Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
File:                     baa3bdde-11fd-3f3c-b057-d89d19787b73.roa (raw, json)
Hash identifier:          eiK4yb2HgGWgiACrkH0hPGtUvmaRA32hTPOARrdjA0g=
Subject key identifier:   21:80:19:82:66:E3:44:23:04:24:CB:20:29:3C:B7:3A:66:6D:A0:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885A2A289B37C317AEA980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa
Signing time:             Thu 14 Nov 2024 13:35:45 +0000
ROA not before:           Thu 14 Nov 2024 13:35:45 +0000
ROA not after:            Wed 12 Feb 2025 13:35:45 +0000
asID:                     396555
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5a:2a:28:9b:37:c3:17:ae:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:45 2024 GMT
            Not After : Feb 12 13:35:45 2025 GMT
        Subject: CN=a34bec0f-6e25-4d96-9ee3-9d3b01aa9fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:a9:e9:51:9e:a7:04:33:ec:e8:d3:7e:f7:
                    df:d0:73:8b:dd:f6:7b:00:86:c7:5b:81:1f:f1:f3:
                    d9:25:a4:51:7b:98:e7:1f:fd:25:58:26:2f:13:4b:
                    4a:ba:aa:88:ec:46:16:2c:39:ea:5f:23:4f:79:e9:
                    3a:7b:ff:fe:4d:f1:16:b2:b4:5a:33:24:47:f2:56:
                    d2:34:5c:38:d9:4b:65:f8:d5:b8:33:7a:d0:d7:2f:
                    ea:bb:33:d0:c6:59:6d:1a:39:4a:a4:cd:10:7c:57:
                    ee:d5:39:31:1c:c8:47:23:11:20:30:f2:a5:c9:a8:
                    9d:dd:e7:5e:03:3b:3e:24:42:a0:6a:48:ee:be:26:
                    15:30:8b:2f:6b:29:0c:4a:65:d7:f1:7d:61:b2:fe:
                    03:2b:a9:cb:a7:2e:2f:4b:5c:01:31:8f:83:4d:a3:
                    b1:4c:3e:9f:55:9e:85:26:c0:fd:b0:9f:01:f0:28:
                    58:6e:ba:b6:ab:72:6a:fd:77:0e:4e:56:9a:b1:2b:
                    c6:67:80:bc:7d:4c:36:0c:6a:a5:38:df:c9:3b:bb:
                    e1:c1:95:be:64:62:ce:a4:0c:d2:05:f8:f2:21:3b:
                    dc:a5:7e:3b:e8:18:13:50:ab:51:42:14:c1:17:81:
                    de:a5:ae:8e:25:15:ce:4f:ef:d3:4c:68:3b:f0:4f:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:19:82:66:E3:44:23:04:24:CB:20:29:3C:B7:3A:66:6D:A0:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/baa3bdde-11fd-3f3c-b057-d89d19787b73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:6e:1c:ac:52:ac:6c:3f:ec:bb:c1:b7:89:ba:b3:47:b6:
         07:06:83:f3:ff:68:7e:44:70:2a:e5:83:47:18:5a:48:a3:27:
         03:93:ed:7d:8b:bb:d0:d4:5b:00:41:e2:bb:61:43:72:04:5f:
         d1:53:a1:a1:fe:e8:ab:4f:57:de:98:ef:a0:d1:8d:a7:b0:6a:
         bd:8c:2a:55:fa:07:7f:2d:d3:b0:f0:ea:33:4c:40:47:f4:54:
         51:a3:b1:30:1f:50:07:3a:bb:d3:16:74:3b:7f:a1:72:f1:5d:
         88:78:d8:9c:41:8e:7d:21:b5:c1:56:bf:19:11:2f:e9:9f:23:
         ce:73:7a:c6:78:1b:87:61:a6:9d:c7:de:e8:d9:a1:c9:08:85:
         c6:f6:20:cf:ee:ac:b8:bd:1c:94:42:be:ee:e5:cf:d2:5d:55:
         fd:5b:9d:49:3a:67:e2:00:42:c6:2b:be:b2:a8:2b:4a:91:a1:
         e5:97:5c:44:1c:0c:c7:04:e9:02:e7:5b:81:43:8b:21:4a:d6:
         88:c5:57:e4:fa:51:52:05:3a:dc:5e:0e:94:69:b4:67:2c:1c:
         ea:52:36:06:04:f7:2e:b1:5b:5f:04:9d:18:ee:e3:20:5a:55:
         5d:fc:d3:09:22:35:05:de:c3:b0:19:7d:4f:2a:7f:97:5a:cd:
         ac:53:72:c6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEfgiFoqKJs3wxeuqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTExNDEzMzU0NVoXDTI1MDIxMjEzMzU0NVowLzEtMCsGA1UEAxMk
YTM0YmVjMGYtNmUyNS00ZDk2LTllZTMtOWQzYjAxYWE5ZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VSp6VGepwQz7OjTfvff0HOL3fZ7AIbHW4Ef
8fPZJaRRe5jnH/0lWCYvE0tKuqqI7EYWLDnqXyNPeek6e//+TfEWsrRaMyRH8lbS
NFw42Utl+NW4M3rQ1y/quzPQxlltGjlKpM0QfFfu1TkxHMhHIxEgMPKlyaid3ede
Azs+JEKgakjuviYVMIsvaykMSmXX8X1hsv4DK6nLpy4vS1wBMY+DTaOxTD6fVZ6F
JsD9sJ8B8ChYbrq2q3Jq/XcOTlaasSvGZ4C8fUw2DGqlON/JO7vhwZW+ZGLOpAzS
BfjyITvcpX476BgTUKtRQhTBF4Hepa6OJRXOT+/TTGg78E+pWwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCGAGYJm40QjBCTLICk8tzpmbaAlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFhM2JkZGUtMTFmZC0z
ZjNjLWIwNTctZDg5ZDE5Nzg3YjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCVPW4crFKsbD/su8G3ibqzR7YHBoPz/2h+RHAq
5YNHGFpIoycDk+19i7vQ1FsAQeK7YUNyBF/RU6Gh/uirT1femO+g0Y2nsGq9jCpV
+gd/LdOw8OozTEBH9FRRo7EwH1AHOrvTFnQ7f6Fy8V2IeNicQY59IbXBVr8ZES/p
nyPOc3rGeBuHYaadx97o2aHJCIXG9iDP7qy4vRyUQr7u5c/SXVX9W51JOmfiAELG
K76yqCtKkaHll1xEHAzHBOkC51uBQ4shStaIxVfk+lFSBTrcXg6UabRnLBzqUjYG
BPcusVtfBJ0Y7uMgWlVd/NMJIjUF3sOwGX1PKn+XWs2sU3LG
-----END CERTIFICATE-----