Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe267cab-6db9-323a-8240-2f526ff5e1bd.roa
File:                     fe267cab-6db9-323a-8240-2f526ff5e1bd.roa (raw, json)
Hash identifier:          HNJUAMQsVmt4PSLJ3ykSkuyHTw/WoCp7IVlWVxmKsSE=
Subject key identifier:   C7:F5:66:D7:73:56:F7:38:46:23:BF:0F:96:ED:80:FF:99:8C:DB:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242EAF637925A2F12594880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe267cab-6db9-323a-8240-2f526ff5e1bd.roa
Signing time:             Thu 19 Dec 2024 13:45:04 +0000
ROA not before:           Thu 19 Dec 2024 13:45:04 +0000
ROA not after:            Wed 19 Mar 2025 12:45:04 +0000
asID:                     396595
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:ea:f6:37:92:5a:2f:12:59:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:04 2024 GMT
            Not After : Mar 19 12:45:04 2025 GMT
        Subject: CN=a7e82357-c0bd-4649-9334-5cfdec0f8f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:c7:44:d0:57:d3:35:f0:dc:e8:b1:a2:ec:
                    23:b6:46:64:74:8b:bc:7f:65:a9:3d:80:48:e3:89:
                    ee:b7:44:6f:21:f0:02:2c:a3:ba:ed:ab:aa:70:54:
                    bf:18:04:80:6e:80:0f:3f:43:c5:f9:91:34:4c:d7:
                    d5:de:d8:be:46:26:58:97:fb:49:05:06:3f:d3:3c:
                    79:10:22:92:b8:1e:f1:27:05:93:f2:56:59:5a:c7:
                    ce:73:01:30:17:bd:9a:0b:41:9e:fa:1a:f6:73:83:
                    24:83:49:0b:ff:66:c8:1f:55:b5:3a:e3:7f:7e:9b:
                    e3:57:2c:78:4d:1a:2d:96:d9:ac:aa:69:93:b3:86:
                    bd:0c:0f:3a:c7:7c:b5:e7:31:98:ef:c6:5c:da:11:
                    52:f5:9d:6b:b5:4e:9a:ba:05:06:6e:7f:7e:a8:55:
                    bb:d2:36:7a:01:b4:74:5b:4b:aa:ab:be:cf:dd:71:
                    f5:bb:82:70:d5:19:43:ec:3e:47:54:0a:5a:ae:da:
                    54:f7:86:e6:3b:af:55:03:9b:7e:d6:17:cc:4f:51:
                    ee:cb:94:7c:25:d1:11:be:85:c3:33:27:06:1e:c6:
                    b0:b8:cb:c7:27:c7:59:cc:3e:9c:80:50:d8:f7:79:
                    10:61:c4:fc:28:c3:d3:c3:27:7e:e3:af:70:c2:41:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:66:D7:73:56:F7:38:46:23:BF:0F:96:ED:80:FF:99:8C:DB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe267cab-6db9-323a-8240-2f526ff5e1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:3a:71:24:d8:c5:0d:e9:56:bf:d6:d3:d1:fa:12:c3:cc:
         0d:91:5e:32:d6:6a:e0:39:6e:78:79:b0:05:91:ef:2f:f9:08:
         a6:bd:90:28:ed:9f:4e:67:c2:33:66:78:ad:7e:3f:37:12:24:
         fe:3c:c9:c0:39:f2:39:41:c5:d2:b6:6a:fb:0d:b2:ed:89:1b:
         df:f1:9e:e5:95:2f:2b:c1:b6:3d:0e:8f:76:a4:c3:dc:78:18:
         cc:ff:6e:b2:47:26:03:d1:9d:0d:b0:c2:d3:40:65:bc:f1:07:
         c0:b1:df:8c:2e:19:79:48:35:7b:ce:bc:1f:a2:77:7a:30:91:
         c6:f4:59:ff:ec:df:16:b1:52:8b:b6:da:93:74:1f:03:e2:a0:
         a7:18:33:04:1e:3f:e4:25:09:a9:e2:06:4d:f9:8c:cc:23:e0:
         52:14:52:42:36:3d:50:82:fe:99:c8:50:85:b3:93:ca:e8:fc:
         95:03:b8:ce:dd:01:e1:3b:73:55:2e:3f:36:28:3a:f8:ee:f5:
         f3:da:07:cb:2e:51:3f:7d:35:de:c4:4b:ef:cd:c4:7e:45:87:
         29:7d:d0:ef:cd:62:a3:fc:07:05:18:3b:1f:a0:10:16:fd:82:
         d3:a4:ca:3e:e0:0e:72:70:49:f2:4a:e3:45:76:45:3f:ca:4b:
         11:50:0a:81
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEhCQur2N5JaLxJZSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUwNFoXDTI1MDMxOTEyNDUwNFowLzEtMCsGA1UEAxMk
YTdlODIzNTctYzBiZC00NjQ5LTkzMzQtNWNmZGVjMGY4ZjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7nHRNBX0zXw3OixouwjtkZkdIu8f2WpPYBI
44nut0RvIfACLKO67auqcFS/GASAboAPP0PF+ZE0TNfV3ti+RiZYl/tJBQY/0zx5
ECKSuB7xJwWT8lZZWsfOcwEwF72aC0Ge+hr2c4Mkg0kL/2bIH1W1OuN/fpvjVyx4
TRotltmsqmmTs4a9DA86x3y15zGY78Zc2hFS9Z1rtU6augUGbn9+qFW70jZ6AbR0
W0uqq77P3XH1u4Jw1RlD7D5HVApartpU94bmO69VA5t+1hfMT1Huy5R8JdERvoXD
MycGHsawuMvHJ8dZzD6cgFDY93kQYcT8KMPTwyd+469wwkFySQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMf1ZtdzVvc4RiO/D5btgP+ZjNs4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmUyNjdjYWItNmRiOS0z
MjNhLTgyNDAtMmY1MjZmZjVlMWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBtJTpxJNjFDelWv9bT0foSw8wNkV4y1mrgOW54
ebAFke8v+QimvZAo7Z9OZ8IzZnitfj83EiT+PMnAOfI5QcXStmr7DbLtiRvf8Z7l
lS8rwbY9Do92pMPceBjM/26yRyYD0Z0NsMLTQGW88QfAsd+MLhl5SDV7zrwfond6
MJHG9Fn/7N8WsVKLttqTdB8D4qCnGDMEHj/kJQmp4gZN+YzMI+BSFFJCNj1Qgv6Z
yFCFs5PK6PyVA7jO3QHhO3NVLj82KDr47vXz2gfLLlE/fTXexEvvzcR+RYcpfdDv
zWKj/AcFGDsfoBAW/YLTpMo+4A5ycEnySuNFdkU/yksRUAqB
-----END CERTIFICATE-----