Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a091aadb-7839-3ce9-b589-6d90ed660af7.roa
File:                     a091aadb-7839-3ce9-b589-6d90ed660af7.roa (raw, json)
Hash identifier:          6haatncbMkra+XiE2DooloVlYFI/QsmbXnf87BKzfDQ=
Subject key identifier:   5F:0E:E4:68:32:50:61:77:06:90:F1:2D:C6:4A:11:BD:4C:29:0C:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB2FCF3B7620F5CD94B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a091aadb-7839-3ce9-b589-6d90ed660af7.roa
Signing time:             Thu 16 Jan 2025 13:38:17 +0000
ROA not before:           Thu 16 Jan 2025 13:38:17 +0000
ROA not after:            Wed 16 Apr 2025 12:38:17 +0000
asID:                     396542
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b2:fc:f3:b7:62:0f:5c:d9:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:17 2025 GMT
            Not After : Apr 16 12:38:17 2025 GMT
        Subject: CN=989d209a-c336-42bc-a482-75447dd858bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3a:7c:b2:6e:cf:44:fc:2b:d6:0f:99:83:ec:
                    8d:ee:70:bd:28:37:f5:db:c7:5e:ff:e8:d7:44:d3:
                    3d:ef:c4:26:d9:11:9d:0f:da:46:24:b8:15:f9:ce:
                    1f:b8:67:c0:ca:e1:41:13:ea:6d:51:61:95:6d:8a:
                    df:39:22:86:cc:b7:a1:77:04:0e:01:ce:f0:64:51:
                    3b:45:f0:ce:ed:f8:5c:cc:c0:1d:4e:a4:41:bd:25:
                    54:35:a4:a6:7a:c6:7f:ed:8c:8e:f1:f2:81:f6:8a:
                    44:c0:f7:f4:d3:b5:9a:b8:c4:61:05:43:fb:7e:14:
                    b3:b8:88:ff:7b:25:81:bf:2d:96:ac:5f:ad:6e:2e:
                    e7:59:da:d3:8d:6c:05:b8:1e:ce:59:1e:e4:33:54:
                    c4:eb:39:8b:f4:b9:8d:64:f7:3d:52:c6:b0:b8:40:
                    d7:02:12:5e:fc:e3:1e:95:71:67:20:43:87:66:16:
                    d3:ed:a6:f2:e9:d2:4c:d3:bb:07:f9:cb:ae:d1:96:
                    72:b9:f4:84:b4:a2:52:4c:bf:b8:85:a8:28:f6:43:
                    ba:31:0e:38:4e:d1:bc:d1:47:91:96:4a:18:c5:9f:
                    44:73:e1:a2:12:06:f4:bc:da:87:df:01:bf:d5:2b:
                    ce:8a:c4:d7:8b:76:85:4b:d4:5c:ee:65:e4:26:4f:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:0E:E4:68:32:50:61:77:06:90:F1:2D:C6:4A:11:BD:4C:29:0C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a091aadb-7839-3ce9-b589-6d90ed660af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:e3:0d:e7:84:24:b4:1a:45:d5:e1:c3:7b:1c:08:0c:e5:
         2c:3a:af:11:0d:e0:0b:fe:c4:ee:d6:51:ed:44:17:76:09:f9:
         f1:2b:8c:77:38:31:3b:04:53:78:c3:d1:6a:f0:63:55:f8:a8:
         00:20:e7:49:51:38:f2:22:97:ab:fc:0c:3c:8f:fd:b5:cd:71:
         7a:cf:ee:01:1b:b8:1d:2f:99:7a:ea:39:16:4c:e0:38:2c:e3:
         db:fe:7d:92:7e:79:93:6d:0e:d5:5b:6c:bf:da:9f:51:f9:90:
         78:25:d4:86:3b:6f:b0:05:71:d5:bf:2f:ff:40:e2:23:f2:05:
         47:c8:4f:a7:c9:8e:0a:d3:5c:37:df:c8:30:34:66:43:77:9e:
         74:39:0f:90:30:37:21:56:c6:f9:ec:c2:a2:d3:09:3f:8a:c9:
         73:15:e6:92:1a:71:4f:2b:e9:79:fb:2f:e4:3c:c6:5e:43:c3:
         a5:9a:a8:06:7f:9c:c7:f9:17:37:a1:31:cc:c8:e0:3b:5e:01:
         80:33:2e:00:a2:04:f1:52:0f:29:6f:55:c0:ac:a1:f4:e0:6b:
         c8:db:4d:35:6b:e7:55:a4:88:c1:26:41:f4:17:88:45:08:45:
         6d:f2:96:e6:14:7d:b7:40:55:95:ad:fb:f9:d8:f6:a8:5c:49:
         11:52:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----