Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7140c43d-f746-3e96-bcb2-cf4ee674029f.roa
File:                     7140c43d-f746-3e96-bcb2-cf4ee674029f.roa (raw, json)
Hash identifier:          PWCKYzmALKIaRrKS8dN0NMms6kS9tuVcCJ1q9dwso0I=
Subject key identifier:   66:EB:FB:A9:45:49:4D:80:80:F7:24:F4:A9:E0:3B:99:DF:32:00:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D883A7D930948224B200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7140c43d-f746-3e96-bcb2-cf4ee674029f.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     32651
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d8:83:a7:d9:30:94:82:24:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=77d85366-6bd6-4f65-80a8-b2667dcd3263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5d:05:36:ab:f7:e5:02:e4:a5:0f:4a:94:5d:
                    f8:40:ae:c5:b7:84:04:f7:5b:7b:a0:78:14:78:05:
                    99:00:de:89:6a:ef:67:a6:61:a6:52:d8:b3:e4:ed:
                    11:8d:96:e4:cc:c8:4f:51:a5:6d:42:4b:5c:d6:d1:
                    92:65:f7:69:ba:9e:c6:7b:e6:8c:27:c9:02:8e:d6:
                    99:a3:e2:1c:94:89:68:9e:5d:ae:77:f3:1e:06:6f:
                    29:59:1e:07:67:ac:87:c4:9c:bd:4d:29:9c:45:18:
                    d3:6d:b7:63:a8:10:d8:ec:24:59:7e:3d:53:46:e7:
                    09:f7:ce:ce:59:d2:e3:56:ec:82:64:cf:04:15:6a:
                    89:75:0b:b7:ca:e6:f4:10:89:04:a4:e9:9e:7e:97:
                    31:f5:c6:80:41:68:1a:0d:54:4b:9f:ed:0b:d0:21:
                    05:0d:9c:b1:50:b3:0d:d4:e0:86:ee:0a:e0:71:99:
                    ff:2e:8f:09:9b:3d:54:79:d8:5d:ea:bb:b9:d8:bd:
                    8d:8d:8a:4c:28:72:a2:2b:41:00:f0:06:8b:ef:c6:
                    79:ee:95:04:67:11:2a:73:8d:ad:e6:ff:a4:c5:59:
                    12:b9:f7:4e:63:a7:7b:f2:89:a5:16:e7:ce:8e:f0:
                    2e:a0:a7:7f:dc:31:ac:bc:6f:68:d0:16:37:34:e9:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EB:FB:A9:45:49:4D:80:80:F7:24:F4:A9:E0:3B:99:DF:32:00:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7140c43d-f746-3e96-bcb2-cf4ee674029f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:65:fb:6c:61:85:24:3c:79:28:6e:e5:b0:bf:07:bf:60:c3:
         ff:67:a6:14:9b:81:25:1c:3f:91:56:5a:b9:28:dd:01:a5:bb:
         ec:ae:00:3f:9e:a3:8d:2c:b7:a9:72:e4:69:0c:b6:64:48:5d:
         be:56:42:78:f0:74:a8:6b:b2:66:92:8d:df:53:fa:ff:8a:89:
         5f:94:d2:a4:a4:b0:f1:5c:35:b7:16:53:11:b1:89:d2:a3:51:
         ca:b4:68:56:fb:21:31:7a:8d:25:79:7e:1f:b1:b9:00:a4:2c:
         5f:4f:12:15:f2:c7:e4:33:7a:87:4d:6c:e4:c4:9c:6f:b8:8c:
         d6:7b:6d:8f:58:76:39:7b:63:81:bf:5c:e8:fd:24:11:c2:51:
         29:92:74:af:b1:01:69:c5:cf:b2:8e:05:93:d5:0d:e8:8b:62:
         c9:53:a2:0f:74:61:9d:0c:65:ee:b5:51:76:19:b4:e9:9d:e9:
         82:63:85:fd:b2:42:51:12:64:15:4f:50:4e:30:7d:bc:49:34:
         52:f7:d3:e0:28:df:7c:d9:77:67:be:b6:51:d1:60:39:0e:53:
         42:cc:e5:b6:e4:44:af:cd:69:fc:8b:cd:c1:be:0b:cd:53:cd:
         a9:17:f1:04:cb:fb:2e:15:9b:ba:fb:c8:f0:cd:b7:79:37:41:
         34:c3:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----