Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59e0df59-7317-35ef-ba9a-788f20e1952d.roa
File:                     59e0df59-7317-35ef-ba9a-788f20e1952d.roa (raw, json)
Hash identifier:          0d9lIHUGmlcrC02evQTxxG2QrYIhkKNtX8xfkI77DQ8=
Subject key identifier:   E1:0F:11:FD:90:E5:75:B3:25:10:CC:21:EC:2B:4A:A4:49:A3:8E:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494039821FC6FEA7C4A1272B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59e0df59-7317-35ef-ba9a-788f20e1952d.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     397204
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:82:1f:c6:fe:a7:c4:a1:27:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=d0647f78-7d38-422d-a668-866208bdfbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:0d:f0:88:ba:7d:81:c5:63:90:3a:cf:35:
                    3e:81:e1:ce:b5:26:bd:25:ee:53:c3:43:2a:63:48:
                    0b:55:05:7c:91:0c:04:17:d7:e6:28:27:db:0f:a0:
                    60:da:59:a7:b6:89:84:78:f1:d8:4a:f7:7c:54:6c:
                    bc:f7:37:c9:4b:b3:d1:d5:6c:3f:5b:ff:0a:c3:4e:
                    a6:19:3a:27:cc:42:54:96:d2:fe:25:3b:3a:a0:1c:
                    ef:e7:8e:92:f2:c7:a4:37:63:fa:c1:21:ed:59:49:
                    d0:de:9b:07:32:26:28:b9:c0:79:73:3f:0e:20:85:
                    38:81:79:31:93:d0:12:87:4f:66:d4:bd:60:2f:17:
                    99:65:15:71:15:d4:b2:91:a7:7b:45:c4:20:ea:26:
                    90:64:c0:d2:09:12:d2:e7:44:b3:71:89:47:ee:6d:
                    42:f2:a9:61:da:dc:50:6f:f9:0e:4f:14:88:1a:b6:
                    20:91:91:37:7e:e6:7f:f3:c0:b2:1c:bb:2e:87:2c:
                    28:21:a4:d9:c0:b8:1f:23:66:24:64:19:80:66:50:
                    20:c3:0c:e0:bf:c1:80:07:27:b3:9d:de:a3:ba:f5:
                    05:9c:ca:34:03:32:d4:f7:1b:a4:09:1a:47:15:56:
                    33:7e:22:44:d5:b5:45:a0:e8:88:a8:b5:55:88:d2:
                    b0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0F:11:FD:90:E5:75:B3:25:10:CC:21:EC:2B:4A:A4:49:A3:8E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/59e0df59-7317-35ef-ba9a-788f20e1952d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:32:6d:1d:41:f2:a9:47:f4:37:44:0a:32:cc:ef:55:5a:
         86:9b:39:09:ca:59:f9:ba:d0:f7:ab:08:e2:53:92:b6:f4:cd:
         49:7e:d4:00:54:46:a6:ff:74:28:d1:93:79:18:da:f0:fd:15:
         7c:31:bd:5f:de:ac:a8:16:6f:7a:fc:69:fb:1e:18:d0:54:51:
         02:07:7d:cd:99:62:ea:6b:31:b4:92:dc:a1:d6:ab:77:20:77:
         e2:08:12:0e:a8:70:6e:00:9f:53:46:0d:df:37:70:41:67:b9:
         50:15:c0:42:54:7c:47:19:0e:42:2f:0d:74:f7:8d:b3:d3:0e:
         59:56:8e:dd:e1:b2:a5:0e:52:26:79:85:70:b2:5f:aa:79:16:
         af:c4:5f:c1:b2:56:33:2e:7a:36:2b:65:08:61:a8:5b:52:d5:
         fe:97:6d:7f:76:fd:69:43:6e:fd:9e:91:0e:b5:9d:c8:36:6f:
         b4:23:0d:8d:96:c2:3b:31:2e:c0:82:b8:70:a0:a1:82:2d:23:
         f8:31:89:53:d8:1b:7b:a2:e3:ea:2d:15:36:e2:43:29:04:14:
         e0:5c:7e:ed:90:e9:62:1b:73:51:82:42:85:26:a2:33:8a:ae:
         c2:32:23:9a:3b:81:af:0d:43:ad:4d:36:34:6c:a7:62:e4:f0:
         08:b9:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----