Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b334260-5dda-3d87-b6c0-d6ae9a052f30.roa
File:                     7b334260-5dda-3d87-b6c0-d6ae9a052f30.roa (raw, json)
Hash identifier:          n/IktXClroNLxANfbg1tDB+RyerhCwm9P2cwbQOjads=
Subject key identifier:   E0:F4:E9:02:E2:E4:F1:59:A2:D7:0D:0C:7A:D7:F1:C5:6D:AB:D3:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494039853CA1009B6E00C33170
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b334260-5dda-3d87-b6c0-d6ae9a052f30.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     19836
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:85:3c:a1:00:9b:6e:00:c3:31:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=f96e0cfd-b0a1-4ceb-957b-2d590f5cabd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:ec:b0:d3:a7:8c:67:99:de:c1:7b:84:67:
                    14:78:40:05:b5:4e:7f:63:2d:5a:b3:94:2b:cc:84:
                    4a:af:c6:5c:c2:91:9c:0e:ed:4b:06:af:36:78:a0:
                    f0:94:43:f6:5d:ca:45:bc:7b:86:60:e7:54:02:cf:
                    cc:fe:72:c6:63:3c:a6:fc:aa:14:29:9a:42:82:f9:
                    ed:66:21:6b:fb:a3:f3:a4:74:55:54:db:5c:1f:aa:
                    df:a1:d2:25:c5:11:ca:86:e2:1e:00:39:1c:ba:0c:
                    55:90:4e:d5:18:79:c3:31:55:8f:fa:d0:72:dc:28:
                    97:db:e8:fb:3b:61:91:66:82:6b:00:c7:8f:a2:7f:
                    54:f4:d4:2f:a0:ec:f2:b8:dd:a8:3e:c8:0b:14:ee:
                    81:85:4b:9e:d3:b3:bd:b1:65:72:08:50:1b:ab:ed:
                    c9:06:9e:62:c6:84:2f:32:75:47:bb:36:45:b1:2f:
                    ae:71:20:61:05:44:89:22:ab:8e:18:fc:a1:77:60:
                    b7:58:78:6c:39:7f:14:c1:23:8c:fa:0c:4d:d0:e3:
                    a6:ba:82:80:3c:50:fc:8e:d8:a9:af:69:83:47:01:
                    59:3d:f3:09:5f:ef:da:9a:e7:15:52:c0:02:a2:47:
                    31:92:82:9d:ff:01:52:f4:16:69:4c:96:41:53:7d:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F4:E9:02:E2:E4:F1:59:A2:D7:0D:0C:7A:D7:F1:C5:6D:AB:D3:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b334260-5dda-3d87-b6c0-d6ae9a052f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a8:6a:39:99:0e:09:93:14:2e:60:4a:68:a3:cd:42:6d:6e:
         42:3c:97:1a:a5:3a:f5:17:6c:fa:0f:fd:19:ad:b5:4d:f6:28:
         0e:22:b1:6d:af:0f:80:d7:d2:97:47:26:df:d5:99:04:89:f5:
         04:90:e6:3e:5f:37:5b:75:97:49:41:02:09:8b:e2:8e:19:27:
         26:0e:9c:07:a6:33:fa:51:be:ed:b2:ae:3b:55:f9:52:1a:2c:
         83:39:82:a1:21:ba:8c:6d:a4:de:a0:d0:2d:84:36:6d:32:02:
         e7:ba:bf:52:3d:0d:b8:3e:23:9b:2b:5a:0c:b3:46:b4:11:6a:
         77:63:0b:9a:96:3c:f0:ab:cb:41:1e:4d:d2:32:92:f1:53:52:
         9c:8d:60:1a:bc:7c:b1:23:be:06:6c:81:6c:c1:9f:61:2a:56:
         80:a8:5b:35:e0:df:ce:3d:37:0c:aa:50:e4:ee:e7:66:bb:60:
         47:81:b9:91:f4:fc:d7:7e:72:af:25:7c:44:af:18:e9:a2:6b:
         7c:90:fe:36:4a:5a:af:31:9e:0b:f4:c5:62:bc:f2:d0:2f:42:
         f4:c3:d1:cf:22:9a:0a:2d:1b:f4:80:b8:2a:d2:a5:ae:5d:4c:
         c7:af:e6:79:cc:37:8a:e4:31:5b:8b:8a:bd:4c:56:09:1f:93:
         70:1d:84:af
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYU8oQCbbgDDMXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
Zjk2ZTBjZmQtYjBhMS00Y2ViLTk1N2ItMmQ1OTBmNWNhYmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypvssNOnjGeZ3sF7hGcUeEAFtU5/Yy1as5Qr
zIRKr8ZcwpGcDu1LBq82eKDwlEP2XcpFvHuGYOdUAs/M/nLGYzym/KoUKZpCgvnt
ZiFr+6PzpHRVVNtcH6rfodIlxRHKhuIeADkcugxVkE7VGHnDMVWP+tBy3CiX2+j7
O2GRZoJrAMePon9U9NQvoOzyuN2oPsgLFO6BhUue07O9sWVyCFAbq+3JBp5ixoQv
MnVHuzZFsS+ucSBhBUSJIquOGPyhd2C3WHhsOX8UwSOM+gxN0OOmuoKAPFD8jtip
r2mDRwFZPfMJX+/amucVUsACokcxkoKd/wFS9BZpTJZBU30PqQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOD06QLi5PFZotcNDHrX8cVtq9PxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2IzMzQyNjAtNWRkYS0z
ZDg3LWI2YzAtZDZhZTlhMDUyZjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAIqGo5mQ4JkxQuYEpoo81CbW5CPJcapTr1F2z6
D/0ZrbVN9igOIrFtrw+A19KXRybf1ZkEifUEkOY+XzdbdZdJQQIJi+KOGScmDpwH
pjP6Ub7tsq47VflSGiyDOYKhIbqMbaTeoNAthDZtMgLnur9SPQ24PiObK1oMs0a0
EWp3Ywualjzwq8tBHk3SMpLxU1KcjWAavHyxI74GbIFswZ9hKlaAqFs14N/OPTcM
qlDk7udmu2BHgbmR9PzXfnKvJXxErxjpomt8kP42SlqvMZ4L9MVivPLQL0L0w9HP
IpoKLRv0gLgq0qWuXUzHr+Z5zDeK5DFbi4q9TFYJH5NwHYSv
-----END CERTIFICATE-----