Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa
File:                     62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa (raw, json)
Hash identifier:          GHtDSZhPv3F4jDp4sbk6EkSK8v7jC18jq/VKkoQLLeE=
Subject key identifier:   AB:11:27:05:84:4B:6D:CD:16:66:AE:54:C5:4A:2C:B9:87:07:E8:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F58ED4D0540609B2E5DC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa
Signing time:             Thu 23 Jan 2025 13:38:25 +0000
ROA not before:           Thu 23 Jan 2025 13:38:25 +0000
ROA not after:            Wed 23 Apr 2025 12:38:25 +0000
asID:                     397209
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:8e:d4:d0:54:06:09:b2:e5:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:25 2025 GMT
            Not After : Apr 23 12:38:25 2025 GMT
        Subject: CN=b808343b-bc43-43e6-b0de-2f685151ad9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:76:2d:bf:2d:3f:56:6f:a5:9d:73:22:56:1f:
                    3a:28:42:b7:89:1f:77:ff:ed:fd:ab:bd:9c:1f:69:
                    21:f5:f5:56:bd:11:c3:b4:ac:e4:1b:b9:bb:fa:80:
                    9d:1e:4f:ad:c2:07:3b:c0:27:43:a1:b7:2a:4b:c7:
                    8b:35:3b:99:1f:29:1e:17:c2:bd:b8:ae:f8:96:cf:
                    84:6a:c4:d1:85:48:a3:a2:6e:88:ce:ef:92:18:e0:
                    af:cc:88:86:62:6f:b4:dc:c8:d6:1d:c5:4b:4c:7d:
                    84:df:36:ff:4b:68:05:08:c7:40:82:d8:51:70:e9:
                    8e:b6:96:32:ef:99:54:ce:b4:95:06:2d:fa:9d:12:
                    2d:bf:f9:ba:db:63:63:ce:0d:24:dd:40:4c:2e:19:
                    d6:84:3a:0a:15:e6:78:40:32:bb:23:5a:0c:9e:02:
                    6c:af:4c:e1:02:c7:6f:5c:db:cf:1e:d7:a5:90:92:
                    58:5a:32:fb:57:f1:0b:bf:7b:ad:7f:48:1a:22:d0:
                    f5:df:ed:7b:ab:8c:a5:90:60:e4:7c:70:c6:86:79:
                    de:dc:4c:88:44:37:66:ff:87:ab:1f:2f:38:c6:75:
                    3b:a7:85:e0:cb:03:9f:30:29:6e:8e:e9:2a:39:7a:
                    71:67:87:b0:bc:c4:18:8b:8e:45:04:75:dc:a3:fc:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:11:27:05:84:4B:6D:CD:16:66:AE:54:C5:4A:2C:B9:87:07:E8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d5:99:e8:6b:6f:8a:8c:2e:b8:4f:bd:ff:fc:c7:ae:6b:c0:
         36:31:65:fa:a8:0d:1e:a2:c3:34:a1:b3:10:4f:fa:d3:e5:b6:
         11:a2:cd:fc:24:1e:bb:47:2a:36:15:ba:28:40:73:dc:81:d1:
         41:61:bc:fa:9d:c0:a8:0d:48:ee:f7:38:d5:2d:62:c2:a7:9b:
         a4:31:c0:61:84:6f:1f:cd:98:17:02:9a:32:21:ed:ed:51:47:
         56:55:e4:ba:da:5e:e9:4c:db:3f:bb:31:84:44:79:73:0e:50:
         d0:fb:7d:c9:10:88:3f:31:a4:84:d8:fa:20:17:ef:8c:47:89:
         cc:7e:7b:c7:58:60:f9:8e:1c:00:55:28:04:fc:50:f9:17:7a:
         1e:e4:e2:bd:b4:cb:54:11:c4:21:20:cc:83:f2:ad:c7:3b:93:
         3d:cc:fb:83:1f:fa:e0:e9:a8:54:35:4c:ee:44:fc:f8:1d:ed:
         cc:ad:4a:ea:cd:53:66:a9:5f:2e:01:d1:b3:31:7e:13:22:87:
         10:3b:5e:c9:21:06:8d:30:07:a6:a8:de:4d:1a:7d:bf:2b:29:
         74:fd:ac:76:61:56:e5:53:75:03:a3:16:94:5e:5e:9e:9f:67:
         65:77:43:95:fa:37:a0:07:4f:3d:36:43:e6:eb:81:db:25:48:
         03:6f:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----