Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/967b9b10-cd71-3174-9767-9fe2fd7eb2ca.roa
File:                     967b9b10-cd71-3174-9767-9fe2fd7eb2ca.roa (raw, json)
Hash identifier:          /Dmb0huUuJsGKeQBOxmqcBrOVx7Z69npch4Wg2S63BY=
Subject key identifier:   26:82:AA:0D:50:30:F1:1A:05:01:B6:E0:E1:99:88:1E:FE:0A:D3:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424312F3CE754C89C934AB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/967b9b10-cd71-3174-9767-9fe2fd7eb2ca.roa
Signing time:             Thu 19 Dec 2024 13:45:23 +0000
ROA not before:           Thu 19 Dec 2024 13:45:23 +0000
ROA not after:            Wed 19 Mar 2025 12:45:23 +0000
asID:                     20362
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:12:f3:ce:75:4c:89:c9:34:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:23 2024 GMT
            Not After : Mar 19 12:45:23 2025 GMT
        Subject: CN=a6238f3c-d2dd-4c88-87d3-8da8b43247db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:2a:4d:23:a8:12:7a:57:52:0e:94:ac:3e:
                    a6:a6:03:35:02:49:a4:2c:cd:78:e3:13:34:2c:d8:
                    6a:aa:3c:a5:85:cd:fd:31:0e:a7:81:a1:6e:87:31:
                    9d:32:30:82:bd:87:b8:d8:0c:67:ac:ae:34:85:18:
                    a6:ec:c8:74:37:77:f4:52:39:c6:cb:21:51:84:d2:
                    c3:7f:d2:cc:00:77:cc:e0:75:8e:74:23:c0:4f:18:
                    07:d0:40:87:36:a3:b6:20:b9:f1:1a:0f:0c:2d:33:
                    f1:e6:c6:aa:3b:e9:cd:85:c7:8f:05:c8:ee:66:31:
                    e6:65:06:88:70:4b:aa:c8:5e:75:2e:be:98:84:3e:
                    f7:2d:61:67:f3:b8:56:83:32:55:31:d7:bb:89:be:
                    e4:e5:60:06:1b:5b:fa:13:86:2f:2c:b7:70:7e:fc:
                    73:67:be:2d:23:b1:52:d9:bd:92:9f:4c:68:ad:5a:
                    21:b0:61:9e:4f:ff:dd:78:d2:7f:64:2f:50:66:ec:
                    16:99:93:d7:21:9d:14:55:e5:30:d2:62:f9:a8:58:
                    a7:5f:7b:98:59:98:80:ef:01:1d:39:a3:25:67:1b:
                    2b:a8:42:0e:3e:db:42:c8:a7:f6:95:c9:1b:dd:b1:
                    14:29:86:9a:14:bb:8d:be:d4:bf:ae:6b:0f:a3:66:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:AA:0D:50:30:F1:1A:05:01:B6:E0:E1:99:88:1E:FE:0A:D3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/967b9b10-cd71-3174-9767-9fe2fd7eb2ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:25:17:43:3a:e4:1c:51:2a:e7:c8:f6:34:12:24:62:4b:be:
         52:27:8b:e9:8b:25:81:ad:54:78:81:63:07:55:05:fd:43:40:
         a8:e8:d8:0a:85:ca:4c:5d:44:21:73:0c:55:62:d2:77:24:31:
         59:7d:4c:02:eb:9f:a2:f5:67:73:20:6c:13:22:24:02:e2:f5:
         cf:f6:1c:43:87:4e:f7:b0:57:7f:99:c9:18:7e:72:73:59:f8:
         18:73:1d:f2:59:0b:c3:02:7f:45:45:83:30:71:22:24:76:de:
         e5:fd:8e:78:a8:40:f6:b7:06:ab:c0:9b:c7:37:bf:c5:82:11:
         32:a7:49:36:15:a7:72:36:ee:e2:ca:e7:c3:29:82:ce:1d:82:
         7b:4a:8e:29:77:8a:06:89:8b:dc:c0:e7:e1:29:3f:e5:44:d1:
         c5:d6:7c:42:d8:06:c3:ec:ef:ab:29:7f:77:d8:42:5a:49:f2:
         10:ca:ca:03:e6:10:1f:f5:5d:dd:3a:e2:d8:d8:e4:d7:d1:8a:
         d0:86:b8:12:77:d0:40:f0:a9:8c:10:0f:36:7e:76:7c:97:73:
         57:95:fa:e7:c7:41:ec:a1:29:0d:1b:71:4b:0c:ad:a8:e3:b6:
         ce:91:50:da:f0:e3:c9:15:8d:8f:85:74:eb:dc:df:23:95:3d:
         87:ac:ea:13
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQxLzznVMick0qwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUyM1oXDTI1MDMxOTEyNDUyM1owLzEtMCsGA1UEAxMk
YTYyMzhmM2MtZDJkZC00Yzg4LTg3ZDMtOGRhOGI0MzI0N2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKEqTSOoEnpXUg6UrD6mpgM1AkmkLM144xM0
LNhqqjylhc39MQ6ngaFuhzGdMjCCvYe42AxnrK40hRim7Mh0N3f0UjnGyyFRhNLD
f9LMAHfM4HWOdCPATxgH0ECHNqO2ILnxGg8MLTPx5saqO+nNhcePBcjuZjHmZQaI
cEuqyF51Lr6YhD73LWFn87hWgzJVMde7ib7k5WAGG1v6E4YvLLdwfvxzZ74tI7FS
2b2Sn0xorVohsGGeT//deNJ/ZC9QZuwWmZPXIZ0UVeUw0mL5qFinX3uYWZiA7wEd
OaMlZxsrqEIOPttCyKf2lckb3bEUKYaaFLuNvtS/rmsPo2bD3wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCaCqg1QMPEaBQG24OGZiB7+CtPbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTY3YjliMTAtY2Q3MS0z
MTc0LTk3NjctOWZlMmZkN2ViMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBUJRdDOuQcUSrnyPY0EiRiS75SJ4vpiyWBrVR4
gWMHVQX9Q0Co6NgKhcpMXUQhcwxVYtJ3JDFZfUwC65+i9WdzIGwTIiQC4vXP9hxD
h073sFd/mckYfnJzWfgYcx3yWQvDAn9FRYMwcSIkdt7l/Y54qED2twarwJvHN7/F
ghEyp0k2FadyNu7iyufDKYLOHYJ7So4pd4oGiYvcwOfhKT/lRNHF1nxC2AbD7O+r
KX932EJaSfIQysoD5hAf9V3dOuLY2OTX0YrQhrgSd9BA8KmMEA82fnZ8l3NXlfrn
x0HsoSkNG3FLDK2o47bOkVDa8OPJFY2PhXTr3N8jlT2HrOoT
-----END CERTIFICATE-----