Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa
File:                     fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa (raw, json)
Hash identifier:          /+EdfpIItGSSPrUCqFbRFL/MqMVNlZy1o9sOzhx/L4E=
Subject key identifier:   A1:8E:21:7E:A0:79:38:F7:1B:31:D2:7E:E2:CC:0B:98:43:C2:E0:9A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A0486B7BD8DBE5BEECDB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396550
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:48:6b:7b:d8:db:e5:be:ec:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=ca85a127-51d8-420d-8ee8-ff2e5579a81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:9b:af:86:b0:d4:8c:da:ad:08:10:dc:45:
                    dd:74:89:f8:c8:71:7d:5d:06:6c:27:84:fc:6f:0f:
                    52:de:44:91:62:1c:40:ee:f0:12:d4:1b:0f:aa:a3:
                    b2:f4:f9:47:04:76:26:a5:c8:5c:81:f9:19:35:d3:
                    58:c2:94:74:04:49:75:8e:22:c1:09:93:62:ea:d7:
                    a2:b0:0e:ae:9f:84:50:c9:a3:75:44:d5:ca:c0:e3:
                    23:f3:f1:fe:4d:09:89:ea:10:10:17:cd:1f:6a:47:
                    9c:e9:f5:c5:67:55:70:8e:f5:1b:b6:e2:e6:a5:6f:
                    16:03:a9:93:68:8b:64:e8:80:5d:a9:5b:f4:00:54:
                    f0:a5:eb:18:96:05:63:bc:82:f7:e1:29:bd:7a:f4:
                    36:aa:c1:73:36:c0:d4:71:91:2f:9d:3f:7e:7e:72:
                    27:2a:06:0b:5c:59:01:22:8e:83:3e:11:2b:76:49:
                    ec:50:8e:bc:bf:b2:f6:21:76:db:0b:7c:e6:7b:bc:
                    82:d4:7c:04:74:96:63:7b:fc:60:a7:c4:f9:3b:7c:
                    52:ee:c7:fc:a7:72:aa:9a:68:7e:20:14:b9:74:1b:
                    fb:b9:d0:99:8c:1b:c1:12:70:75:ce:43:35:2b:36:
                    6a:1a:2e:c2:0e:bd:4d:c7:64:47:b1:f8:a3:33:de:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:21:7E:A0:79:38:F7:1B:31:D2:7E:E2:CC:0B:98:43:C2:E0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fafc9d16-3880-3984-947d-1f4f9dbf1cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:8f:2f:98:05:37:3d:e9:0a:a7:c0:d6:a7:d4:86:9d:78:
         80:db:b6:c8:9d:3e:b8:ba:9a:3c:6e:9b:db:34:80:6c:fc:81:
         b8:2f:90:57:37:55:29:95:5e:9d:21:77:c6:6b:2e:a0:b2:2a:
         c0:28:a8:54:cd:c9:60:20:b1:06:66:26:92:34:6a:53:ce:d3:
         bf:ed:2b:ee:0c:41:43:70:e9:18:7e:8a:d6:06:33:0b:4d:14:
         3b:7f:80:04:fd:cd:23:3b:7b:bf:4c:ee:01:3f:3c:90:49:8f:
         69:93:41:17:1d:2c:3d:2d:fc:ea:05:1b:e8:ce:c3:39:57:e9:
         29:e7:70:ab:45:28:c3:dc:30:eb:cb:0c:43:4c:ba:21:46:fc:
         61:c0:59:d3:d9:12:27:43:99:4f:5d:28:70:22:0c:a6:1a:97:
         f4:8b:67:c1:96:e6:0d:9d:54:77:8c:a0:ce:77:14:4b:27:cf:
         0f:7c:70:5f:e7:f7:b6:21:fa:65:56:40:6e:5c:ba:27:d6:cd:
         67:cb:a1:73:b4:4e:f0:70:0e:3b:30:fb:65:18:96:a8:7f:26:
         d0:8d:59:52:b5:97:b0:a3:b4:a8:87:bd:40:34:80:12:8c:67:
         2a:76:d0:9c:56:bf:8e:c6:87:92:41:9f:c1:18:50:c5:f3:47:
         49:47:00:b3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhYoEhre9jb5b7s24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk
Y2E4NWExMjctNTFkOC00MjBkLThlZTgtZmYyZTU1NzlhODFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZKbr4aw1IzarQgQ3EXddIn4yHF9XQZsJ4T8
bw9S3kSRYhxA7vAS1BsPqqOy9PlHBHYmpchcgfkZNdNYwpR0BEl1jiLBCZNi6tei
sA6un4RQyaN1RNXKwOMj8/H+TQmJ6hAQF80fakec6fXFZ1VwjvUbtuLmpW8WA6mT
aItk6IBdqVv0AFTwpesYlgVjvIL34Sm9evQ2qsFzNsDUcZEvnT9+fnInKgYLXFkB
Io6DPhErdknsUI68v7L2IXbbC3zme7yC1HwEdJZje/xgp8T5O3xS7sf8p3Kqmmh+
IBS5dBv7udCZjBvBEnB1zkM1KzZqGi7CDr1Nx2RHsfijM97KFwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKGOIX6geTj3GzHSfuLMC5hDwuCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmFmYzlkMTYtMzg4MC0z
OTg0LTk0N2QtMWY0ZjlkYmYxY2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAXL48vmAU3PekKp8DWp9SGnXiA27bInT64upo8
bpvbNIBs/IG4L5BXN1UplV6dIXfGay6gsirAKKhUzclgILEGZiaSNGpTztO/7Svu
DEFDcOkYforWBjMLTRQ7f4AE/c0jO3u/TO4BPzyQSY9pk0EXHSw9LfzqBRvozsM5
V+kp53CrRSjD3DDrywxDTLohRvxhwFnT2RInQ5lPXShwIgymGpf0i2fBluYNnVR3
jKDOdxRLJ88PfHBf5/e2IfplVkBuXLon1s1ny6FztE7wcA47MPtlGJaofybQjVlS
tZewo7Soh71ANIASjGcqdtCcVr+OxoeSQZ/BGFDF80dJRwCz
-----END CERTIFICATE-----