Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eef46876-a113-3bd8-888b-a80eb740c2a4.roa
File:                     eef46876-a113-3bd8-888b-a80eb740c2a4.roa (raw, json)
Hash identifier:          EO3Qz6dNme96Tja/YyTvFAbvizvceqCZVAR7nEjRd+M=
Subject key identifier:   E1:DE:38:7A:E9:A5:AD:0A:3A:ED:F2:CC:02:B4:F7:35:8A:DD:A2:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAAD8A89E6C78F5CC3A7260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eef46876-a113-3bd8-888b-a80eb740c2a4.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     36624
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:d8:a8:9e:6c:78:f5:cc:3a:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=ce14c52a-ba06-4fe3-9e72-ff96d9d15c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:54:31:f4:49:fa:64:e2:6e:79:2a:a9:9d:
                    89:3f:6d:77:12:14:9b:6f:8a:07:08:1b:4c:15:11:
                    31:fa:cd:db:4f:52:08:b2:ee:a1:c5:02:8e:a0:ad:
                    97:ad:d9:e0:09:80:6c:e8:a6:43:ad:17:5b:b1:42:
                    87:27:0d:0f:e9:3f:d8:70:09:17:13:b6:6d:4a:db:
                    3c:4e:45:23:7b:d6:cf:84:12:42:ba:27:ed:1d:76:
                    50:20:28:4c:ad:80:b5:f9:7c:55:4c:ae:8e:8f:b0:
                    86:07:b7:1e:57:e7:b8:3f:ad:15:32:07:b0:11:9f:
                    5e:fb:49:39:3f:31:c9:98:2a:3f:d9:da:0d:62:73:
                    5f:fc:92:19:59:41:38:e8:00:b7:a4:6c:46:a9:e1:
                    76:39:d5:a7:9c:4e:4b:89:72:81:66:29:6c:5a:69:
                    77:e8:f0:de:76:8d:0f:94:04:07:cc:f1:42:6e:03:
                    51:97:1e:c5:b5:8c:0e:47:94:70:4d:f8:c5:d4:f3:
                    8d:f4:44:ca:a5:2f:98:75:60:de:16:fe:d2:53:99:
                    28:59:ff:fd:58:3a:14:55:78:10:49:38:66:5e:7e:
                    58:28:67:0b:a9:a1:4f:7b:8d:d2:91:23:32:4a:3b:
                    31:5b:8f:99:f3:ea:4e:87:c4:5a:f8:15:db:5f:6a:
                    cb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DE:38:7A:E9:A5:AD:0A:3A:ED:F2:CC:02:B4:F7:35:8A:DD:A2:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eef46876-a113-3bd8-888b-a80eb740c2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:dd:f6:ec:20:23:44:50:37:dd:1f:35:8f:25:ba:01:dd:f7:
         69:90:ef:78:68:5d:5a:45:21:b6:3e:34:0f:b1:10:ee:6c:21:
         69:fc:b7:a4:dc:0c:d0:cc:31:64:78:e3:45:bd:0b:c9:fb:25:
         1a:68:03:02:7d:a3:a4:2c:4b:91:74:a8:5d:c4:5c:dd:01:e7:
         ca:40:1d:3a:f9:a4:cf:c0:b5:88:ae:7d:5c:01:da:5c:77:ba:
         35:91:81:01:e2:93:ed:e1:13:60:30:81:d7:d5:5b:e6:cd:72:
         ae:cb:90:49:d5:8e:8f:0f:d1:e2:82:d9:4d:73:3f:36:82:09:
         84:54:94:23:a5:d9:ef:68:78:42:0c:c5:cc:c0:2e:95:0a:82:
         96:56:c6:2d:7e:78:82:b5:2b:83:d1:9f:a0:08:a3:83:8c:56:
         e0:d7:9a:93:ed:d9:0a:49:84:da:d1:85:50:19:da:e9:16:7f:
         3f:13:a2:3c:74:08:f1:da:03:fa:72:d6:f0:64:1d:e6:3c:3a:
         9c:bc:66:33:dc:11:d2:99:b2:18:21:0d:8f:32:36:6d:41:5e:
         51:40:df:e2:14:62:ff:60:90:f3:9b:94:f6:83:2e:61:2a:c1:
         a1:58:cd:05:be:b0:b0:62:52:cd:1f:5c:9e:11:c9:69:b9:23:
         25:6a:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----