Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7880391-f7b7-3f2b-a2b1-b44f89d911a1.roa
File:                     b7880391-f7b7-3f2b-a2b1-b44f89d911a1.roa (raw, json)
Hash identifier:          Co1gnjgfRIUN9qm6ZWKEaRxbVDNt0q215pR+yBO1eZY=
Subject key identifier:   3E:29:16:7B:DC:A3:0E:CC:9F:3F:47:8E:90:F1:3C:47:63:91:36:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAADCFDC7351389DF572F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7880391-f7b7-3f2b-a2b1-b44f89d911a1.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     396545
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:dc:fd:c7:35:13:89:df:57:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=bf57c5ba-ca35-4f91-bab4-e5d30a7fff52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:ed:1f:0e:bb:4f:ac:3a:5d:24:02:44:e2:
                    74:dd:04:14:69:a6:fa:68:dc:46:d5:da:59:d1:bf:
                    62:42:b3:be:2c:73:ff:37:8b:75:d7:2f:66:52:17:
                    b9:72:c4:d2:10:cb:68:19:b1:e1:6d:16:91:b9:0e:
                    a0:96:b6:a6:14:25:71:15:c9:5d:31:bb:d9:ac:c0:
                    f2:c2:ca:74:1c:ec:0f:7c:2a:a6:8d:25:bc:4f:f4:
                    14:4d:af:15:01:71:54:66:38:c6:a5:ae:88:db:30:
                    3c:3b:69:21:99:22:e4:7b:9a:cf:6c:f2:98:c5:a9:
                    83:29:c7:2a:98:12:7f:89:43:1d:14:79:41:67:35:
                    75:aa:75:49:03:ee:52:27:f3:f7:3c:89:e3:39:05:
                    48:45:a8:63:10:84:9c:9b:3c:55:6e:7d:52:d4:67:
                    d6:51:a6:10:6a:86:0c:27:71:1c:c6:67:ca:06:13:
                    85:2d:d3:f3:82:eb:38:d0:02:e1:d7:cc:59:de:89:
                    9c:9e:e9:e6:cb:83:5c:b7:91:15:7c:2f:51:0c:9e:
                    a6:02:71:e0:92:8a:02:1e:d6:7b:ca:6c:61:44:dd:
                    0d:b3:3e:39:25:10:95:72:01:92:1d:2e:a8:0b:14:
                    f8:90:7b:ad:ca:4d:0b:ba:27:7a:6e:f7:0f:24:5e:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:29:16:7B:DC:A3:0E:CC:9F:3F:47:8E:90:F1:3C:47:63:91:36:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7880391-f7b7-3f2b-a2b1-b44f89d911a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:54:3f:ab:48:94:18:c7:e2:69:48:aa:08:86:94:e5:6b:35:
         7f:33:9a:2c:93:f3:58:e8:3e:3f:44:b4:b9:e2:13:df:40:f6:
         f1:d8:80:c1:f5:a1:ab:25:78:fe:85:4f:0f:1f:fd:48:49:7d:
         11:eb:83:c7:f5:22:a5:fd:32:24:41:2f:af:f5:66:82:a4:7d:
         63:3e:f8:8a:1b:8d:f7:1c:79:4f:cb:2e:cd:41:70:5e:32:0f:
         37:f7:ff:ca:2c:80:bb:5b:2e:09:a4:f3:fe:0e:ff:dd:05:e3:
         06:47:0b:0f:4d:7e:cc:56:27:04:09:d0:cb:b1:5b:e6:09:98:
         11:b8:ff:4a:de:ee:db:0b:e4:5e:fc:99:88:68:cc:df:f1:03:
         77:d2:26:2c:6a:8f:6d:1b:60:34:71:0d:66:ed:2f:6c:86:e8:
         14:a3:e7:04:12:3b:68:0e:38:39:29:35:05:1b:b7:7f:86:63:
         b9:91:b6:d6:75:39:e8:e9:8a:b2:dc:d7:cc:85:b2:ee:bc:1d:
         0f:16:fc:ce:89:0d:2c:59:e5:b5:23:e3:b5:08:c2:5f:85:fb:
         cf:8c:74:8b:27:16:f2:ae:fc:9b:30:f5:60:f0:92:28:98:ee:
         33:6c:f5:f2:00:85:a5:f6:e5:e3:1f:c7:dc:e3:98:d3:12:87:
         72:9a:80:cf
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtz9xzUTid9XL0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
YmY1N2M1YmEtY2EzNS00ZjkxLWJhYjQtZTVkMzBhN2ZmZjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8vtHw67T6w6XSQCROJ03QQUaab6aNxG1dpZ
0b9iQrO+LHP/N4t11y9mUhe5csTSEMtoGbHhbRaRuQ6glramFCVxFcldMbvZrMDy
wsp0HOwPfCqmjSW8T/QUTa8VAXFUZjjGpa6I2zA8O2khmSLke5rPbPKYxamDKccq
mBJ/iUMdFHlBZzV1qnVJA+5SJ/P3PInjOQVIRahjEIScmzxVbn1S1GfWUaYQaoYM
J3EcxmfKBhOFLdPzgus40ALh18xZ3omcnunmy4Nct5EVfC9RDJ6mAnHgkooCHtZ7
ymxhRN0Nsz45JRCVcgGSHS6oCxT4kHutyk0Luid6bvcPJF5WuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFD4pFnvcow7Mnz9HjpDxPEdjkTbLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjc4ODAzOTEtZjdiNy0z
ZjJiLWEyYjEtYjQ0Zjg5ZDkxMWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAhVD+rSJQYx+JpSKoIhpTlazV/M5osk/NY6D4/
RLS54hPfQPbx2IDB9aGrJXj+hU8PH/1ISX0R64PH9SKl/TIkQS+v9WaCpH1jPviK
G433HHlPyy7NQXBeMg839//KLIC7Wy4JpPP+Dv/dBeMGRwsPTX7MVicECdDLsVvm
CZgRuP9K3u7bC+Re/JmIaMzf8QN30iYsao9tG2A0cQ1m7S9shugUo+cEEjtoDjg5
KTUFG7d/hmO5kbbWdTno6Yqy3NfMhbLuvB0PFvzOiQ0sWeW1I+O1CMJfhfvPjHSL
JxbyrvybMPVg8JIomO4zbPXyAIWl9uXjH8fc45jTEodymoDP
-----END CERTIFICATE-----