Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cb6bd33-1262-3e58-9ba8-e0d559f1e854.roa
File:                     4cb6bd33-1262-3e58-9ba8-e0d559f1e854.roa (raw, json)
Hash identifier:          mZRJRwbcKPOfY99v4rnSvr3A4UmwP29wj1S4WZAtgu0=
Subject key identifier:   14:63:DC:0B:B0:6C:40:4D:D1:06:1B:9C:8B:0A:2C:2E:FC:3B:26:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB5958822AF2BEB261940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cb6bd33-1262-3e58-9ba8-e0d559f1e854.roa
Signing time:             Thu 16 Jan 2025 13:38:18 +0000
ROA not before:           Thu 16 Jan 2025 13:38:18 +0000
ROA not after:            Wed 16 Apr 2025 12:38:18 +0000
asID:                     396590
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b5:95:88:22:af:2b:eb:26:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:18 2025 GMT
            Not After : Apr 16 12:38:18 2025 GMT
        Subject: CN=ab44b73f-225b-4f9e-9241-a6eeef9cc0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:c7:54:71:35:9c:90:df:b8:1a:d1:34:d2:
                    d0:de:38:e6:fb:48:e8:11:54:3f:77:94:c0:45:58:
                    44:26:f8:4b:fb:80:76:f0:7a:a0:23:4a:25:77:c0:
                    86:cc:7f:a2:0f:82:18:3b:6e:d3:e8:e8:5e:0c:6d:
                    0a:12:8d:86:a6:dd:b2:d0:c4:a1:05:be:98:4d:29:
                    b5:31:17:38:4c:04:71:d6:2b:6c:7a:2a:a8:6e:08:
                    6e:ca:ff:89:e7:3f:af:0d:d7:6e:84:ff:0d:0d:17:
                    ea:f1:50:52:5e:78:51:0a:90:08:7f:d4:d7:f7:2b:
                    05:a6:70:b3:64:82:05:05:4f:bd:4c:e6:a4:53:f6:
                    a3:6e:3e:c8:8f:49:97:44:d6:06:56:03:9d:9c:fc:
                    9f:89:98:0b:e3:54:54:f1:28:3b:ae:c4:e9:07:1d:
                    9a:bf:d3:54:58:1c:b7:ef:a7:4c:de:6b:59:1f:d5:
                    80:2c:7f:ef:8c:9f:85:cb:0a:6c:db:64:4b:63:b8:
                    8b:f2:b8:06:a7:21:5d:d6:05:3a:c3:b4:5d:b2:71:
                    b0:18:0b:74:b6:ca:1b:25:3f:7b:2a:09:14:59:e5:
                    2e:54:0c:ff:f3:f8:a4:f3:5b:e6:a3:3c:7e:d9:28:
                    ff:84:c9:aa:c6:d4:3c:6a:a8:5e:65:c8:07:cd:ba:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:63:DC:0B:B0:6C:40:4D:D1:06:1B:9C:8B:0A:2C:2E:FC:3B:26:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cb6bd33-1262-3e58-9ba8-e0d559f1e854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:84:91:f6:04:8e:95:ee:18:18:f6:8a:5f:21:86:08:8e:
         84:21:9c:62:94:99:6e:59:8b:85:52:ad:d1:4a:a3:e2:23:f6:
         d0:76:84:88:aa:31:5f:d4:f8:6f:fb:6d:d6:42:2b:5d:41:8b:
         e2:51:7e:3f:03:64:3a:a2:21:5f:1f:ef:eb:b2:9a:02:66:20:
         7d:0c:2e:71:8c:a5:aa:9d:ab:32:e1:95:c6:df:6d:8a:b9:4e:
         e5:eb:c8:55:07:a7:62:bc:b8:9c:d4:49:63:3e:15:07:09:3b:
         8e:8b:22:0f:85:3d:81:88:27:f5:ad:f6:bf:a5:2f:a0:32:b7:
         11:c1:25:3e:f7:5a:91:64:f4:7e:9d:0f:0b:28:23:57:0a:e0:
         ea:c7:ce:68:47:61:14:3e:2b:78:9b:07:9f:13:e3:55:97:ef:
         62:ef:cd:8f:b1:b6:4a:7b:90:26:6e:47:32:fd:37:d9:2a:c0:
         24:d0:16:d6:8e:bb:8a:59:f7:9a:f2:59:31:05:75:1e:f4:c3:
         c2:d9:35:9e:3f:5c:53:41:bf:74:0b:aa:51:9d:45:11:ea:8d:
         e2:f5:03:3f:d3:c6:6b:b4:bb:74:03:67:65:51:9c:82:90:71:
         6a:3e:27:cb:6a:45:a0:90:89:12:50:c7:52:bd:93:45:b9:da:
         3b:79:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----