Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7773ecc4-2420-3dce-81a7-dbbc867724d9.roa
File:                     7773ecc4-2420-3dce-81a7-dbbc867724d9.roa (raw, json)
Hash identifier:          JS/t2mVd2Ie2qctAmKO6i/GFfEaqOfg+MWr9lyCnmGw=
Subject key identifier:   8C:F6:61:60:5D:D6:12:C4:02:0A:D7:53:95:86:E0:F2:AC:96:09:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60C7BE3E421952E6DEB980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7773ecc4-2420-3dce-81a7-dbbc867724d9.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396554
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:c7:be:3e:42:19:52:e6:de:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=19c1cbf5-6f3c-40f1-93ab-d90666ed27fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:a1:ce:42:3e:db:a9:ed:96:55:a8:74:a0:
                    8e:af:f2:0c:7c:85:93:60:ee:c1:b1:14:30:6a:c7:
                    f9:1e:af:01:8f:5c:eb:2f:a1:5b:11:cb:d9:46:c4:
                    5e:16:fb:37:87:55:04:a4:e2:aa:ae:55:55:1c:29:
                    59:a2:df:62:e6:85:ed:27:c0:9f:6f:98:48:67:61:
                    2d:aa:3a:54:fa:ec:e5:e3:46:93:ca:e5:1f:01:a2:
                    a1:85:f4:1b:4f:d6:f1:88:68:ae:0f:cd:07:16:42:
                    3a:12:cd:68:dd:99:b5:73:af:7d:3e:57:58:26:45:
                    17:5e:ad:93:43:b8:ad:b8:63:16:51:f3:49:e8:60:
                    da:42:66:b1:df:cc:12:61:0e:98:d0:5b:21:55:4e:
                    29:a0:f6:bf:6a:03:c5:84:e2:3e:c5:d1:55:a1:f9:
                    9b:68:72:e6:ce:59:1c:8f:8b:6c:1c:47:f0:17:d8:
                    38:8c:3c:2d:11:7e:e3:3e:5f:ec:cd:cf:e0:4b:bf:
                    25:94:20:cd:cf:4e:9f:ee:ae:77:3c:dc:a0:ac:53:
                    1b:85:bb:05:1f:9f:5c:c5:37:b3:4e:5c:38:72:a4:
                    05:82:16:d3:3c:4b:3b:8d:9b:f6:bf:02:0f:76:3f:
                    2e:27:e6:ef:8b:ec:47:51:e6:e0:46:d3:a0:80:90:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F6:61:60:5D:D6:12:C4:02:0A:D7:53:95:86:E0:F2:AC:96:09:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7773ecc4-2420-3dce-81a7-dbbc867724d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f1:e4:2e:27:76:26:a0:48:b4:95:a7:5f:e0:88:2d:4f:c6:
         b4:44:35:a8:30:4a:3e:9f:d1:65:c3:94:6c:43:aa:76:54:c1:
         d9:68:c0:b5:ee:08:5a:00:76:7a:d4:69:91:94:cd:26:e2:08:
         6a:32:64:a4:d2:8c:4b:05:f8:31:d9:35:83:94:71:22:82:ac:
         bd:69:fd:68:bd:f8:66:b9:2b:85:93:79:01:ec:23:da:08:e4:
         93:71:89:86:90:ed:08:94:bf:1c:e0:c7:a4:6b:14:d5:6d:ae:
         90:56:15:18:e9:35:6b:2c:27:b5:7d:37:58:e4:92:03:51:09:
         7f:e9:65:95:13:8e:21:70:c2:ef:ec:6f:96:e9:9f:53:fe:0f:
         f0:b4:c4:51:8d:d5:81:af:45:c9:db:26:ac:d6:e8:77:65:5d:
         dc:00:7c:bc:6a:43:b8:f3:33:52:6c:c1:b1:11:e0:80:29:76:
         b2:08:dd:68:d6:f5:d6:ee:be:40:84:8e:30:15:aa:e8:39:23:
         8e:63:f1:a7:63:d9:d7:a0:71:1a:ec:64:c1:41:af:34:8e:84:
         ca:1f:19:98:67:02:67:2a:bc:b7:b6:9c:c6:e1:98:39:ce:a2:
         fd:b6:ce:3b:a4:4a:ab:ab:ad:09:ee:e9:b1:ad:4c:c2:39:28:
         1f:f3:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----