Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45841763-4d9e-3134-9e92-a283abd833eb.roa
File:                     45841763-4d9e-3134-9e92-a283abd833eb.roa (raw, json)
Hash identifier:          Zi+L2mVvYuYfXjNc/wZ/oXXHnOoZvODh9whw5A42IcU=
Subject key identifier:   18:95:8B:38:42:75:17:08:25:6A:59:57:1B:2C:79:22:CF:F1:48:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CA08D0268D8F404D2200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45841763-4d9e-3134-9e92-a283abd833eb.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     397196
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:ca:08:d0:26:8d:8f:40:4d:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=d7c8ca17-0885-4694-951f-2bf71dd047c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:95:8b:c1:0b:85:5c:a9:ef:d3:48:3a:0b:98:
                    63:21:ae:e6:33:fa:93:fd:03:84:bf:2a:c4:24:9a:
                    7e:e8:cd:ea:ed:c5:e7:bb:99:cc:51:43:77:a1:3b:
                    d8:e3:9d:fc:f0:1d:17:6c:b0:c6:27:a2:22:ae:44:
                    8d:52:97:03:c5:94:c1:eb:01:b9:ed:43:b0:0a:ba:
                    1f:88:87:a8:63:9d:a0:1f:8d:ae:bd:3e:fd:5f:e2:
                    c4:c6:0d:f6:0a:35:ce:0b:47:dd:1e:2b:7d:3c:d1:
                    75:68:a4:d2:1e:39:42:82:9b:4b:fe:3b:4d:4a:d4:
                    2e:87:4a:2f:0d:2d:62:27:71:a6:6b:a0:d4:2b:a2:
                    db:83:da:aa:58:e1:96:fd:79:c6:96:1c:53:5c:72:
                    c0:37:da:78:17:73:1c:64:2e:67:19:ef:fc:5c:ce:
                    25:e6:d9:81:2a:61:54:8c:e3:35:7b:0b:7c:68:7b:
                    21:f8:18:91:3e:d3:ac:c4:ff:18:9a:18:bf:6d:8a:
                    64:59:8b:5f:5b:e2:3f:1c:d9:c3:32:29:6b:19:79:
                    a9:a5:1e:b2:9d:40:d9:d9:5a:64:0a:33:27:09:22:
                    6c:45:7f:d1:b4:20:28:8b:13:31:b9:2d:b7:0a:e2:
                    ee:c1:0f:4a:d1:79:6c:47:9c:82:62:ff:00:72:ac:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:95:8B:38:42:75:17:08:25:6A:59:57:1B:2C:79:22:CF:F1:48:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45841763-4d9e-3134-9e92-a283abd833eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:5c:cf:45:2e:73:13:39:e1:2d:80:37:be:ab:7b:39:9e:22:
         bf:6c:d1:2f:98:53:91:56:d5:66:0d:66:bc:51:d3:8c:2a:10:
         6e:27:8d:ad:45:cf:3d:9e:c3:47:de:5b:65:eb:0f:68:a7:2f:
         4a:94:ea:90:77:1d:47:77:be:c7:7b:37:3d:df:ac:97:fe:9b:
         be:3a:57:fa:1f:72:2a:54:49:0b:f1:3c:9c:d2:44:6d:13:91:
         4a:31:79:14:4c:dc:a8:41:61:ed:e8:f2:78:4b:f3:c9:21:c0:
         b0:eb:e3:1e:19:bf:60:ef:29:91:24:d3:39:5f:80:ff:6c:c9:
         95:69:4d:24:fe:59:b0:0b:69:84:29:0a:78:50:f6:cb:0f:6a:
         0b:1a:a1:17:9f:67:1b:06:8d:ff:54:93:5c:0f:19:ae:9f:d0:
         8f:72:f0:3d:4d:84:37:f6:11:26:b3:42:85:4e:3f:aa:f9:c5:
         52:ca:7d:87:f0:0b:cb:e8:2b:fd:bb:2d:76:61:5b:5b:30:86:
         b7:35:ae:d9:2d:15:64:ab:b1:4f:f0:c0:64:71:f2:e9:83:90:
         5c:81:51:bc:80:c3:9a:ee:2c:a3:74:9b:50:98:49:5c:36:dd:
         fe:78:10:2c:3d:0d:26:df:e7:9a:67:af:19:77:8f:35:e9:4f:
         7c:5c:26:09
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEisYMoI0CaNj0BNIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZDdjOGNhMTctMDg4NS00Njk0LTk1MWYtMmJmNzFkZDA0N2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZWLwQuFXKnv00g6C5hjIa7mM/qT/QOEvyrE
JJp+6M3q7cXnu5nMUUN3oTvY45388B0XbLDGJ6IirkSNUpcDxZTB6wG57UOwCrof
iIeoY52gH42uvT79X+LExg32CjXOC0fdHit9PNF1aKTSHjlCgptL/jtNStQuh0ov
DS1iJ3Gma6DUK6Lbg9qqWOGW/XnGlhxTXHLAN9p4F3McZC5nGe/8XM4l5tmBKmFU
jOM1ewt8aHsh+BiRPtOsxP8Ymhi/bYpkWYtfW+I/HNnDMilrGXmppR6ynUDZ2Vpk
CjMnCSJsRX/RtCAoixMxuS23CuLuwQ9K0XlsR5yCYv8AcqyPaQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBiVizhCdRcIJWpZVxsseSLP8UiAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDU4NDE3NjMtNGQ5ZS0z
MTM0LTllOTItYTI4M2FiZDgzM2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBHXM9FLnMTOeEtgDe+q3s5niK/bNEvmFORVtVm
DWa8UdOMKhBuJ42tRc89nsNH3ltl6w9opy9KlOqQdx1Hd77Hezc936yX/pu+Olf6
H3IqVEkL8Tyc0kRtE5FKMXkUTNyoQWHt6PJ4S/PJIcCw6+MeGb9g7ymRJNM5X4D/
bMmVaU0k/lmwC2mEKQp4UPbLD2oLGqEXn2cbBo3/VJNcDxmun9CPcvA9TYQ39hEm
s0KFTj+q+cVSyn2H8AvL6Cv9uy12YVtbMIa3Na7ZLRVkq7FP8MBkcfLpg5BcgVG8
gMOa7iyjdJtQmElcNt3+eBAsPQ0m3+eaZ68Zd4816U98XCYJ
-----END CERTIFICATE-----