Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddbab032-09ac-37dd-b25d-121d95c1e630.roa
File:                     ddbab032-09ac-37dd-b25d-121d95c1e630.roa (raw, json)
Hash identifier:          b2WurqGsFb4rvtBwzcCa5KhhDn1mxr2vCRPQ31ByLYU=
Subject key identifier:   49:63:B8:04:EF:45:BD:61:D3:60:09:57:9D:5E:53:94:01:A4:2C:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A048320255FB8C7AB72500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddbab032-09ac-37dd-b25d-121d95c1e630.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     397202
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:48:32:02:55:fb:8c:7a:b7:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=d1841c89-c2c8-445b-83a7-3a8d797c4159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:78:7c:f1:dd:b2:4f:82:38:5f:1f:45:56:
                    c2:68:bc:e4:4f:42:8e:8d:5a:f7:c4:56:f1:25:34:
                    e8:6a:b6:30:65:be:07:67:ed:ed:bb:8c:b2:20:15:
                    50:72:9e:99:79:93:8b:88:ee:1d:d1:8d:c6:b7:68:
                    cb:50:0b:8b:a9:d3:9c:69:34:aa:11:ee:1a:29:35:
                    ca:24:df:8e:a3:b2:f2:32:78:f8:df:98:ef:d4:fe:
                    46:90:27:de:9f:5d:69:54:82:f8:e8:dd:1c:bf:19:
                    39:b8:fe:8a:f1:9d:c1:3e:e4:4c:b3:5b:ac:07:08:
                    28:5e:0b:93:dd:91:03:77:fa:c3:90:39:fc:e3:c0:
                    16:32:c4:32:73:39:cf:2d:0a:f8:0d:3e:4e:e5:86:
                    a0:da:cd:80:af:20:37:38:79:c6:cd:28:59:f1:ee:
                    63:99:6d:05:53:cc:cb:9b:03:11:41:ec:da:4f:1b:
                    6e:e5:dd:3e:70:36:62:21:ee:8f:b6:73:f4:08:ba:
                    9c:94:34:53:25:06:6b:22:7a:db:4b:3b:02:d8:4c:
                    29:9b:3d:ac:23:91:62:e4:77:ec:00:a3:30:95:69:
                    58:13:12:1a:18:81:25:8a:e1:1a:92:63:40:82:24:
                    4a:32:0e:ca:47:ea:3a:32:50:91:46:16:dd:ed:08:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:B8:04:EF:45:BD:61:D3:60:09:57:9D:5E:53:94:01:A4:2C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddbab032-09ac-37dd-b25d-121d95c1e630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:2a:08:a3:61:ab:ea:23:07:f1:ad:c1:f9:0c:c1:8b:6b:d3:
         f8:0d:65:78:4f:57:5b:2f:67:64:2b:2c:de:98:3e:78:02:c2:
         b8:fb:e5:37:ed:99:07:a7:3a:4f:7a:52:af:6d:fb:5d:6f:b6:
         a1:80:91:f1:7d:75:f2:d3:fe:1a:3e:0a:83:75:78:0c:c6:14:
         46:a8:56:fe:9b:81:d9:08:d2:f2:c5:fe:5b:da:eb:62:64:fd:
         29:cf:7a:e6:ec:2c:1c:1d:1b:56:f0:c5:2f:ba:df:04:65:12:
         71:cd:61:57:4e:d9:e3:66:c5:33:f2:4d:0b:82:3c:f3:87:fd:
         4d:03:61:1b:09:69:aa:64:64:ec:1b:7b:63:b6:4d:ba:52:0a:
         a2:f4:f4:b3:de:43:d4:f3:02:6c:a0:1c:69:30:41:27:bf:17:
         69:ed:cd:5b:9a:71:54:31:21:8a:8b:21:ea:20:65:69:d0:98:
         e6:47:74:5a:b6:bd:b0:67:19:da:c4:ee:52:b4:bd:d4:0f:6c:
         9f:2f:14:2b:8c:69:70:dc:13:93:f5:c5:b8:d4:43:4a:09:18:
         cc:c2:28:6a:d0:48:d1:d0:b4:58:8d:06:b6:64:01:c0:c0:fa:
         8e:aa:f2:f2:9b:f7:50:4d:a7:0a:7a:3d:d4:05:92:7e:32:d5:
         04:35:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----