Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa
File:                     88cf2a4e-4125-3725-85f4-cba598b5ef93.roa (raw, json)
Hash identifier:          4Rw2FZiWDbbxtvP/dk+UObTPzKSgVpw6QXhPmXOrDHs=
Subject key identifier:   1D:5D:82:8F:3C:9E:34:BB:D0:66:33:55:24:D7:96:03:1A:57:51:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA25C73FD7AF8985833C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa
Signing time:             Wed 11 Dec 2024 15:18:08 +0000
ROA not before:           Wed 11 Dec 2024 15:18:08 +0000
ROA not after:            Tue 11 Mar 2025 14:18:08 +0000
asID:                     396583
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a2:5c:73:fd:7a:f8:98:58:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:08 2024 GMT
            Not After : Mar 11 14:18:08 2025 GMT
        Subject: CN=523bde69-5e81-4aa8-94b8-716cdb128ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:a0:91:c9:85:e0:b1:e4:86:b1:c8:2b:94:
                    a4:3b:65:b6:9e:0c:2e:9b:35:fa:ee:56:b0:ba:c3:
                    ff:11:0c:5c:2b:df:09:c6:17:98:0e:2d:90:33:b5:
                    20:1a:7e:b4:7a:41:96:3d:db:df:80:ee:91:4d:c0:
                    84:80:be:ca:95:21:08:51:e6:4f:41:d7:30:40:87:
                    ed:80:1d:89:8f:06:86:df:51:a7:fa:03:bc:18:68:
                    ed:2d:a2:02:1a:07:5d:5f:29:25:20:aa:21:8b:28:
                    db:34:67:fa:4f:e4:f1:6e:d9:9d:37:ee:61:42:76:
                    08:c6:2f:42:3d:a6:7e:1c:17:49:df:1a:8f:0c:eb:
                    06:46:38:91:50:79:16:fd:08:7d:15:d5:59:9d:34:
                    3a:1f:6e:ae:35:59:aa:fc:98:91:cc:78:9a:1e:fc:
                    e1:f1:c4:e6:13:30:86:ed:83:17:80:1d:03:53:4c:
                    87:50:b6:09:c2:c9:9c:97:72:b3:ed:39:4a:8b:9e:
                    ce:3d:d4:f7:65:62:de:70:1a:d9:22:41:5d:90:b0:
                    55:4d:63:b8:6b:c6:19:23:a2:2f:c2:c8:1d:4e:9b:
                    41:c1:a2:c0:cb:82:64:28:f7:1a:c7:74:c1:ff:a8:
                    62:78:64:66:05:bc:b4:a3:25:11:92:be:8f:54:3b:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5D:82:8F:3C:9E:34:BB:D0:66:33:55:24:D7:96:03:1A:57:51:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3e:4f:a6:b0:90:8c:cc:a8:5d:b6:86:fd:9a:f5:57:11:84:
         7a:59:9e:a9:c2:81:c3:52:0a:df:fb:82:ac:19:4f:5a:ad:14:
         1b:82:b0:8f:5a:65:7c:58:90:e4:8a:ad:5a:1d:55:18:34:db:
         95:ce:5b:b2:61:78:ce:29:61:55:f2:68:0a:41:77:bf:e8:53:
         14:e6:61:d1:47:84:fd:04:86:7d:b5:b9:64:a9:5e:e3:be:40:
         91:a9:f8:2a:b9:4b:9f:38:13:ed:86:e0:b3:fc:78:66:b0:2c:
         16:54:e2:a7:1a:f0:18:ff:1e:38:cf:09:65:4b:4e:8e:91:98:
         e8:30:0d:b0:c1:11:af:69:d3:2c:92:0b:c9:df:4d:65:d7:89:
         36:22:a9:ae:16:f4:a7:7d:55:6c:25:75:16:94:78:c7:a5:79:
         2d:03:d3:15:5f:9e:a5:75:46:b6:79:1f:dd:43:80:44:08:34:
         0e:a4:4b:16:9a:eb:76:16:7f:26:bd:a2:0a:d8:80:5e:8d:6a:
         34:5e:b4:4b:77:b2:5b:f7:12:a7:38:79:41:cb:3e:38:bf:07:
         26:f2:64:ed:c2:87:69:b9:29:a5:0f:1e:fe:ae:69:7f:7b:bf:
         5f:38:68:85:3b:28:5c:33:49:80:20:7d:d6:06:96:6e:ec:85:
         06:a9:cd:8a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgsG6Jcc/16+JhYM8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTgwOFoXDTI1MDMxMTE0MTgwOFowLzEtMCsGA1UEAxMk
NTIzYmRlNjktNWU4MS00YWE4LTk0YjgtNzE2Y2RiMTI4ZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2agkcmF4LHkhrHIK5SkO2W2ngwumzX67law
usP/EQxcK98JxheYDi2QM7UgGn60ekGWPdvfgO6RTcCEgL7KlSEIUeZPQdcwQIft
gB2JjwaG31Gn+gO8GGjtLaICGgddXyklIKohiyjbNGf6T+TxbtmdN+5hQnYIxi9C
PaZ+HBdJ3xqPDOsGRjiRUHkW/Qh9FdVZnTQ6H26uNVmq/JiRzHiaHvzh8cTmEzCG
7YMXgB0DU0yHULYJwsmcl3Kz7TlKi57OPdT3ZWLecBrZIkFdkLBVTWO4a8YZI6Iv
wsgdTptBwaLAy4JkKPcax3TB/6hieGRmBby0oyURkr6PVDvqsQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFB1dgo88njS70GYzVSTXlgMaV1EYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODhjZjJhNGUtNDEyNS0z
NzI1LTg1ZjQtY2JhNTk4YjVlZjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAzPk+msJCMzKhdtob9mvVXEYR6WZ6pwoHDUgrf
+4KsGU9arRQbgrCPWmV8WJDkiq1aHVUYNNuVzluyYXjOKWFV8mgKQXe/6FMU5mHR
R4T9BIZ9tblkqV7jvkCRqfgquUufOBPthuCz/HhmsCwWVOKnGvAY/x44zwllS06O
kZjoMA2wwRGvadMskgvJ301l14k2IqmuFvSnfVVsJXUWlHjHpXktA9MVX56ldUa2
eR/dQ4BECDQOpEsWmut2Fn8mvaIK2IBejWo0XrRLd7Jb9xKnOHlByz44vwcm8mTt
wodpuSmlDx7+rml/e79fOGiFOyhcM0mAIH3WBpZu7IUGqc2K
-----END CERTIFICATE-----