Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a78281b-2722-3e73-b2f2-2d625cc1effd.roa
File:                     4a78281b-2722-3e73-b2f2-2d625cc1effd.roa (raw, json)
Hash identifier:          VEciS0PluK1l6CbmuZ+bQj0JnwfJse9DJKiyZGVoW5Y=
Subject key identifier:   F2:7F:FF:27:92:7C:22:FB:D7:17:15:56:BA:36:F2:03:C9:CB:A6:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3DB704C2AB70D8158C200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a78281b-2722-3e73-b2f2-2d625cc1effd.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     397211
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:db:70:4c:2a:b7:0d:81:58:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=ab417fc0-d675-43de-adbb-a0ed55e3e36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:87:1d:5b:08:7b:36:ab:72:81:8c:e9:2a:
                    14:3c:26:ec:f4:db:56:7e:59:3c:33:43:e7:f3:ae:
                    78:27:ab:31:1b:6a:fd:0b:7d:53:99:d0:af:df:b0:
                    e4:c9:fb:e3:28:5d:6a:2d:8e:e4:8c:df:e9:53:0e:
                    82:e4:eb:1b:59:2c:a2:16:72:77:d7:ff:fc:ed:fa:
                    2a:e8:03:6c:a6:0b:1f:6d:00:25:3c:f0:07:7d:f5:
                    ae:8b:25:d5:d5:74:e0:a6:eb:f7:e4:b6:18:5b:e1:
                    5f:0a:c9:2f:62:84:91:8e:32:ec:10:1c:19:10:7d:
                    45:1c:89:ae:37:3e:bd:cd:ac:9a:70:68:9d:87:b6:
                    c1:77:be:af:1e:6d:18:4b:ea:af:6f:3c:33:d5:70:
                    37:dc:38:f8:4c:56:f6:c0:5a:3c:91:7b:e4:11:e6:
                    ae:3d:bd:15:a4:5a:07:26:72:3e:58:b2:a1:37:dd:
                    e0:0e:03:91:eb:a9:f3:93:32:8d:61:59:e6:76:9b:
                    ba:0f:bb:51:ff:1c:b2:76:6a:0e:6a:6f:7e:1d:9c:
                    12:ca:89:d6:8b:a7:26:70:0f:19:a0:1f:f6:46:e1:
                    7f:8f:a3:97:57:d0:69:bb:e6:2a:76:4a:a4:3f:9d:
                    63:b3:41:7c:18:ea:9f:72:f9:4b:64:d1:b3:35:aa:
                    e1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7F:FF:27:92:7C:22:FB:D7:17:15:56:BA:36:F2:03:C9:CB:A6:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a78281b-2722-3e73-b2f2-2d625cc1effd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:19:7e:27:b7:3f:7f:1b:32:0e:2b:ce:76:38:f0:72:8e:3c:
         4b:a8:a1:0c:78:6a:42:b5:00:00:17:83:97:28:1a:f8:a1:1b:
         d2:20:ba:cf:a5:ae:5e:0f:13:5c:b1:66:64:93:a8:16:22:5d:
         5d:7e:d2:d6:dc:40:09:fa:9b:59:f0:17:e4:45:3a:5d:6d:71:
         36:b7:e9:49:23:c7:9c:ef:51:94:e4:cf:73:00:67:6b:69:f8:
         d0:7f:08:38:18:74:17:20:71:ea:8b:b8:d7:cd:a2:f6:b3:56:
         60:77:74:27:ef:c1:24:6b:e0:9b:fd:df:77:2b:f8:9c:67:48:
         85:f6:cf:6b:c1:bc:eb:b8:75:35:4d:8d:c4:74:b0:40:07:82:
         bd:c2:e7:98:ee:34:35:72:41:99:22:de:81:ac:b5:c0:0d:9b:
         79:57:94:dc:2e:8f:4f:9f:6b:cc:e8:d8:c4:96:11:e8:e6:a1:
         df:68:ea:41:1e:aa:f5:80:7c:b9:1f:de:f9:6d:59:7d:5d:ce:
         e1:ae:dc:64:7f:6c:80:a6:63:df:6d:3a:62:75:ec:6d:1d:b5:
         95:48:71:52:c6:68:2b:39:0b:50:33:f2:ac:c1:00:d3:e3:47:
         bc:62:78:20:1b:80:de:0d:92:5b:f5:22:c0:af:cf:4d:02:f1:
         0e:46:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----