Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5e7662-483c-35f4-9201-2722c4dd4264.roa
File:                     bb5e7662-483c-35f4-9201-2722c4dd4264.roa (raw, json)
Hash identifier:          zxMIFIBve2+NFZbUaTrP0MkY5gFseDwFD1pVQddOLr8=
Subject key identifier:   A1:EE:2A:31:E0:C8:3B:90:77:DD:94:AC:04:BB:7F:E7:CF:0C:5E:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB6B4DD693185679A2000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5e7662-483c-35f4-9201-2722c4dd4264.roa
Signing time:             Thu 16 Jan 2025 13:38:18 +0000
ROA not before:           Thu 16 Jan 2025 13:38:18 +0000
ROA not after:            Wed 16 Apr 2025 12:38:18 +0000
asID:                     397206
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b6:b4:dd:69:31:85:67:9a:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:18 2025 GMT
            Not After : Apr 16 12:38:18 2025 GMT
        Subject: CN=77b22ec2-7bde-4f51-9087-a80a33280285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:04:d6:ca:29:2a:47:a2:7e:4f:b0:1b:28:
                    f5:f6:6d:69:c6:05:7b:95:85:b8:c7:97:86:2b:45:
                    a0:a1:96:8e:ea:4a:69:62:a8:ff:98:f4:ae:6b:fd:
                    30:28:ff:16:53:45:a8:82:f5:a1:7a:5a:67:aa:56:
                    1b:79:57:d9:94:25:eb:19:74:5a:0d:72:e1:16:32:
                    15:47:ad:f7:f9:25:5f:7b:14:e5:52:41:07:f4:2d:
                    74:ff:64:33:09:db:4c:5e:da:a9:28:8a:4e:9e:3f:
                    0c:d3:28:fb:03:11:4d:5f:56:6f:32:f5:4b:5d:51:
                    f5:2a:b6:29:06:3e:1e:61:43:c1:42:e8:ab:97:2a:
                    10:b0:98:85:b4:51:61:3c:56:17:6c:71:c4:4b:98:
                    72:c8:c7:ec:b0:8a:c8:b9:70:56:01:1f:4d:16:83:
                    32:1c:ef:a7:fe:0f:d8:24:97:8e:04:c6:6b:e1:10:
                    b0:44:41:9e:ed:ef:19:3b:d5:f9:14:c5:02:00:3d:
                    f0:fa:5a:95:52:02:64:cc:af:c0:65:56:d0:a0:99:
                    b5:5e:b5:4f:ea:b5:54:49:d6:33:88:57:60:46:f1:
                    0c:b1:9d:2a:f4:4f:39:f6:ac:ce:8f:9d:6b:02:05:
                    cf:f2:ff:3b:55:2a:0f:b9:e5:91:a7:c5:be:0d:df:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EE:2A:31:E0:C8:3B:90:77:DD:94:AC:04:BB:7F:E7:CF:0C:5E:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5e7662-483c-35f4-9201-2722c4dd4264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:40:db:19:56:aa:9c:f3:5e:4c:4c:df:bc:0b:b5:3c:3e:6e:
         0d:e1:4c:fb:1a:24:5a:9d:7e:42:34:48:08:55:5b:5f:24:f7:
         ac:ab:dd:32:24:dc:17:c5:e5:29:7c:71:9a:4a:4a:2b:99:b1:
         a9:b8:bb:22:df:5e:f1:19:69:1b:c3:d4:1e:75:ae:39:6a:7d:
         b3:49:39:cb:6f:ef:b4:2f:24:2e:d6:9b:23:43:56:42:aa:06:
         5c:7a:71:8e:8f:e0:82:a5:11:d6:e6:d7:92:39:28:1a:5d:a4:
         9f:ea:26:d3:ab:67:df:e0:1c:a4:24:6f:76:f4:16:c1:ea:5d:
         5b:bf:ce:bb:b6:84:be:76:b2:dd:d8:55:b0:41:6a:90:b4:66:
         b2:c8:ce:e8:91:1e:10:dd:38:9b:25:04:0b:b8:a1:ee:98:c2:
         1e:04:40:39:26:14:d2:17:b3:7f:cb:be:fc:bc:b7:75:8a:02:
         4f:10:aa:59:c1:ee:d2:f9:a3:be:c9:9c:fb:ed:f9:0a:44:18:
         98:8c:8a:fc:44:53:0b:76:29:18:a7:f4:87:9c:b1:9c:25:4c:
         36:70:64:d4:b9:eb:46:c9:2b:d6:d1:f0:59:b0:b9:92:49:b4:
         48:83:97:fa:38:a1:4e:50:cb:87:94:23:82:01:f1:3a:0d:7c:
         18:85:a7:0b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiQara03WkxhWeaIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNjEzMzgxOFoXDTI1MDQxNjEyMzgxOFowLzEtMCsGA1UEAxMk
NzdiMjJlYzItN2JkZS00ZjUxLTkwODctYTgwYTMzMjgwMjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wUE1sopKkeifk+wGyj19m1pxgV7lYW4x5eG
K0WgoZaO6kppYqj/mPSua/0wKP8WU0WogvWhelpnqlYbeVfZlCXrGXRaDXLhFjIV
R633+SVfexTlUkEH9C10/2QzCdtMXtqpKIpOnj8M0yj7AxFNX1ZvMvVLXVH1KrYp
Bj4eYUPBQuirlyoQsJiFtFFhPFYXbHHES5hyyMfssIrIuXBWAR9NFoMyHO+n/g/Y
JJeOBMZr4RCwREGe7e8ZO9X5FMUCAD3w+lqVUgJkzK/AZVbQoJm1XrVP6rVUSdYz
iFdgRvEMsZ0q9E859qzOj51rAgXP8v87VSoPueWRp8W+Dd/6gQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKHuKjHgyDuQd92UrAS7f+fPDF49MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmI1ZTc2NjItNDgzYy0z
NWY0LTkyMDEtMjcyMmM0ZGQ0MjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBlQNsZVqqc815MTN+8C7U8Pm4N4Uz7GiRanX5C
NEgIVVtfJPesq90yJNwXxeUpfHGaSkormbGpuLsi317xGWkbw9Qeda45an2zSTnL
b++0LyQu1psjQ1ZCqgZcenGOj+CCpRHW5teSOSgaXaSf6ibTq2ff4BykJG929BbB
6l1bv867toS+drLd2FWwQWqQtGayyM7okR4Q3TibJQQLuKHumMIeBEA5JhTSF7N/
y778vLd1igJPEKpZwe7S+aO+yZz77fkKRBiYjIr8RFMLdikYp/SHnLGcJUw2cGTU
uetGySvW0fBZsLmSSbRIg5f6OKFOUMuHlCOCAfE6DXwYhacL
-----END CERTIFICATE-----