Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa
File:                     bbd38cda-7d43-361b-8ee3-dab3e0487112.roa (raw, json)
Hash identifier:          NDGB/BkrZLYjKxcqcGHEdnZu9k20+B/eOHDqLZSbpcI=
Subject key identifier:   5B:65:E8:B3:2D:03:F2:B3:4F:CE:59:5D:8A:C5:78:23:F0:99:33:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243EF2994F1714A99118000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     397196
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:ef:29:94:f1:71:4a:99:11:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=86729ba7-1815-4270-97ad-f37dfb9b55a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:e1:80:ee:f8:d6:f3:72:07:f3:f0:89:b2:
                    fe:8b:2b:d8:2e:0c:8e:03:e1:4d:d4:45:51:5a:3d:
                    a5:a3:e7:93:3a:9d:76:9f:09:20:40:fd:64:81:6b:
                    7c:ac:4f:df:8a:cc:61:f0:e7:b0:9e:7d:37:79:d9:
                    7a:10:3c:5c:e2:f9:cc:ab:0c:37:7c:96:2f:04:27:
                    ac:e8:a0:09:27:d2:19:97:01:52:31:5b:6e:9b:3f:
                    f2:99:d3:c0:23:cd:cc:f7:21:25:3b:28:0d:06:6f:
                    a4:9f:bb:0d:33:75:92:26:df:dc:18:7b:c2:d4:60:
                    c3:1d:af:41:d6:b0:32:b6:ec:22:91:6c:84:36:d7:
                    df:cf:bf:d1:14:6d:c0:6a:c2:04:19:e8:7b:26:cb:
                    6c:43:15:23:48:1a:8b:85:1e:a0:51:f2:a2:f2:9f:
                    9d:90:6b:ea:39:9d:3a:73:b6:49:f4:b3:fc:a1:d5:
                    ec:69:1a:df:9f:cd:8b:8d:32:25:a6:b2:e8:3b:fa:
                    99:42:2e:48:db:5d:7d:4b:18:f8:10:b3:14:e1:a1:
                    b3:a1:73:c0:ea:08:8c:2b:e6:96:b7:e0:c7:1f:d6:
                    e2:dd:39:1f:8f:2d:0a:ec:0c:fb:71:dc:9f:00:f7:
                    65:71:21:4c:a5:73:4c:e1:6a:3e:9d:fa:33:36:07:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:65:E8:B3:2D:03:F2:B3:4F:CE:59:5D:8A:C5:78:23:F0:99:33:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd38cda-7d43-361b-8ee3-dab3e0487112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:a8:2e:50:63:fb:71:88:75:4c:3e:67:f4:db:f8:97:63:17:
         1f:95:d8:63:fd:fc:d6:39:89:84:c5:94:af:7b:12:98:06:cc:
         16:69:3f:38:3e:b4:0e:b4:87:1d:13:ae:04:04:45:74:5e:93:
         8f:76:ed:6b:fe:fc:2d:51:d6:ea:8b:ae:96:b9:09:cf:fd:41:
         42:ee:9a:02:30:9a:6c:85:29:6c:65:45:9e:2f:01:f9:f1:aa:
         43:9d:20:cc:46:88:ec:9c:ac:3e:2c:56:4a:a6:5e:b8:13:13:
         92:8d:ac:d5:68:6f:80:7b:3e:db:6d:06:cf:ee:b9:43:c2:8e:
         23:43:f8:67:7c:86:70:f8:28:f4:c9:25:34:fa:44:7e:49:f5:
         2d:44:fc:68:14:d2:e6:c3:fa:61:18:24:4f:db:89:aa:0e:06:
         12:bf:a6:5f:e8:1c:c7:b4:7b:da:f3:33:df:9a:85:be:37:45:
         42:9e:7d:aa:55:2f:ab:fe:91:93:78:b5:23:d8:73:aa:e6:91:
         08:76:1e:cd:2b:dd:3d:dd:3e:61:87:d4:9e:f7:17:14:d2:06:
         fe:08:c1:8e:43:1e:d8:00:8c:81:8e:17:68:6f:18:45:6e:99:
         3f:70:a9:43:8b:03:e7:19:49:fd:a0:75:0c:1a:11:0b:ec:8f:
         ef:ae:a1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----