Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa
File:                     35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa (raw, json)
Hash identifier:          xozSMYLcAn55mfD8kexrT5SM3mGyIoc6wipmOOJ8cgk=
Subject key identifier:   65:7B:49:23:F9:A5:36:21:C6:88:F1:46:02:45:E1:44:BD:69:29:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E8EE0D4752B950C9C8A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     20362
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:8e:e0:d4:75:2b:95:0c:9c:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=ba5dcf60-b50b-42c4-883c-16b5013ed7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:fb:57:8e:52:73:88:eb:ec:8c:0b:1e:c8:
                    d3:ac:b7:0c:6c:18:00:3d:69:61:1f:fe:85:43:04:
                    6e:7b:df:e8:01:ad:5b:b4:86:0f:63:9f:e7:00:bb:
                    6a:52:ed:c8:44:5e:65:6f:59:ac:30:a9:6f:bc:7b:
                    13:27:12:8a:b4:71:92:15:66:91:1a:3b:c7:8e:86:
                    d7:71:15:e6:97:08:5e:b9:30:9f:de:28:a7:e6:97:
                    a3:54:f0:07:50:d5:7b:81:1b:df:d4:34:73:c5:4a:
                    ee:76:81:02:3b:1a:4e:f8:a3:df:ba:ad:e3:a8:b9:
                    bd:df:14:a7:cc:a1:dd:bf:73:2c:d1:ba:46:16:01:
                    1f:f5:95:fb:d4:a5:e2:71:e2:95:5c:87:ea:1b:6a:
                    25:f6:eb:d5:53:8d:75:9d:48:f3:49:5f:6d:8e:cf:
                    8c:f1:43:08:3f:fd:24:c4:e6:dc:af:d1:8a:d1:1c:
                    79:16:05:76:4e:0e:00:c6:fe:b3:d8:1f:c0:5f:1d:
                    bd:33:4c:0e:a5:92:b0:08:58:1f:29:8a:25:10:49:
                    2b:fe:00:f9:45:22:5d:40:80:49:3f:25:8e:56:c0:
                    ae:fa:a8:3d:73:e6:32:84:0f:0d:dc:76:fb:11:0f:
                    bd:43:6d:65:f5:59:93:ed:1a:e8:dc:a4:ba:4c:02:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:49:23:F9:A5:36:21:C6:88:F1:46:02:45:E1:44:BD:69:29:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35466e8c-c6fd-3e83-bbc9-01c7222f9596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:20:aa:5a:07:8a:1c:7d:7a:3b:05:7b:ff:4b:8e:7c:27:a9:
         c1:05:29:9e:73:25:8d:4c:0f:7a:91:97:33:b8:42:b7:65:18:
         75:94:1c:0a:92:94:52:7f:06:84:aa:30:77:78:51:f7:ab:49:
         ef:50:eb:cc:7a:7c:38:c6:65:fd:3c:35:27:94:c2:5a:8b:06:
         65:c3:22:9b:1b:00:c0:d7:8b:37:1f:6f:66:d3:20:2c:37:6e:
         58:df:04:80:13:68:db:f3:97:41:17:28:97:2d:be:b2:d7:7e:
         75:25:9e:ca:e0:4b:17:b0:43:1c:dc:cb:90:ca:1c:e7:e3:db:
         84:5e:5e:f5:37:b8:e0:07:f1:f7:88:1b:4d:5e:e8:a0:69:a3:
         12:3d:ab:88:98:7f:4e:03:f5:af:fe:d7:72:e9:82:29:33:95:
         16:7f:a9:cb:ab:da:94:c4:87:02:38:b0:23:b7:bb:b6:a9:58:
         47:25:d0:88:88:7c:f1:8a:4d:58:c1:01:29:14:4e:ee:f1:64:
         e7:34:ce:65:79:3c:70:2f:1f:b2:e5:54:fb:40:b9:47:eb:c9:
         ea:6e:32:7a:4d:c9:79:8d:ba:04:c2:16:bc:94:ef:9d:d7:2c:
         19:5b:b8:52:21:5e:d7:25:33:b8:f6:bd:38:15:bf:72:97:21:
         bd:2b:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----