Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb1f171-58ad-3337-b499-adaf0607a1d8.roa
File:                     7cb1f171-58ad-3337-b499-adaf0607a1d8.roa (raw, json)
Hash identifier:          Cenqjc84j6eFTAJ19c2jdIByxHO2T2mJcl1a+GVGdhM=
Subject key identifier:   75:17:BA:18:07:84:C5:D0:E8:78:27:92:1F:71:FD:B0:3D:AE:23:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242E8B820AF0E5DE77AD7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb1f171-58ad-3337-b499-adaf0607a1d8.roa
Signing time:             Thu 19 Dec 2024 13:45:03 +0000
ROA not before:           Thu 19 Dec 2024 13:45:03 +0000
ROA not after:            Wed 19 Mar 2025 12:45:03 +0000
asID:                     396584
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:e8:b8:20:af:0e:5d:e7:7a:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:03 2024 GMT
            Not After : Mar 19 12:45:03 2025 GMT
        Subject: CN=99e3b614-9c13-4eca-98b1-f00936af4fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:35:a7:cd:87:55:ce:d9:96:c7:a9:bb:30:
                    ba:97:01:ee:ca:07:dc:04:57:97:d9:d5:9a:51:2d:
                    20:8d:b3:ae:ca:1f:f5:bb:13:66:09:e1:13:4f:8c:
                    88:88:82:d8:30:7d:97:db:18:b2:93:6a:ee:72:79:
                    8d:09:b8:c0:55:f5:48:f1:9d:3f:b5:a3:e3:b7:39:
                    3d:ef:63:aa:14:83:1b:c5:c3:68:15:ef:48:f6:b5:
                    8a:67:24:4d:66:a9:fe:99:dc:e0:a9:99:9b:85:06:
                    8c:aa:aa:aa:47:2e:6c:f2:82:ce:4a:89:ae:0d:ee:
                    4f:06:c9:92:49:c3:3e:e3:ba:34:61:9b:71:12:2d:
                    43:71:c4:1b:cc:ab:b2:c4:73:03:df:d2:a2:4a:84:
                    21:6f:54:59:51:2d:51:c3:16:f9:98:a6:0e:a2:1f:
                    08:a3:96:f4:d0:63:35:3e:8e:0a:18:50:90:9d:96:
                    61:04:d1:d1:5f:33:b8:08:d5:33:66:61:61:c3:e0:
                    9b:69:65:70:80:0b:60:db:81:c4:5d:c0:2d:3c:e6:
                    dc:d0:a3:26:ce:d8:76:ec:e8:c3:3e:eb:49:d4:7e:
                    bc:68:ad:d9:9c:9d:77:8d:99:a9:c8:60:93:de:7d:
                    df:3d:78:cf:ee:65:57:87:fc:0c:01:3d:09:f7:2d:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:BA:18:07:84:C5:D0:E8:78:27:92:1F:71:FD:B0:3D:AE:23:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cb1f171-58ad-3337-b499-adaf0607a1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:96:3b:f5:14:55:ca:34:fd:0b:0f:36:72:82:4d:7e:77:f7:
         72:4d:87:49:27:ee:24:fb:1b:8d:ff:3b:6d:98:55:49:d3:c9:
         09:09:bd:40:62:52:37:77:e6:a9:e5:7e:17:2b:5c:87:b6:b4:
         a7:fe:58:16:5f:17:67:0c:f9:98:e1:e0:5a:14:80:a0:aa:d3:
         93:cf:0b:52:69:56:eb:1e:b0:1c:51:d2:f4:1c:32:04:48:36:
         5e:5c:4d:52:01:7b:3d:ee:e9:7b:d5:e9:c8:72:2e:de:3c:cb:
         16:fd:11:45:8d:a0:b2:c3:fc:70:c3:eb:3e:0c:e2:a1:73:23:
         d0:56:d3:a1:81:9f:94:5d:0c:13:a7:cd:65:48:85:1a:6d:c9:
         2c:13:8e:20:eb:c2:29:67:c4:bd:2d:45:fc:10:15:40:75:dc:
         bf:95:8b:7c:49:2e:d3:e5:ca:ee:27:16:42:3b:20:2f:8f:1c:
         95:0f:84:50:a0:33:49:5f:78:ae:09:8e:66:f5:21:e2:ae:dc:
         68:fd:fb:0e:61:d0:c3:ee:01:b4:7b:3d:ff:b0:fb:22:b6:94:
         5c:7c:ff:68:06:c9:f8:ed:20:f7:26:09:88:8e:01:7b:6d:f1:
         1e:69:97:91:7d:2e:52:79:05:76:f1:1b:01:31:9f:9a:37:24:
         50:58:07:ff
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQui4IK8OXed618AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwM1oXDTI1MDMxOTEyNDUwM1owLzEtMCsGA1UEAxMk
OTllM2I2MTQtOWMxMy00ZWNhLTk4YjEtZjAwOTM2YWY0ZmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMA1p82HVc7ZlsepuzC6lwHuygfcBFeX2dWa
US0gjbOuyh/1uxNmCeETT4yIiILYMH2X2xiyk2rucnmNCbjAVfVI8Z0/taPjtzk9
72OqFIMbxcNoFe9I9rWKZyRNZqn+mdzgqZmbhQaMqqqqRy5s8oLOSomuDe5PBsmS
ScM+47o0YZtxEi1DccQbzKuyxHMD39KiSoQhb1RZUS1Rwxb5mKYOoh8Io5b00GM1
Po4KGFCQnZZhBNHRXzO4CNUzZmFhw+CbaWVwgAtg24HEXcAtPObc0KMmzth27OjD
PutJ1H68aK3ZnJ13jZmpyGCT3n3fPXjP7mVXh/wMAT0J9y2DRQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHUXuhgHhMXQ6Hgnkh9x/bA9riPXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2NiMWYxNzEtNThhZC0z
MzM3LWI0OTktYWRhZjA2MDdhMWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCIljv1FFXKNP0LDzZygk1+d/dyTYdJJ+4k+xuN
/zttmFVJ08kJCb1AYlI3d+ap5X4XK1yHtrSn/lgWXxdnDPmY4eBaFICgqtOTzwtS
aVbrHrAcUdL0HDIESDZeXE1SAXs97ul71enIci7ePMsW/RFFjaCyw/xww+s+DOKh
cyPQVtOhgZ+UXQwTp81lSIUabcksE44g68IpZ8S9LUX8EBVAddy/lYt8SS7T5cru
JxZCOyAvjxyVD4RQoDNJX3iuCY5m9SHirtxo/fsOYdDD7gG0ez3/sPsitpRcfP9o
Bsn47SD3JgmIjgF7bfEeaZeRfS5SeQV28RsBMZ+aNyRQWAf/
-----END CERTIFICATE-----