Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e6aa29-2206-3bea-a49c-8b4c0e564010.roa
File:                     d7e6aa29-2206-3bea-a49c-8b4c0e564010.roa (raw, json)
Hash identifier:          Y+J2xIwq118FOzl3KW8wEpT/jNI3VqCbcfvBGHN2DcI=
Subject key identifier:   AE:B4:A6:D1:18:CC:5E:74:2D:1B:E9:62:0F:E8:55:8E:60:11:F0:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584845157C026C82CBFA66720200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e6aa29-2206-3bea-a49c-8b4c0e564010.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     396602
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:7c:02:6c:82:cb:fa:66:72:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=c95323c1-e7cb-4802-a7b4-c74c3582c659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1b:cc:bd:86:d2:29:2b:52:60:3d:de:68:ea:
                    3e:1a:aa:61:9d:0c:fb:7e:86:a2:aa:b2:c9:f0:dc:
                    3f:8e:04:c4:60:cf:4d:df:7a:23:d2:31:73:be:a5:
                    f8:5d:d9:3a:0b:fc:62:cb:e9:44:10:71:93:fd:f0:
                    77:8d:d6:b2:49:43:e2:8b:c8:5b:5e:ff:aa:a4:16:
                    58:f1:da:fe:fa:1d:eb:c0:d2:db:9d:c1:8f:5a:e0:
                    67:72:21:2e:5f:35:e4:c2:b3:99:a2:ae:46:6b:bf:
                    a9:31:86:01:65:be:0f:0a:8a:d8:10:25:b7:55:0a:
                    6f:64:a0:e5:82:e7:fa:58:ec:4d:c0:57:82:e7:72:
                    1e:08:58:e9:7c:fc:99:a7:20:e6:c8:2b:23:c6:ab:
                    2c:33:ca:ed:8c:0f:4c:12:ae:72:9e:82:3a:d1:5f:
                    ad:4f:df:6a:f7:51:00:f8:37:35:21:6b:e3:35:0c:
                    ca:0f:94:f8:1d:ea:8f:93:ea:32:08:42:34:b4:c5:
                    f0:6a:8e:88:78:af:58:72:ca:ca:9d:61:2a:e8:2e:
                    d8:48:45:95:3e:66:dd:aa:1d:04:62:51:a8:96:3f:
                    8c:e3:a9:81:05:8d:6e:f3:39:5b:4e:d2:ae:01:bd:
                    f7:19:24:4e:f9:4f:49:fe:64:ac:9d:9e:ab:f2:4c:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B4:A6:D1:18:CC:5E:74:2D:1B:E9:62:0F:E8:55:8E:60:11:F0:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e6aa29-2206-3bea-a49c-8b4c0e564010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:0f:65:89:d3:e6:b6:bd:8c:bc:1c:41:e4:2c:b6:c3:1c:0c:
         a1:dc:21:ca:dc:0e:b5:1f:d3:f2:24:9c:a4:46:52:36:91:f4:
         af:4d:38:37:5c:37:69:ef:ee:2d:cc:cb:42:d7:23:ba:2d:df:
         6c:b6:34:30:ce:b5:31:9e:cc:a6:33:fa:54:19:2b:66:87:f3:
         b3:3f:81:62:6d:4e:70:46:60:51:dd:50:44:42:96:2d:01:9f:
         46:37:db:3f:26:09:07:52:88:3b:ff:9b:bc:0c:0f:6a:bf:f2:
         1b:a9:dd:a8:55:27:90:ae:6c:7a:21:79:64:8b:6e:45:2e:a8:
         b2:b1:f5:f3:63:00:21:9e:da:36:a0:5b:c6:78:69:3c:28:4f:
         01:1b:48:b8:b1:57:9c:95:59:93:8e:c8:cf:1f:e8:07:ee:3f:
         8b:5f:fe:b1:88:25:67:b5:48:26:0f:8e:74:12:8b:f2:fb:07:
         2f:bc:42:30:06:b0:6d:2e:0f:d9:e3:c2:a1:ff:9a:ac:48:00:
         0b:70:eb:43:0b:5d:d7:a3:56:52:5a:75:27:5c:cd:11:f1:af:
         ba:53:16:1d:59:b0:a8:a0:8f:f8:cc:d8:98:b1:ad:5f:9f:b9:
         c4:df:73:50:b4:3b:e0:24:90:aa:89:1f:bc:f8:85:00:ed:5d:
         c5:b2:40:c5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhFFXwCbILL+mZyAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
Yzk1MzIzYzEtZTdjYi00ODAyLWE3YjQtYzc0YzM1ODJjNjU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RvMvYbSKStSYD3eaOo+GqphnQz7foaiqrLJ
8Nw/jgTEYM9N33oj0jFzvqX4Xdk6C/xiy+lEEHGT/fB3jdaySUPii8hbXv+qpBZY
8dr++h3rwNLbncGPWuBnciEuXzXkwrOZoq5Ga7+pMYYBZb4PCorYECW3VQpvZKDl
guf6WOxNwFeC53IeCFjpfPyZpyDmyCsjxqssM8rtjA9MEq5ynoI60V+tT99q91EA
+Dc1IWvjNQzKD5T4HeqPk+oyCEI0tMXwao6IeK9YcsrKnWEq6C7YSEWVPmbdqh0E
YlGolj+M46mBBY1u8zlbTtKuAb33GSRO+U9J/mSsnZ6r8kzVoQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFK60ptEYzF50LRvpYg/oVY5gEfCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdlNmFhMjktMjIwNi0z
YmVhLWE0OWMtOGI0YzBlNTY0MDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC/D2WJ0+a2vYy8HEHkLLbDHAyh3CHK3A61H9Py
JJykRlI2kfSvTTg3XDdp7+4tzMtC1yO6Ld9stjQwzrUxnsymM/pUGStmh/OzP4Fi
bU5wRmBR3VBEQpYtAZ9GN9s/JgkHUog7/5u8DA9qv/Ibqd2oVSeQrmx6IXlki25F
LqiysfXzYwAhnto2oFvGeGk8KE8BG0i4sVeclVmTjsjPH+gH7j+LX/6xiCVntUgm
D450Eovy+wcvvEIwBrBtLg/Z48Kh/5qsSAALcOtDC13Xo1ZSWnUnXM0R8a+6UxYd
WbCooI/4zNiYsa1fn7nE33NQtDvgJJCqiR+8+IUA7V3FskDF
-----END CERTIFICATE-----