Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73fc3332-4f25-3f6e-9932-e3c34c888379.roa
File:                     73fc3332-4f25-3f6e-9932-e3c34c888379.roa (raw, json)
Hash identifier:          7CYHP/7z7mYZ/yN6EtxPp2ApXhkzjtHcfeQfX3n86Sg=
Subject key identifier:   90:3A:C7:A0:90:E5:CB:E6:3C:E7:47:90:CF:87:36:EC:43:BE:B5:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60C9B5509BEDA32F4D5700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73fc3332-4f25-3f6e-9932-e3c34c888379.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     36626
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:c9:b5:50:9b:ed:a3:2f:4d:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=23bae303-f7e1-4ada-8f29-94d431d39ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:16:8e:98:61:91:96:4e:bb:bc:be:ba:d3:
                    39:b0:0a:cd:fb:20:55:b2:bc:7b:a3:49:73:4b:0d:
                    73:8c:e4:cf:32:8b:a3:2e:a4:5c:53:ed:dc:9a:d1:
                    19:48:5a:45:26:bc:20:ef:57:71:a3:f4:03:f6:fb:
                    15:ef:bf:8e:72:05:36:19:f8:47:a0:12:eb:89:f2:
                    d2:b2:0e:d5:7f:63:c4:67:c4:73:c8:77:2a:33:a1:
                    15:33:10:03:c0:14:cc:4b:0f:03:5e:99:ac:51:f8:
                    4a:34:6d:db:78:e3:5a:1d:a1:d5:d0:b4:96:3e:a4:
                    0b:e3:63:66:65:bf:76:db:be:ee:ca:7a:50:c6:15:
                    56:1e:bf:1b:70:ab:8f:bd:f5:cf:1d:aa:8b:42:1f:
                    8f:ef:29:22:ff:d8:75:2d:80:ae:d3:e3:b0:25:69:
                    7f:f9:53:6f:48:7e:1b:b3:84:9f:9f:3a:e2:b0:70:
                    61:38:fb:fb:1c:48:ad:bd:15:8c:cf:e2:95:ef:3b:
                    78:2d:83:6f:5b:36:ae:c9:9e:8c:72:08:02:78:4f:
                    c8:48:3c:57:24:43:53:df:ba:00:b8:fd:b3:cc:03:
                    7f:13:68:f2:d7:98:55:cb:04:f3:0f:3e:69:17:7d:
                    58:b4:be:73:42:9a:70:8d:b8:29:9e:a0:42:5d:72:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3A:C7:A0:90:E5:CB:E6:3C:E7:47:90:CF:87:36:EC:43:BE:B5:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73fc3332-4f25-3f6e-9932-e3c34c888379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:d7:12:d3:05:93:4b:1a:b6:c5:24:b6:c1:cd:33:71:f2:
         83:39:48:2a:f7:7d:04:bf:22:7f:58:bd:dd:88:87:7d:9f:49:
         28:8f:e3:0a:1f:72:47:df:f6:f6:6b:52:24:71:aa:9c:c9:e4:
         1f:41:ec:17:5f:51:e4:01:91:62:a7:e0:e0:10:c7:cf:ed:eb:
         4f:ea:34:64:18:2f:d4:f3:27:f5:49:96:c7:7d:e1:00:fe:94:
         33:b7:8b:33:60:85:30:dc:5e:05:36:c0:5e:dd:96:f4:a2:12:
         f2:ac:c8:f1:f4:d8:7e:c7:3d:32:c3:6f:df:7f:fe:92:85:74:
         74:da:d6:1d:93:80:29:6e:c1:0e:e1:b9:ea:b7:2b:3d:03:4a:
         a2:c2:46:b9:75:4a:1b:58:70:c5:35:f3:df:0a:c2:f1:e5:9a:
         86:53:08:5e:52:60:d4:e0:0f:34:63:61:04:ca:c4:c0:fb:91:
         72:6d:d5:5c:88:d7:79:e9:ab:c5:bd:41:c4:b5:88:3e:75:1d:
         41:00:d8:96:3f:4e:2d:41:39:3d:51:d2:7f:30:cf:fd:59:46:
         09:29:98:ea:05:ad:05:5f:53:0f:d4:af:ad:0d:46:9c:91:82:
         97:26:9e:b9:b9:f3:bf:86:48:41:fe:1d:8e:61:a9:81:43:a1:
         31:03:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----