Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e117bf26-dc52-3d30-9d8b-afb2a7ae4017.roa
File:                     e117bf26-dc52-3d30-9d8b-afb2a7ae4017.roa (raw, json)
Hash identifier:          nFGRyUd4Flp9duaL4D13PSh4IZ9PJS4mg6J2yWANs18=
Subject key identifier:   C2:E6:8A:C4:45:3F:F7:52:16:11:E5:8D:BC:BE:75:5B:90:86:F2:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005F6C7A64218B76C8B100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e117bf26-dc52-3d30-9d8b-afb2a7ae4017.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     397200
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5f:6c:7a:64:21:8b:76:c8:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=a6962067-3bc6-4b7c-ba6b-a98004fc2f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:01:98:84:29:d8:08:3c:52:f9:4b:82:e2:48:
                    f9:61:c7:fb:f3:4f:b3:6b:60:f6:aa:77:99:27:c1:
                    30:e0:5c:0e:58:69:16:a6:f3:e7:08:f1:2a:62:e1:
                    b0:d7:54:7f:63:3e:fa:a2:fa:75:2b:b7:8b:33:88:
                    d3:a8:44:25:3e:22:7d:85:58:cf:31:4a:ac:8a:45:
                    1c:90:ea:0f:ce:01:c1:ae:9a:d4:ff:3d:e7:65:86:
                    74:a2:ba:de:ca:36:5f:db:3d:c7:b3:c2:c0:ac:fe:
                    b2:9f:57:17:aa:ca:7c:a2:93:63:1d:fb:62:c9:9e:
                    d7:2b:47:ee:a5:b1:f4:4c:70:67:d0:55:59:de:bf:
                    16:a8:ef:52:6b:40:fa:4c:55:75:2a:dc:c0:a8:7a:
                    96:72:c3:9a:f4:ed:3e:20:c2:1a:09:5d:a7:59:30:
                    5d:bb:4e:d3:3a:a6:aa:60:94:67:00:fd:20:c9:48:
                    64:34:8f:09:1e:54:3a:fc:dd:d5:7c:7f:36:51:af:
                    3a:76:22:48:4c:91:99:d5:98:7c:b4:7d:d3:92:27:
                    54:00:3a:5a:ce:78:f8:0b:ab:d2:ab:60:da:1a:07:
                    f8:1a:c9:a9:8c:f0:94:78:01:45:23:7f:d5:57:3a:
                    40:bc:74:0e:23:00:23:23:99:e9:d6:21:c1:6a:c1:
                    33:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E6:8A:C4:45:3F:F7:52:16:11:E5:8D:BC:BE:75:5B:90:86:F2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e117bf26-dc52-3d30-9d8b-afb2a7ae4017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d9:65:bc:8f:58:59:ec:77:a8:6f:4c:c4:38:d3:a6:ad:54:
         56:e9:f2:41:a7:62:86:7b:86:21:55:06:6b:dc:15:5c:e8:44:
         d2:96:c1:36:88:7c:de:ae:d0:55:d2:70:09:32:ce:73:07:fc:
         43:d5:06:71:d2:e4:a1:46:98:75:e4:8e:19:8c:c8:e0:51:17:
         ee:8d:ea:51:74:19:5f:38:6d:bd:c5:ac:50:90:b6:8f:a1:45:
         1c:49:13:72:91:cb:e9:de:8d:c0:09:63:3d:1e:25:de:6f:6b:
         af:78:a7:a9:4a:6e:1d:e1:e8:e4:c6:cc:7e:79:30:db:d9:96:
         6a:4a:82:f3:ed:80:95:02:09:fa:f0:8b:8a:6a:6a:7d:33:64:
         5d:39:5c:c6:40:11:79:1e:c3:c2:a5:67:06:11:25:31:88:28:
         0a:22:35:4c:26:47:fa:f6:9d:f0:12:a2:f5:3f:bf:e8:98:8b:
         55:40:ea:68:25:b4:d2:7b:ec:3a:31:33:e5:db:f7:da:e5:2d:
         27:3f:d6:b8:fc:05:b8:b3:d9:bd:02:61:29:af:7a:8e:50:d6:
         a5:c8:8e:1a:0d:76:0f:6d:07:23:85:25:b4:20:95:55:d0:37:
         77:5d:ce:c6:a9:6c:41:bd:3a:d2:d7:48:42:4e:28:c0:f1:44:
         f8:2e:27:4e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhhAF9semQhi3bIsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIzMDE0MDA1MVoXDTI1MDMzMDEzMDA1MVowLzEtMCsGA1UEAxMk
YTY5NjIwNjctM2JjNi00YjdjLWJhNmItYTk4MDA0ZmMyZjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgGYhCnYCDxS+UuC4kj5Ycf780+za2D2qneZ
J8Ew4FwOWGkWpvPnCPEqYuGw11R/Yz76ovp1K7eLM4jTqEQlPiJ9hVjPMUqsikUc
kOoPzgHBrprU/z3nZYZ0orreyjZf2z3Hs8LArP6yn1cXqsp8opNjHftiyZ7XK0fu
pbH0THBn0FVZ3r8WqO9Sa0D6TFV1KtzAqHqWcsOa9O0+IMIaCV2nWTBdu07TOqaq
YJRnAP0gyUhkNI8JHlQ6/N3VfH82Ua86diJITJGZ1Zh8tH3TkidUADpaznj4C6vS
q2DaGgf4GsmpjPCUeAFFI3/VVzpAvHQOIwAjI5np1iHBasEzoQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMLmisRFP/dSFhHljby+dVuQhvJpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTExN2JmMjYtZGM1Mi0z
ZDMwLTlkOGItYWZiMmE3YWU0MDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBg2WW8j1hZ7Heob0zEONOmrVRW6fJBp2KGe4Yh
VQZr3BVc6ETSlsE2iHzertBV0nAJMs5zB/xD1QZx0uShRph15I4ZjMjgURfujepR
dBlfOG29xaxQkLaPoUUcSRNykcvp3o3ACWM9HiXeb2uveKepSm4d4ejkxsx+eTDb
2ZZqSoLz7YCVAgn68IuKamp9M2RdOVzGQBF5HsPCpWcGESUxiCgKIjVMJkf69p3w
EqL1P7/omItVQOpoJbTSe+w6MTPl2/fa5S0nP9a4/AW4s9m9AmEpr3qOUNalyI4a
DXYPbQcjhSW0IJVV0Dd3Xc7GqWxBvTrS10hCTijA8UT4LidO
-----END CERTIFICATE-----