ae:ff:db:f3:ff:14:3d:05:6e:80:cc:7c:
                    d5:cc:81:63:eb:06:28:52:62:ae:88:2f:48:1d:1b:
                    36:6e:ea:79:74:a4:55:58:40:53:c4:dd:88:51:f0:
                    fa:98:0a:cd:90:24:7a:68:b0:8d:bf:bf:19:78:91:
                    e6:59:28:e3:e6:7a:fd:8c:f2:3c:01:f8:c4:e7:96:
                    ce:e4:73:d8:07:d9:63:b1:ef:f1:21:48:e4:0c:9d:
                    40:6e:b1:5a:99:e3:0d:32:1b:27:05:da:b7:ba:c7:
                    e1:52:9a:48:65:c0:7a:bd:ad:cf:30:bd:19:e6:df:
                    39:06:4c:1e:36:86:1e:fb:9f:f3:50:84:07:6f:e4:
                    97:29:f0:79:19:07:69:50:6f:dd:e9:38:12:1f:dc:
                    ad:8e:eb:c2:4d:04:c0:af:ff:a8:85:86:b8:ce:bf:
                    b5:30:0a:51:eb:20:a3:33:5a:ab:85:45:a0:55:95:
                    3d:1b:10:b5:39:f0:33:e7:51:47:b6:85:c3:a0:aa:
                    36:50:c0:85:95:c4:05:0d:42:45:f3:26:e1:0c:19:
                    89:a6:31:66:95:bb:da:95:02:d6:1f:06:43:6c:15:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3A:9B:F7:FF:BE:5C:12:E1:52:39:11:A8:54:C0:E3:48:76:15:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76f27537-3faa-3539-9b22-1e7b93e642a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:20:f1:8f:98:01:3b:3e:e4:26:05:b2:c1:61:05:f4:71:35:
         89:9c:31:e1:b9:71:ba:40:eb:e4:ca:85:dd:c3:30:a6:39:8e:
         85:01:38:bf:11:2f:13:ab:ca:d8:db:33:f2:93:de:86:c1:a9:
         49:bb:19:8f:4b:99:93:d1:02:2f:25:0a:c9:7d:b9:01:ab:da:
         32:38:39:f8:ac:89:71:b1:a1:5d:fa:a9:9f:51:79:71:39:44:
         6a:2d:81:c9:ed:ef:11:0d:2c:1e:e5:12:7e:59:87:1a:c4:52:
         9b:f6:ae:7c:6b:7b:3c:b1:97:ee:ab:ac:7f:b8:ee:e2:3c:29:
         e1:ac:2c:a2:00:5e:ad:53:9b:85:74:fa:94:c9:ac:cd:ca:f5:
         35:8f:38:92:63:19:cf:a4:33:76:1a:2c:80:85:24:b1:6c:de:
         f4:b6:27:16:2b:88:02:09:e7:03:a2:e1:76:1f:29:aa:99:51:
         88:cf:4e:96:e8:ed:d5:9c:2d:0e:4e:83:b5:96:7d:e2:d3:e6:
         b7:91:fc:60:cc:13:c1:ca:65:ec:c0:e5:e6:50:2d:6c:d1:de:
         79:26:4a:03:51:22:ae:49:96:f2:e7:a2:d3:d5:c2:bd:97:8b:
         a6:0e:18:07:89:ee:96:1b:d5:e4:ff:ce:92:57:b0:dd:f5:28:
         d7:53:ec:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----