Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa
File:                     bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa (raw, json)
Hash identifier:          Hasc/+A5fknnsCxgFX3WsPBRXcBNvk/DWhqI04zyXBk=
Subject key identifier:   46:8D:D7:DF:53:22:FA:8A:F5:D9:13:DE:73:FE:39:3C:68:00:27:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CC8A1CC1EB852F484E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396594
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:cc:8a:1c:c1:eb:85:2f:48:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=ce8acda7-0b85-421f-a81b-18e860bc37b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:ea:ff:f1:b3:9f:4f:48:9d:5d:fb:1a:86:
                    4c:5c:e1:fc:ea:55:3a:44:fe:1b:60:22:00:a9:26:
                    37:a0:40:d8:bc:9e:d8:c9:47:44:57:a5:9c:b4:d0:
                    3a:b8:3c:42:30:66:0e:01:0a:b1:b1:48:85:58:4b:
                    83:6d:6b:77:f8:ec:41:88:37:86:78:80:97:d6:5c:
                    5e:8d:03:8b:9c:c6:16:0b:23:86:42:af:2b:4f:25:
                    7a:c8:38:52:9b:24:ef:64:d8:c6:17:35:af:d6:c6:
                    97:45:de:8b:44:63:d4:b3:f2:4f:08:06:31:78:2a:
                    68:6e:46:9b:d3:30:1f:4d:70:da:11:41:7d:01:b3:
                    fe:9e:6f:67:be:d7:5f:dd:d6:e6:d1:f5:64:74:e5:
                    79:da:8d:a6:b7:5f:17:97:9b:a8:f3:fc:0b:3a:05:
                    c4:7b:4b:d7:2b:24:a1:96:86:67:50:73:58:29:b4:
                    b4:e5:b5:13:dd:04:d3:1c:9b:3c:fb:89:33:05:f3:
                    ed:2b:3a:0c:d3:41:db:1f:34:60:4e:a0:11:e4:87:
                    28:4f:04:67:08:6a:0a:b6:80:27:3e:e2:40:54:9d:
                    7b:ef:7a:b2:08:fc:d3:19:1e:4a:c2:2a:bc:01:c6:
                    3c:1d:0d:1f:b3:f7:dd:7c:6c:52:1a:0a:b3:61:62:
                    72:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:D7:DF:53:22:FA:8A:F5:D9:13:DE:73:FE:39:3C:68:00:27:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb5f549f-5eea-3870-ac29-4d0dc2dfebeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:05:5d:eb:ad:79:0b:e1:fd:b1:6d:56:af:da:46:c3:3e:f9:
         d9:fe:a8:ae:b3:2e:a6:40:b5:d8:69:61:8d:dd:7f:58:35:a6:
         59:93:fc:4f:2a:16:cd:13:dd:e9:ba:c6:52:d8:0a:32:3b:20:
         31:ff:c9:5e:fc:86:6a:50:77:db:8f:39:8f:f9:ee:55:2c:16:
         57:6d:65:cc:69:95:8a:1a:bc:d9:61:e0:a0:4e:40:e4:61:a9:
         01:88:b1:79:41:35:62:c3:b7:dd:b6:42:29:38:f5:e1:fd:d1:
         cf:84:65:3f:8e:81:c8:1f:89:8b:7a:3f:97:2c:fb:8c:ae:45:
         2d:26:2c:57:85:ba:17:24:10:93:79:f0:7a:6f:0b:b5:c7:31:
         37:27:11:05:48:63:aa:9b:84:f9:0f:82:e3:08:ef:b2:d0:9a:
         21:12:05:9c:72:a3:64:f7:f7:56:d1:df:aa:61:71:a0:13:50:
         8e:9b:af:3b:5d:be:a3:3b:ab:cb:08:bc:05:ff:6a:e1:96:86:
         d9:b2:e4:55:d7:e7:f2:50:b5:76:01:d1:79:a8:38:fe:2b:42:
         f5:4f:94:37:6d:80:94:30:1f:77:65:28:7e:b0:a9:c4:39:97:
         38:e9:03:1a:1d:3e:0f:db:8c:86:8f:bc:05:22:90:6c:ba:36:
         fe:c8:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----