Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38cae-09b4-34ad-8923-9812697c7a2e.roa
File:                     65b38cae-09b4-34ad-8923-9812697c7a2e.roa (raw, json)
Hash identifier:          dMVcdiRsn8dCuNPkzhJfvwjRQQD4jlhPM/H3vH4gW1Q=
Subject key identifier:   AA:10:C6:65:31:27:FC:68:D8:9A:FC:35:2A:06:32:47:78:35:EE:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D55A56DAA5AEC913A280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38cae-09b4-34ad-8923-9812697c7a2e.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     396593
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d5:5a:56:da:a5:ae:c9:13:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=da6271ef-c84a-4db0-93c0-2ee05d812b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:6b:14:bb:a4:a2:06:16:5e:0b:4d:47:04:
                    c6:1d:1e:97:48:ce:c1:c9:2e:ed:2c:dc:89:2c:0b:
                    a6:96:de:ec:2d:ca:1d:2f:a1:3a:fa:ad:14:b0:84:
                    96:5e:22:14:d1:a7:b9:cf:68:dd:dc:7d:8d:3e:1c:
                    d2:30:94:65:4d:55:a6:44:5d:8a:c3:eb:fe:20:62:
                    d9:9f:2b:14:a0:1a:37:c1:d9:66:6b:57:f1:51:7a:
                    bd:fb:65:73:28:e0:68:6f:63:e4:54:82:43:61:90:
                    d1:fe:1f:ae:b6:f9:83:7c:ed:b3:34:d2:9b:7d:0c:
                    dc:28:09:42:2a:d5:23:4e:45:cf:f2:cb:f9:dd:53:
                    80:f3:52:67:32:2e:8d:63:b1:f9:a6:72:02:44:33:
                    54:b3:ef:e6:fb:73:ea:3f:7d:b0:f7:e0:1c:96:07:
                    d4:5d:1c:5f:f2:3e:33:1b:73:60:77:33:97:6f:39:
                    74:be:f4:4a:05:8f:ac:f2:d0:79:51:3e:1d:28:a1:
                    ed:23:9a:14:b2:1a:52:d2:e8:bd:0f:a2:48:6b:20:
                    50:55:37:11:ef:59:3e:fc:74:7d:37:d2:a5:fb:ff:
                    52:21:05:1b:bd:3b:6f:52:29:dd:ed:50:ac:31:ac:
                    24:33:94:10:96:d9:f6:e5:95:ba:67:07:a9:b7:14:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:10:C6:65:31:27:FC:68:D8:9A:FC:35:2A:06:32:47:78:35:EE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65b38cae-09b4-34ad-8923-9812697c7a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:f7:72:f3:e6:ac:6a:58:65:91:ae:c1:09:fe:5d:60:ad:
         95:62:08:bf:a0:0e:e5:55:17:78:11:1b:a8:ac:4a:e6:b1:c5:
         cd:3f:60:45:79:98:c6:9f:27:5f:a9:07:4a:8e:56:af:c4:20:
         ed:cb:f2:a4:1f:6a:15:87:a5:69:8e:d5:32:93:22:8a:7b:95:
         21:81:d3:31:41:94:fa:3d:44:79:cd:b6:7b:10:39:de:0d:45:
         b0:0f:ca:e9:b3:be:8e:2e:51:bf:61:bc:e5:a3:39:f3:70:17:
         ef:f5:6d:1e:0c:b7:dd:16:66:9a:43:b4:c1:94:85:4b:7e:a9:
         a3:ae:4d:4f:cb:7d:26:f3:7f:c4:be:a6:fa:ab:85:cf:68:67:
         15:ca:2e:75:37:8a:6d:c8:00:8d:1c:cc:e5:73:fd:4b:b0:4c:
         d6:a3:63:61:0d:31:ad:f8:cb:ae:b4:67:7a:d0:5c:01:c7:9b:
         ec:d1:ce:17:2f:cb:85:c6:eb:fe:42:94:a5:8c:48:ae:56:b0:
         8b:88:97:38:40:04:39:54:f6:23:3b:80:22:79:17:58:1f:de:
         66:af:bd:68:8e:ed:b2:0f:67:11:53:4c:c3:aa:51:cd:52:6b:
         67:65:d5:f3:48:54:cc:00:32:54:9f:98:42:6f:95:bb:cf:8d:
         43:74:5f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----