Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db00ca30-2df2-31ae-8ab5-410724cccc08.roa
File:                     db00ca30-2df2-31ae-8ab5-410724cccc08.roa (raw, json)
Hash identifier:          /vP2S3Uwaop0E9eDUtPx+oEkecgO+vJOI6tx0bArz3M=
Subject key identifier:   C0:49:98:41:11:B5:19:F9:13:B0:F5:31:1B:09:74:0D:F0:F6:03:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E4675D34C36931539E300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db00ca30-2df2-31ae-8ab5-410724cccc08.roa
Signing time:             Tue 21 Jan 2025 13:34:34 +0000
ROA not before:           Tue 21 Jan 2025 13:34:34 +0000
ROA not after:            Mon 21 Apr 2025 12:34:34 +0000
asID:                     396549
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:46:75:d3:4c:36:93:15:39:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:34 2025 GMT
            Not After : Apr 21 12:34:34 2025 GMT
        Subject: CN=fa2cd776-f632-41f9-86b8-bf1f3372b2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:da:c4:c6:ba:2d:36:ee:2d:a8:b8:3e:29:
                    39:c4:4d:e2:79:57:b9:40:a6:a1:5f:14:b9:84:b8:
                    52:f9:24:a9:89:27:9a:11:d1:dd:ef:b7:b0:03:60:
                    e1:71:d3:54:a8:b3:be:ad:e8:e4:59:1a:1d:72:3b:
                    f4:a5:94:8c:7c:62:00:ed:f2:d5:f4:8c:62:67:eb:
                    72:eb:b4:b3:d5:48:d3:3c:38:24:44:aa:67:6c:f2:
                    2c:8b:1f:ed:c1:d8:87:af:a6:34:b8:9c:4c:1a:d6:
                    67:a0:56:37:43:9c:91:76:10:45:d6:72:7f:53:30:
                    5f:21:4a:4b:ed:fa:d4:10:ba:13:3b:8b:1e:35:a7:
                    06:07:22:ff:c2:0f:16:de:97:b9:5d:45:8f:4a:70:
                    d5:52:d9:ab:c0:43:d4:f5:d6:a0:5a:10:fe:d5:56:
                    3a:7f:5b:af:22:a9:0e:47:fa:50:30:f1:9e:42:d0:
                    4c:79:d2:55:5b:e7:54:ad:e2:a5:2b:4d:e6:5e:b7:
                    25:8e:f3:e6:37:dd:5f:43:21:91:57:53:0b:90:f7:
                    6a:6c:bf:a7:8a:b9:6a:5a:10:bf:58:25:27:f3:7e:
                    5b:52:1e:a9:47:6e:61:16:7d:24:fc:c1:02:fb:d6:
                    93:3a:67:2c:d0:a6:bb:06:ad:ba:f2:3a:7c:cb:aa:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:49:98:41:11:B5:19:F9:13:B0:F5:31:1B:09:74:0D:F0:F6:03:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db00ca30-2df2-31ae-8ab5-410724cccc08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:6a:9d:90:d1:58:2c:3f:25:a8:49:ec:5f:f5:1f:d1:2d:
         76:e9:fc:7d:cb:35:45:17:ff:b7:12:e2:d7:7d:57:d4:6b:f1:
         26:4b:f4:b8:1a:61:24:d6:c0:79:ee:1e:ea:9a:84:1c:20:3c:
         b8:71:11:f4:91:36:bf:d6:33:b8:68:92:c7:f1:9a:2d:f0:73:
         49:f4:f2:93:5d:29:cf:fb:5a:da:32:ea:81:cc:df:be:36:c8:
         29:04:5f:21:8e:f6:71:37:12:04:6e:2c:6b:eb:df:b5:94:b5:
         22:ae:c9:2e:46:60:cf:8d:06:0d:60:cb:f9:11:3e:49:14:83:
         cb:a9:da:cf:d0:46:a9:28:35:ca:d2:3e:8e:e1:83:ef:2a:1f:
         f0:90:bc:dd:d9:1d:fa:87:68:47:f0:21:48:f2:f4:b0:2c:a8:
         76:69:f6:ac:2e:13:92:0a:6c:36:fb:b5:8a:41:6d:79:5a:36:
         6d:55:56:f3:05:ee:44:94:cb:3c:12:02:f4:34:b8:d4:f5:95:
         17:e7:52:f1:5c:d1:c5:7f:d3:61:5b:8c:84:a4:62:b1:93:0c:
         09:39:e2:6b:d9:87:27:7f:65:3c:3b:58:81:01:14:8b:e7:3d:
         06:9c:a5:c7:a8:ca:f6:5a:f5:35:4b:b6:e7:a0:8c:31:47:ec:
         0c:0d:a7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----