Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc86e2b3-029f-3e8f-b349-66dd0d1d9cca.roa
File:                     cc86e2b3-029f-3e8f-b349-66dd0d1d9cca.roa (raw, json)
Hash identifier:          Nxti9pSITbfVAuheeEl5ZE+8lzTF8o+je03YQMOAXB0=
Subject key identifier:   A7:D3:6F:45:B6:0A:23:47:C9:0C:AF:8A:0D:AF:31:E7:03:50:C7:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAADAFE8DD7F78F6D25B3B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc86e2b3-029f-3e8f-b349-66dd0d1d9cca.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     396579
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:da:fe:8d:d7:f7:8f:6d:25:b3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=ee515a72-8eca-48ef-b53e-ec1403e8d0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:c5:18:b9:51:47:f7:8a:55:ab:1f:5c:3b:
                    17:3b:aa:2e:5a:b1:ba:39:00:46:a1:0a:53:6c:4e:
                    ff:17:b4:0b:7c:78:42:9c:22:28:91:72:a2:54:e5:
                    9b:aa:d6:96:00:b8:dd:d3:28:24:8e:1e:96:8e:7a:
                    98:0c:86:e0:6a:6f:0b:0e:57:2d:a4:53:02:0c:8e:
                    2c:31:8f:93:00:35:aa:4d:52:05:43:1c:9e:90:cf:
                    24:3b:d4:5c:90:bb:38:69:e7:fc:88:2f:cd:ec:ae:
                    fc:5c:b9:27:59:0c:8e:63:a2:49:91:82:e4:b2:b3:
                    64:8d:a8:7c:57:64:c5:7e:e5:a6:16:af:20:a7:17:
                    f8:f1:b3:b0:64:ce:f1:80:8c:96:d6:57:2d:d1:72:
                    97:43:bc:3b:b5:cd:0a:6a:23:3c:f8:93:e6:9e:07:
                    ac:36:b6:2c:bd:b7:43:6c:1b:ed:0a:02:6c:11:e2:
                    61:16:7c:71:e6:91:6b:b3:4b:0f:c8:a5:a3:4c:d7:
                    10:db:68:d5:2f:46:b3:bd:ce:c0:fe:e5:b4:d1:6e:
                    9c:1f:c3:e4:54:dc:cc:44:d2:8f:6d:e1:50:a4:9b:
                    4b:83:6d:94:6f:ae:ca:3e:b1:ac:95:3c:40:bc:8f:
                    61:cb:f2:66:c9:c0:90:32:37:e4:47:a5:1f:30:9b:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:6F:45:B6:0A:23:47:C9:0C:AF:8A:0D:AF:31:E7:03:50:C7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc86e2b3-029f-3e8f-b349-66dd0d1d9cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:ec:4c:28:ab:7d:0e:4c:60:f9:32:c4:64:9c:8b:4a:f6:
         58:a3:24:1e:a1:4a:ee:eb:55:b7:16:0f:5b:69:28:1d:48:71:
         c1:3d:cc:c1:30:1d:28:59:2a:1e:5c:6c:e3:3d:ad:4c:89:51:
         7b:da:8a:9d:55:80:96:f5:9e:bd:36:fd:b8:66:1a:8e:27:b7:
         c8:d8:23:15:f7:4d:dc:9d:56:0c:0f:c4:f9:7e:7e:c7:13:7e:
         be:89:d7:d9:68:8e:57:d4:34:84:11:29:25:ef:ab:cb:e3:6b:
         a9:b4:8f:13:67:60:f0:ad:2a:ae:a0:79:2c:c9:b5:90:47:43:
         fd:b7:21:a3:db:8a:b1:94:06:40:d5:18:e9:87:22:63:28:b8:
         1c:8a:9a:df:57:02:d6:5b:fc:85:30:0a:7e:bc:02:f2:15:08:
         bb:03:1b:dc:50:cb:64:54:98:41:3c:a0:11:54:80:95:b2:fd:
         95:2d:fb:5a:42:9c:bf:d6:ee:d7:3b:8c:8c:55:82:31:37:e0:
         82:15:e0:91:e0:11:f4:1c:fc:09:37:ad:af:bc:c9:56:0d:2f:
         e7:25:af:3c:46:2b:3a:bb:44:41:61:09:2b:c5:2a:36:d9:89:
         b9:0d:15:5a:fd:37:18:9f:41:73:7b:78:0d:c9:ce:a6:62:bb:
         b7:07:3d:44
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhKqtr+jdf3j20ls7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZWU1MTVhNzItOGVjYS00OGVmLWI1M2UtZWMxNDAzZThkMGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HvFGLlRR/eKVasfXDsXO6ouWrG6OQBGoQpT
bE7/F7QLfHhCnCIokXKiVOWbqtaWALjd0ygkjh6WjnqYDIbgam8LDlctpFMCDI4s
MY+TADWqTVIFQxyekM8kO9RckLs4aef8iC/N7K78XLknWQyOY6JJkYLksrNkjah8
V2TFfuWmFq8gpxf48bOwZM7xgIyW1lct0XKXQ7w7tc0KaiM8+JPmngesNrYsvbdD
bBvtCgJsEeJhFnxx5pFrs0sPyKWjTNcQ22jVL0azvc7A/uW00W6cH8PkVNzMRNKP
beFQpJtLg22Ub67KPrGslTxAvI9hy/JmycCQMjfkR6UfMJsTgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKfTb0W2CiNHyQyvig2vMecDUMdYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M4NmUyYjMtMDI5Zi0z
ZThmLWIzNDktNjZkZDBkMWQ5Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCfFuxMKKt9Dkxg+TLEZJyLSvZYoyQeoUru61W3
Fg9baSgdSHHBPczBMB0oWSoeXGzjPa1MiVF72oqdVYCW9Z69Nv24ZhqOJ7fI2CMV
903cnVYMD8T5fn7HE36+idfZaI5X1DSEESkl76vL42uptI8TZ2DwrSquoHksybWQ
R0P9tyGj24qxlAZA1RjphyJjKLgciprfVwLWW/yFMAp+vALyFQi7AxvcUMtkVJhB
PKARVICVsv2VLftaQpy/1u7XO4yMVYIxN+CCFeCR4BH0HPwJN62vvMlWDS/nJa88
Ris6u0RBYQkrxSo22Ym5DRVa/TcYn0Fze3gNyc6mYru3Bz1E
-----END CERTIFICATE-----