Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f759ff13-4da3-379d-a89c-3b2fcebfa136.roa
File:                     f759ff13-4da3-379d-a89c-3b2fcebfa136.roa (raw, json)
Hash identifier:          SwvwdGQT2nx788LNo72/6/32G0hlFF7GlGSnS056480=
Subject key identifier:   E8:59:74:E7:17:70:C0:65:75:1F:7A:D1:F4:36:23:A5:DD:70:69:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB2D66DAC1CEF3DE5B500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f759ff13-4da3-379d-a89c-3b2fcebfa136.roa
Signing time:             Thu 16 Jan 2025 13:38:16 +0000
ROA not before:           Thu 16 Jan 2025 13:38:16 +0000
ROA not after:            Wed 16 Apr 2025 12:38:16 +0000
asID:                     396591
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b2:d6:6d:ac:1c:ef:3d:e5:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:16 2025 GMT
            Not After : Apr 16 12:38:16 2025 GMT
        Subject: CN=ae8bda22-c741-4299-837a-92612b8c3c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:c9:89:1a:00:a2:6f:89:91:0d:5b:7b:f7:
                    55:5c:4d:87:6b:36:c2:01:89:09:66:8c:f3:e7:76:
                    74:0e:09:b1:19:37:1d:ef:17:46:a8:5b:64:89:40:
                    22:8b:b0:5f:cf:f6:14:03:fa:06:a2:2d:76:38:34:
                    35:01:cc:06:fa:a4:ce:73:12:ee:56:09:cb:75:e5:
                    8f:f0:39:08:18:54:8a:0f:67:62:82:30:d3:e9:92:
                    fb:85:98:af:51:03:59:3f:3e:90:65:c2:7b:17:88:
                    2c:78:a4:0f:4a:11:09:eb:45:09:50:40:58:0b:82:
                    0f:69:e8:e4:40:36:c4:5e:a7:0b:d6:d0:93:2e:d7:
                    da:7d:c8:a8:87:fe:ae:3f:d9:de:4e:2d:06:42:c8:
                    6c:61:24:85:05:74:82:84:6b:00:87:cf:5a:6d:44:
                    28:91:fd:8f:c0:eb:9e:09:da:2a:cd:dc:22:62:d7:
                    40:e5:4d:8f:5a:6b:be:d2:95:40:75:c1:ff:11:8c:
                    f1:fb:4f:36:5e:d0:9d:db:51:32:2a:88:cb:89:a7:
                    7e:99:38:bf:2d:62:dc:62:15:dd:62:a8:60:79:93:
                    1d:48:fe:7e:f0:d9:7d:e5:74:96:d3:2f:38:89:e9:
                    6d:93:fc:52:8c:5d:65:f5:83:42:84:29:48:8b:b0:
                    7d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:59:74:E7:17:70:C0:65:75:1F:7A:D1:F4:36:23:A5:DD:70:69:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f759ff13-4da3-379d-a89c-3b2fcebfa136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:a8:d3:56:b8:3f:23:69:eb:38:09:80:6a:7c:3a:f3:25:
         93:dc:6e:4f:30:d2:cc:a4:aa:b2:87:5a:8d:f8:ea:c5:71:17:
         a5:36:23:28:f5:7c:03:f6:52:be:bf:22:03:fa:e7:d8:b4:70:
         af:fd:ef:e0:e5:3c:93:b5:c2:6d:e7:7e:b3:b3:ec:15:54:ce:
         e1:59:37:d9:79:a1:f4:3b:bf:14:73:e9:d3:86:96:cb:f6:5a:
         46:3d:5a:5f:36:97:c2:3f:45:46:84:22:b6:46:5c:59:9e:b8:
         72:32:98:7a:67:20:a9:bd:84:ee:e1:de:a2:b5:6e:34:e4:9b:
         55:bd:74:4a:01:20:3e:24:a7:dc:39:0f:f6:26:eb:4f:d4:bc:
         ff:9a:7a:14:11:4e:9d:13:0e:39:65:46:33:6a:31:62:8b:90:
         21:fb:53:af:75:55:3c:2b:4a:e8:89:9b:c5:45:07:d6:db:9e:
         93:ea:6d:4e:13:0d:27:99:3a:c3:6e:77:fc:fe:c6:e9:7f:b0:
         be:11:47:b4:12:3e:77:56:d7:62:ed:3b:c0:a9:f2:60:11:44:
         b1:e4:9e:3a:fa:83:24:15:cf:5d:b5:de:3c:ab:92:e3:8a:73:
         57:de:eb:a9:0b:8e:e2:84:a4:87:03:4d:fa:24:e6:62:bc:df:
         ed:28:2e:87
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiQarLWbawc7z3ltQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNjEzMzgxNloXDTI1MDQxNjEyMzgxNlowLzEtMCsGA1UEAxMk
YWU4YmRhMjItYzc0MS00Mjk5LTgzN2EtOTI2MTJiOGMzYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb/JiRoAom+JkQ1be/dVXE2HazbCAYkJZozz
53Z0DgmxGTcd7xdGqFtkiUAii7Bfz/YUA/oGoi12ODQ1AcwG+qTOcxLuVgnLdeWP
8DkIGFSKD2digjDT6ZL7hZivUQNZPz6QZcJ7F4gseKQPShEJ60UJUEBYC4IPaejk
QDbEXqcL1tCTLtfafcioh/6uP9neTi0GQshsYSSFBXSChGsAh89abUQokf2PwOue
CdoqzdwiYtdA5U2PWmu+0pVAdcH/EYzx+082XtCd21EyKojLiad+mTi/LWLcYhXd
YqhgeZMdSP5+8Nl95XSW0y84ieltk/xSjF1l9YNChClIi7B9rwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOhZdOcXcMBldR960fQ2I6XdcGlbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjc1OWZmMTMtNGRhMy0z
NzlkLWE4OWMtM2IyZmNlYmZhMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAcI6jTVrg/I2nrOAmAanw68yWT3G5PMNLMpKqy
h1qN+OrFcRelNiMo9XwD9lK+vyID+ufYtHCv/e/g5TyTtcJt536zs+wVVM7hWTfZ
eaH0O78Uc+nThpbL9lpGPVpfNpfCP0VGhCK2RlxZnrhyMph6ZyCpvYTu4d6itW40
5JtVvXRKASA+JKfcOQ/2JutP1Lz/mnoUEU6dEw45ZUYzajFii5Ah+1OvdVU8K0ro
iZvFRQfW256T6m1OEw0nmTrDbnf8/sbpf7C+EUe0Ej53Vtdi7TvAqfJgEUSx5J46
+oMkFc9dtd48q5LjinNX3uupC47ihKSHA036JOZivN/tKC6H
-----END CERTIFICATE-----