Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df4bf30c-b497-3cda-b0f7-8f97218ab739.roa
File:                     df4bf30c-b497-3cda-b0f7-8f97218ab739.roa (raw, json)
Hash identifier:          bq2CtmxlO1sX8HAdfIi3ehpZrjWWHzoj+ZgaBZ7v/yw=
Subject key identifier:   AC:A6:91:1A:CF:FE:C4:13:F5:1D:65:9F:49:1C:1C:72:55:ED:C7:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B8A48382F9E6BB0931240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df4bf30c-b497-3cda-b0f7-8f97218ab739.roa
Signing time:             Wed 11 Dec 2024 15:17:57 +0000
ROA not before:           Wed 11 Dec 2024 15:17:57 +0000
ROA not after:            Tue 11 Mar 2025 14:17:57 +0000
asID:                     396566
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:8a:48:38:2f:9e:6b:b0:93:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:57 2024 GMT
            Not After : Mar 11 14:17:57 2025 GMT
        Subject: CN=9ed5b5fe-0bbf-4e54-b974-ba747c505ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:85:2a:e8:9c:16:df:c1:dd:56:96:25:4a:31:
                    8f:48:11:e1:c8:92:e3:98:94:77:ca:87:12:0c:7f:
                    ef:e2:db:3e:b5:4a:c6:d3:ba:7e:23:a1:c7:1e:50:
                    01:8b:e4:c6:13:ea:32:ff:c0:24:46:25:7e:16:e3:
                    96:f3:25:ec:32:61:81:40:60:15:70:17:9f:4d:43:
                    a4:2b:d2:a1:86:7e:40:2c:07:8d:94:81:5d:e9:9d:
                    3c:61:d8:3d:61:1d:ce:4a:1b:5a:d7:cc:d8:93:34:
                    64:0f:06:c9:d6:1f:b4:41:16:9e:32:6e:c0:43:a4:
                    25:91:37:1e:13:f1:dd:1c:67:af:91:f9:82:5c:74:
                    90:5b:1a:d8:f3:74:c2:a7:88:ed:81:00:05:e4:c3:
                    5d:bf:ff:08:1f:96:ea:8d:09:57:ce:89:0f:47:6a:
                    d3:e2:85:ea:2e:44:99:d8:d4:af:58:a1:fe:77:2f:
                    f6:5e:0a:2d:d8:8e:06:1d:c4:28:c4:fa:4f:35:26:
                    67:f9:b2:62:3c:53:42:cd:33:8f:e8:79:0f:37:70:
                    59:16:cc:e3:e7:be:bc:2e:ff:f0:86:07:eb:f1:23:
                    79:47:fb:e2:2b:e8:6b:d5:5d:17:a8:25:97:34:9d:
                    da:35:82:60:82:9d:83:ea:98:51:76:bc:28:d1:f4:
                    41:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A6:91:1A:CF:FE:C4:13:F5:1D:65:9F:49:1C:1C:72:55:ED:C7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df4bf30c-b497-3cda-b0f7-8f97218ab739.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ff:13:7d:3c:34:9d:83:8d:2c:67:8d:5a:21:83:ce:37:fa:
         58:72:d4:88:e2:5b:90:00:b7:8c:0e:53:4c:80:ba:d9:e8:d8:
         68:a7:a3:45:6b:93:c8:65:56:1a:69:91:03:36:78:57:8d:3f:
         53:06:ef:d6:79:c6:76:16:26:65:54:f8:d3:29:56:03:98:a6:
         27:41:61:8b:e4:9f:e7:ed:3f:13:44:cb:dd:62:bf:e7:6f:ba:
         79:5f:cb:0a:e1:03:47:f2:f5:0a:c8:d2:a2:a8:fc:c4:0f:69:
         a4:ab:30:ff:9e:ee:b5:f7:87:fa:31:66:98:83:e3:30:31:36:
         56:01:fc:e8:92:4e:3c:3f:e3:51:d0:93:f6:86:d0:a7:ad:55:
         0b:b0:fe:e5:0c:a2:36:84:40:d6:8f:23:1e:29:89:10:ad:b6:
         6a:d6:a0:91:90:62:96:17:6a:58:96:98:88:bb:5a:4a:fb:57:
         9e:16:9a:22:4e:77:ba:9b:d4:6a:32:11:c0:5f:0b:0b:ea:de:
         c8:8c:bf:5d:04:ac:05:b3:4c:61:fa:ca:36:ad:7d:bf:27:14:
         e4:cd:e1:f3:1f:29:d9:53:59:28:6a:28:c6:58:7b:de:92:80:
         06:da:91:9e:8b:31:d3:40:a5:c6:fc:d5:46:a7:cc:c4:26:e5:
         fe:67:6c:e6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEgsG4pIOC+ea7CTEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxMTE1MTc1N1oXDTI1MDMxMTE0MTc1N1owLzEtMCsGA1UEAxMk
OWVkNWI1ZmUtMGJiZi00ZTU0LWI5NzQtYmE3NDdjNTA1ZWU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Uq6JwW38HdVpYlSjGPSBHhyJLjmJR3yocS
DH/v4ts+tUrG07p+I6HHHlABi+TGE+oy/8AkRiV+FuOW8yXsMmGBQGAVcBefTUOk
K9Khhn5ALAeNlIFd6Z08Ydg9YR3OShta18zYkzRkDwbJ1h+0QRaeMm7AQ6QlkTce
E/HdHGevkfmCXHSQWxrY83TCp4jtgQAF5MNdv/8IH5bqjQlXzokPR2rT4oXqLkSZ
2NSvWKH+dy/2Xgot2I4GHcQoxPpPNSZn+bJiPFNCzTOP6HkPN3BZFszj5768Lv/w
hgfr8SN5R/viK+hr1V0XqCWXNJ3aNYJggp2D6phRdrwo0fRBXQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKymkRrP/sQT9R1ln0kcHHJV7ceqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY0YmYzMGMtYjQ5Ny0z
Y2RhLWIwZjctOGY5NzIxOGFiNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBj/xN9PDSdg40sZ41aIYPON/pYctSI4luQALeM
DlNMgLrZ6Nhop6NFa5PIZVYaaZEDNnhXjT9TBu/WecZ2FiZlVPjTKVYDmKYnQWGL
5J/n7T8TRMvdYr/nb7p5X8sK4QNH8vUKyNKiqPzED2mkqzD/nu6194f6MWaYg+Mw
MTZWAfzokk48P+NR0JP2htCnrVULsP7lDKI2hEDWjyMeKYkQrbZq1qCRkGKWF2pY
lpiIu1pK+1eeFpoiTne6m9RqMhHAXwsL6t7IjL9dBKwFs0xh+so2rX2/JxTkzeHz
HynZU1koaijGWHvekoAG2pGeizHTQKXG/NVGp8zEJuX+Z2zm
-----END CERTIFICATE-----