Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa
File:                     2013e6f0-9211-3297-8734-b523b1c7ea5a.roa (raw, json)
Hash identifier:          IDi8zlNlv8hPCWgsxJsbCDKG3jpxK7FRCWKB3Pm3SMA=
Subject key identifier:   C1:B2:9F:40:8F:EB:71:7B:CE:80:70:97:A3:3E:1C:05:32:F2:A0:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848BFEB9BC056A6CE653BF9F900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     397212
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:9b:c0:56:a6:ce:65:3b:f9:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=6d5d2afb-24c7-450b-94e8-d6fd8fd1298b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:44:74:dc:b0:a2:08:43:e8:1a:50:83:ee:
                    85:0b:15:f7:84:07:06:58:5c:bc:bb:6a:2f:4f:33:
                    c0:21:ab:21:18:32:cd:af:b6:7d:76:32:f4:39:e6:
                    6c:27:75:46:e3:e7:7d:8a:ec:da:8c:0d:a3:ba:00:
                    b0:23:97:0c:bc:95:49:b0:c1:5c:ee:4f:41:b0:95:
                    87:8a:db:ff:ba:ed:50:46:17:df:74:49:bf:be:95:
                    af:40:5c:e1:88:d9:a7:e3:c8:9d:26:7a:de:7d:4d:
                    14:70:26:ed:8b:b0:ad:5d:14:f3:ee:df:60:98:d7:
                    fc:c9:bb:23:dd:1f:32:54:6e:7c:a5:12:ba:45:06:
                    d0:fe:7f:10:86:e8:57:ef:b8:09:8b:cb:39:29:99:
                    c1:ce:c8:4b:56:86:5e:4e:c5:65:69:be:7c:52:b5:
                    46:d4:f1:24:11:0e:88:61:25:07:9b:00:2d:6c:f4:
                    27:1b:b8:e5:f4:cb:f5:cc:a2:59:2a:26:a7:94:bf:
                    5c:53:b0:c3:98:fa:19:08:73:72:e8:2d:5d:20:c5:
                    51:31:1c:79:a0:c6:1e:df:31:8b:65:ba:50:63:c8:
                    49:c6:ac:6b:48:33:f8:33:01:a1:75:e8:87:32:ae:
                    e0:9a:e6:1d:8e:c0:19:86:99:83:c1:42:4c:9b:fb:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B2:9F:40:8F:EB:71:7B:CE:80:70:97:A3:3E:1C:05:32:F2:A0:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2013e6f0-9211-3297-8734-b523b1c7ea5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:ba:4f:62:1d:c7:f1:10:b9:5b:4e:a3:7f:81:3d:d3:dd:a3:
         bc:97:c4:a2:62:ce:fa:e6:64:a6:76:9a:33:f9:94:e3:a9:14:
         5b:cd:98:9d:52:54:9d:62:79:e3:42:e7:12:eb:e9:cc:88:52:
         d0:6c:3e:8e:7d:e9:0e:e0:3d:9f:75:72:c1:65:a3:a8:ca:15:
         29:17:9a:31:05:3d:e9:bf:d2:fa:63:fe:56:bc:33:f2:c4:c2:
         49:be:ed:b3:45:1a:f3:ad:e8:aa:66:3c:9b:9c:c5:47:79:17:
         19:94:da:ff:cd:f8:e1:a7:4d:1d:48:98:ba:62:93:be:ab:dd:
         5e:67:87:66:c8:06:7c:06:ec:ba:ab:3b:e2:1e:0e:59:19:d8:
         5a:7b:bf:2d:d6:41:ae:e9:61:26:54:37:12:61:39:8b:f4:26:
         c9:17:50:a0:a9:64:dd:4b:30:ae:81:b0:e6:97:d7:16:38:42:
         be:c7:f0:5a:ec:2a:f3:bd:93:5a:f5:58:14:d3:e5:5a:7a:e7:
         78:e8:56:e6:b5:16:a6:7c:68:6e:dd:c4:4d:95:a4:56:57:22:
         e3:51:50:a7:25:c8:0a:de:2f:9c:ad:a6:97:8c:28:f3:56:cf:
         04:85:d3:fb:5a:ee:11:a7:df:dc:db:13:54:02:7e:8f:55:db:
         de:5c:0e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----