Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
File:                     8f1333ed-7ccb-3a70-b466-78258419d210.roa (raw, json)
Hash identifier:          cRvjEpUkOqdokicinKAKL4bg8v9g8Gpco+QkmDFVJ7k=
Subject key identifier:   05:AE:53:6E:69:26:6A:7D:A1:22:F9:2A:E1:7F:BB:A3:A6:2A:23:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584845157DE2BF2866FECE5E1380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     32651
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:7d:e2:bf:28:66:fe:ce:5e:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=adb8e44c-b42e-49a0-9b19-1532125d18ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6f:8e:f8:12:ee:85:1f:2f:7b:c2:5b:17:06:
                    12:e3:62:13:e7:87:7e:1d:3c:5f:12:72:cd:b5:83:
                    02:3a:da:44:c7:c9:59:c9:6e:40:7c:86:30:e3:51:
                    a9:7e:9d:35:52:9a:6e:75:e8:7f:ea:d4:f5:a4:25:
                    45:e8:70:74:5b:50:14:e4:b7:4e:91:e4:81:81:f6:
                    f5:4c:f3:35:d9:f1:8c:c2:62:52:30:f5:17:58:22:
                    1d:c6:6e:2f:fd:c3:5b:2c:cf:db:5c:32:8b:14:9a:
                    c6:64:c0:34:6c:f5:42:19:3c:6f:c9:eb:26:b9:ff:
                    cc:b0:ea:6f:83:82:da:e8:d5:ba:68:41:82:28:b8:
                    90:b6:c4:b2:f3:35:b6:75:d7:04:7f:c7:ef:c1:cd:
                    34:02:22:b1:39:18:78:25:98:35:4a:f4:ed:4c:10:
                    b0:eb:24:09:39:68:1d:b8:77:6e:62:b4:17:99:bc:
                    13:a2:41:b4:b0:08:e6:46:6e:36:ac:f0:32:19:e8:
                    7c:fc:e6:2b:9d:a4:f8:06:e9:cd:27:29:dd:98:87:
                    8d:1d:ea:d9:42:64:70:25:91:53:f1:1d:9c:2b:ee:
                    5c:19:a6:9a:9e:20:f4:ff:7b:44:a5:63:f3:51:68:
                    0e:c2:8c:2a:86:79:28:27:1a:96:30:93:90:8b:64:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AE:53:6E:69:26:6A:7D:A1:22:F9:2A:E1:7F:BB:A3:A6:2A:23:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:7f:a7:07:00:23:29:f5:f6:5b:9e:60:09:63:b9:ca:c2:
         71:d8:e0:b8:bc:e1:ed:39:99:26:4e:bc:d2:15:14:6a:24:45:
         bf:68:e4:b0:cd:75:40:fb:08:ee:5c:ac:89:5a:23:58:a8:ea:
         ab:68:9d:c1:04:06:9b:2c:75:1b:45:62:be:45:00:ef:b0:4a:
         cf:56:04:9d:98:16:4d:38:ae:e9:3f:b1:94:2f:3e:d3:33:88:
         a8:14:7f:4a:44:75:fb:1e:42:6b:dd:c6:5b:c2:18:48:20:91:
         43:ce:bf:c1:ac:ea:e8:71:ab:02:be:c7:ae:17:32:64:0d:a1:
         28:db:f4:4f:b9:b2:72:f2:fe:a7:b3:f7:1a:c1:1c:7b:89:4b:
         b2:21:0b:1d:53:b8:48:fe:8a:e8:e9:9e:ec:b2:9a:fc:49:b6:
         10:97:7b:ad:1e:e1:bb:af:e4:c4:12:d8:8a:ac:af:72:20:b5:
         a0:69:56:98:5a:9b:5d:cf:4b:79:4d:eb:8c:16:9c:27:a0:a6:
         0f:6a:7a:c0:d3:25:c5:07:cb:89:13:4b:f9:87:55:62:ca:a2:
         54:df:da:b8:47:5b:f7:f2:ac:9d:97:0b:0a:f6:44:1c:c7:b5:
         5b:cd:00:31:bc:5a:d8:9b:ab:a4:14:87:43:c0:0a:17:92:6b:
         c0:04:31:69
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhFFX3ivyhm/s5eE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
YWRiOGU0NGMtYjQyZS00OWEwLTliMTktMTUzMjEyNWQxOGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG+O+BLuhR8ve8JbFwYS42IT54d+HTxfEnLN
tYMCOtpEx8lZyW5AfIYw41Gpfp01Uppudeh/6tT1pCVF6HB0W1AU5LdOkeSBgfb1
TPM12fGMwmJSMPUXWCIdxm4v/cNbLM/bXDKLFJrGZMA0bPVCGTxvyesmuf/MsOpv
g4La6NW6aEGCKLiQtsSy8zW2ddcEf8fvwc00AiKxORh4JZg1SvTtTBCw6yQJOWgd
uHduYrQXmbwTokG0sAjmRm42rPAyGeh8/OYrnaT4BunNJyndmIeNHerZQmRwJZFT
8R2cK+5cGaaaniD0/3tEpWPzUWgOwowqhnkoJxqWMJOQi2Qi0QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAWuU25pJmp9oSL5KuF/u6OmKiPZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGYxMzMzZWQtN2NjYi0z
YTcwLWI0NjYtNzgyNTg0MTlkMjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAEPX+nBwAjKfX2W55gCWO5ysJx2OC4vOHtOZkm
TrzSFRRqJEW/aOSwzXVA+wjuXKyJWiNYqOqraJ3BBAabLHUbRWK+RQDvsErPVgSd
mBZNOK7pP7GULz7TM4ioFH9KRHX7HkJr3cZbwhhIIJFDzr/BrOrocasCvseuFzJk
DaEo2/RPubJy8v6ns/cawRx7iUuyIQsdU7hI/oro6Z7sspr8SbYQl3utHuG7r+TE
EtiKrK9yILWgaVaYWptdz0t5TeuMFpwnoKYPanrA0yXFB8uJE0v5h1ViyqJU39q4
R1v38qydlwsK9kQcx7VbzQAxvFrYm6ukFIdDwAoXkmvABDFp
-----END CERTIFICATE-----