Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80b3d767-5429-3957-8bec-49cb76d29cbe.roa
File:                     80b3d767-5429-3957-8bec-49cb76d29cbe.roa (raw, json)
Hash identifier:          ovlTJ2AVo3//c2+rOtagkHLpwtT2maJ1UZkOfxIXKzc=
Subject key identifier:   A3:8D:8E:55:06:2F:74:D3:7B:1F:E4:49:52:AB:E1:3F:E7:73:CB:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D79EEDC952BEF272F480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80b3d767-5429-3957-8bec-49cb76d29cbe.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     396585
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d7:9e:ed:c9:52:be:f2:72:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=1879206b-12e4-49ea-8bc0-5d4e30a78daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:19:4b:52:f0:c0:f3:a4:db:97:39:dd:03:70:
                    22:31:48:d7:e6:16:76:67:09:8c:18:1a:f3:bf:f4:
                    00:62:11:90:25:62:4a:02:c8:ad:b4:d1:c1:9b:60:
                    e0:28:42:7f:4c:8e:1c:e6:30:45:c4:c1:b9:84:bd:
                    3a:fd:18:0a:bb:8a:18:46:9a:9b:88:7b:b3:76:0e:
                    31:ba:84:3f:ce:14:68:a0:5b:92:d2:ab:07:55:0b:
                    5f:c8:9c:8a:04:36:4a:ab:6a:d2:dc:1f:62:52:a2:
                    53:ca:7a:8d:83:fd:08:e2:6c:52:42:60:a4:ad:55:
                    04:5e:df:6f:c1:04:f1:44:f4:91:36:2b:a9:f1:94:
                    85:2f:76:9e:01:52:b1:70:61:8d:a1:70:5e:fd:85:
                    f5:56:1e:4a:87:25:e4:a4:29:d2:a9:ce:97:e8:87:
                    39:cf:c1:18:23:e7:fb:f8:bf:36:d2:30:16:4a:3a:
                    57:16:1b:16:00:8c:21:af:79:ac:d1:2a:94:53:a7:
                    bc:b7:68:4e:86:c2:99:71:e6:81:23:94:1e:e9:49:
                    c9:17:cc:83:2e:8e:30:17:c3:d4:06:b0:d2:46:1c:
                    8f:c7:0a:91:34:63:17:ca:14:fd:30:03:d8:f4:dc:
                    b7:29:c0:54:6f:e6:8e:51:fb:36:84:27:d1:af:ff:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8D:8E:55:06:2F:74:D3:7B:1F:E4:49:52:AB:E1:3F:E7:73:CB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/80b3d767-5429-3957-8bec-49cb76d29cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:47:da:1c:1a:73:19:09:84:02:86:cd:3c:24:f8:88:f3:
         09:3b:b8:d0:3e:89:72:aa:ae:51:37:75:42:3d:35:88:77:36:
         43:05:9c:9c:0f:0d:98:20:a2:92:b2:7e:c2:ac:39:f2:08:21:
         11:26:21:d7:b2:7e:05:fa:40:d3:1a:05:4e:6d:49:c4:80:16:
         1e:bd:a5:dd:9c:0b:97:78:0e:05:26:1f:b5:3e:9a:54:40:c2:
         52:b8:8c:24:09:73:7b:f3:b2:84:c5:e7:47:f9:1d:82:95:52:
         46:95:d7:60:b8:98:1d:52:0c:94:eb:47:5b:81:60:f6:25:d5:
         e4:a8:32:4a:3d:04:d5:1d:f8:fe:48:b9:a4:78:5d:53:ba:af:
         de:fe:ae:19:bb:b5:1d:dd:8f:3c:19:66:df:ec:04:40:62:69:
         19:ba:db:0b:4a:fe:27:42:22:69:d6:12:5a:42:e1:3f:ac:05:
         13:91:b7:93:73:30:98:a3:64:06:b9:b5:14:0a:78:04:a5:c5:
         45:20:a1:75:5d:df:31:a9:fa:38:f0:b3:e4:3c:d4:dd:ba:97:
         c8:7f:f7:3e:b2:25:b8:be:2d:02:f5:03:dc:a9:9c:94:36:75:
         78:aa:f5:7e:74:27:32:1d:f7:1b:09:48:b7:e0:01:ad:cd:d0:
         9f:6e:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----