Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c4d06b-9801-3554-8cbe-df8af3792906.roa
File:                     21c4d06b-9801-3554-8cbe-df8af3792906.roa (raw, json)
Hash identifier:          9EdkXPr4sVea/0+97elhuxeZzk+/hNXWgGXDKj67qeI=
Subject key identifier:   74:BF:A8:8F:D9:57:8B:17:57:3D:43:33:D2:1E:8B:CB:97:4C:49:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243F20688034BA3F1F7B080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c4d06b-9801-3554-8cbe-df8af3792906.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     396580
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:f2:06:88:03:4b:a3:f1:f7:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=97a3fbe0-b913-4211-af3a-3674fdf8ca8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:d7:0f:0b:fa:f9:5c:b2:d1:4d:8c:72:6f:
                    0b:18:bf:c7:1e:9f:21:31:62:cf:18:04:67:da:f6:
                    6c:bf:6e:8d:d2:3a:3c:4a:de:5c:56:ae:e6:13:cf:
                    d9:6f:57:45:7a:b4:2a:7b:c9:63:6e:71:fc:54:c1:
                    f8:db:25:46:11:19:56:a7:b5:40:7b:7b:b2:15:8d:
                    9f:31:e9:c3:d9:ec:8b:92:37:d1:6c:24:36:36:c5:
                    14:86:a2:51:66:48:77:ff:e5:d3:5f:30:24:04:aa:
                    95:45:75:03:73:df:bd:cd:8a:84:55:42:74:68:df:
                    58:cb:3f:63:28:d9:95:71:3c:e5:c9:51:41:c2:b8:
                    ca:41:f6:a7:ea:64:70:20:11:c8:b2:03:5e:bf:3a:
                    fa:aa:e5:61:a0:d3:56:a5:89:17:e6:15:2b:20:b5:
                    36:ea:ac:0e:0a:12:50:2e:64:b9:4f:c3:02:6a:76:
                    55:10:70:74:0a:c1:ee:0a:a1:51:ca:25:30:f6:3d:
                    47:67:c6:b4:2a:99:49:d7:d3:4e:37:75:27:12:eb:
                    8c:06:2a:db:0a:1d:f3:df:69:6a:da:de:21:4f:d4:
                    e1:1c:88:31:13:21:b1:6a:a1:ac:49:43:89:3d:bb:
                    bc:28:09:85:c7:e0:b5:c3:aa:cd:71:57:74:30:de:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BF:A8:8F:D9:57:8B:17:57:3D:43:33:D2:1E:8B:CB:97:4C:49:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c4d06b-9801-3554-8cbe-df8af3792906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:b5:68:df:f6:73:da:5e:32:b9:a8:01:85:84:ca:83:87:
         ee:eb:aa:17:d2:ae:de:4b:5a:b2:8b:f2:bd:ec:59:ce:f5:9a:
         5e:04:91:3d:5a:af:1c:82:5c:0a:e9:49:15:92:b0:ad:99:fc:
         86:71:94:94:63:71:5c:ad:11:cd:fc:37:71:e3:2f:e2:89:97:
         a3:0d:19:69:0c:0d:5a:45:75:a9:d7:f8:2e:83:96:9d:8b:0f:
         93:66:d1:cd:74:0b:b1:5c:a3:66:33:59:d4:e0:4c:2b:36:c9:
         84:5a:29:1b:34:e1:1a:65:05:ef:6d:b0:da:80:3b:a1:04:55:
         9c:a9:ce:6a:68:7c:8a:4b:72:73:60:ad:c5:07:36:fb:d4:c2:
         99:65:26:66:89:80:7e:8b:73:4d:c0:4d:a9:5a:59:9f:77:d6:
         5a:40:64:1e:fd:e8:f1:82:69:02:28:7b:46:83:89:76:04:6c:
         2f:cd:a4:b4:f9:c5:11:fd:c5:14:2e:88:f2:d5:1a:d5:d1:4c:
         9a:a3:dd:f8:98:83:8f:13:47:8e:58:be:c6:ae:9d:a3:2a:91:
         50:49:01:04:fb:da:c4:d1:24:5d:34:b6:d1:84:88:7a:4a:5d:
         be:d0:4c:47:d3:9f:2f:c3:89:86:e4:c1:f4:08:38:45:4e:29:
         9e:15:32:c5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEkyQ/IGiANLo/H3sIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
OTdhM2ZiZTAtYjkxMy00MjExLWFmM2EtMzY3NGZkZjhjYThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49zXDwv6+Vyy0U2Mcm8LGL/HHp8hMWLPGARn
2vZsv26N0jo8St5cVq7mE8/Zb1dFerQqe8ljbnH8VMH42yVGERlWp7VAe3uyFY2f
MenD2eyLkjfRbCQ2NsUUhqJRZkh3/+XTXzAkBKqVRXUDc9+9zYqEVUJ0aN9Yyz9j
KNmVcTzlyVFBwrjKQfan6mRwIBHIsgNevzr6quVhoNNWpYkX5hUrILU26qwOChJQ
LmS5T8MCanZVEHB0CsHuCqFRyiUw9j1HZ8a0KplJ19NON3UnEuuMBirbCh3z32lq
2t4hT9ThHIgxEyGxaqGsSUOJPbu8KAmFx+C1w6rNcVd0MN49zwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHS/qI/ZV4sXVz1DM9Iei8uXTEnnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFjNGQwNmItOTgwMS0z
NTU0LThjYmUtZGY4YWYzNzkyOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCMQrVo3/Zz2l4yuagBhYTKg4fu66oX0q7eS1qy
i/K97FnO9ZpeBJE9Wq8cglwK6UkVkrCtmfyGcZSUY3FcrRHN/Ddx4y/iiZejDRlp
DA1aRXWp1/gug5adiw+TZtHNdAuxXKNmM1nU4EwrNsmEWikbNOEaZQXvbbDagDuh
BFWcqc5qaHyKS3JzYK3FBzb71MKZZSZmiYB+i3NNwE2pWlmfd9ZaQGQe/ejxgmkC
KHtGg4l2BGwvzaS0+cUR/cUULojy1RrV0Uyao934mIOPE0eOWL7Grp2jKpFQSQEE
+9rE0SRdNLbRhIh6Sl2+0ExH058vw4mG5MH0CDhFTimeFTLF
-----END CERTIFICATE-----