Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead06626-b28f-33ab-b956-b38874ea0b46.roa
File:                     ead06626-b28f-33ab-b956-b38874ea0b46.roa (raw, json)
Hash identifier:          lg+AsfQ/i7oZn9YR5uwKBAhhHAzCSNNY6hGHfihkOz4=
Subject key identifier:   27:EA:7A:6E:5A:11:C8:20:D9:BA:FD:F4:EB:52:DA:CD:AA:03:87:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB6874DA2BFC03F61E560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead06626-b28f-33ab-b956-b38874ea0b46.roa
Signing time:             Thu 16 Jan 2025 13:38:18 +0000
ROA not before:           Thu 16 Jan 2025 13:38:18 +0000
ROA not after:            Wed 16 Apr 2025 12:38:18 +0000
asID:                     396606
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b6:87:4d:a2:bf:c0:3f:61:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:18 2025 GMT
            Not After : Apr 16 12:38:18 2025 GMT
        Subject: CN=9104a073-6921-40b3-9e00-0f11eca61c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:af:11:2a:50:58:e3:d4:21:49:50:c6:2d:
                    f0:87:87:fe:e3:0e:9a:f8:0a:f6:54:9a:ec:0f:0d:
                    b9:30:c3:d6:c3:cd:85:34:62:89:67:85:4b:91:c7:
                    22:88:e5:51:8d:4e:c9:ed:dc:46:88:92:f0:6b:b0:
                    bd:80:2c:28:10:0c:64:b3:ab:ab:7f:23:72:af:40:
                    f1:0e:7c:ad:db:97:af:a6:01:7c:29:68:c8:d0:dd:
                    93:6f:d1:a2:d4:6d:d2:20:0c:58:cb:40:99:d4:c8:
                    48:55:49:bf:b6:28:53:cc:30:36:0c:0f:cd:23:1b:
                    cb:78:a5:68:17:09:f2:70:a2:04:4f:d0:54:f0:2b:
                    38:27:30:f8:c5:4e:a2:28:fd:d8:07:47:1f:bd:b8:
                    1c:e6:51:b5:10:54:3a:0d:85:08:ab:42:84:23:02:
                    1c:67:f1:e6:7c:39:85:29:96:c9:da:98:07:98:92:
                    29:dc:2f:64:83:c8:2c:00:66:e6:d4:71:03:ca:23:
                    91:29:04:8b:ac:ba:66:3d:32:d3:8b:a8:f8:f1:11:
                    0c:5f:5e:c3:03:91:83:ec:68:e5:3f:14:cd:db:77:
                    64:44:9b:f1:5c:1a:22:30:e0:86:7f:62:a2:14:9e:
                    80:fe:2e:60:5a:98:ab:6e:f6:a5:1f:2c:b1:c4:d4:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:7A:6E:5A:11:C8:20:D9:BA:FD:F4:EB:52:DA:CD:AA:03:87:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead06626-b28f-33ab-b956-b38874ea0b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:95:be:fb:2e:73:47:65:0e:86:f4:4e:fd:37:db:71:f6:e2:
         d1:34:d6:2d:fe:f8:ba:e2:de:52:35:b6:77:9f:47:a1:b6:be:
         df:39:7d:94:27:9b:47:a3:d7:0f:45:46:4e:7c:34:8a:69:9e:
         e0:6c:f0:40:68:36:b9:d1:d8:1b:61:ce:c3:9a:1c:44:cf:3e:
         f2:9d:57:d8:a5:03:20:1b:6c:db:3d:be:b7:e0:2a:89:ec:9a:
         9d:76:82:15:cd:97:5d:5f:0f:19:19:98:03:03:f8:97:c5:79:
         a6:1e:e4:87:8f:d6:a6:70:a4:b9:15:bd:38:f1:a4:d9:f8:9f:
         3f:09:b3:93:0d:21:58:0a:7d:19:09:d9:e2:1a:d5:53:e5:3e:
         72:eb:a4:e4:2f:b3:7a:1d:49:b2:90:f7:1f:7a:c3:80:0a:fe:
         33:0e:46:fc:85:a2:43:b2:d7:0d:26:60:8a:25:85:a1:22:da:
         72:d5:6b:79:9d:b9:bd:73:c3:bb:5d:dc:f6:cf:cc:05:c2:1d:
         ec:60:15:82:b2:ca:e6:28:59:3d:bd:d1:72:7a:45:72:d8:fd:
         74:0f:1d:04:bd:35:23:67:71:a4:d9:17:52:5c:5c:69:05:6b:
         3f:b6:4e:db:a0:01:51:e1:21:0a:6f:0e:a4:92:1a:96:a8:f0:
         2b:8a:be:54
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiQaraHTaK/wD9h5WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNjEzMzgxOFoXDTI1MDQxNjEyMzgxOFowLzEtMCsGA1UEAxMk
OTEwNGEwNzMtNjkyMS00MGIzLTllMDAtMGYxMWVjYTYxYzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkyvESpQWOPUIUlQxi3wh4f+4w6a+Ar2VJrs
Dw25MMPWw82FNGKJZ4VLkcciiOVRjU7J7dxGiJLwa7C9gCwoEAxks6urfyNyr0Dx
Dnyt25evpgF8KWjI0N2Tb9Gi1G3SIAxYy0CZ1MhIVUm/tihTzDA2DA/NIxvLeKVo
FwnycKIET9BU8Cs4JzD4xU6iKP3YB0cfvbgc5lG1EFQ6DYUIq0KEIwIcZ/HmfDmF
KZbJ2pgHmJIp3C9kg8gsAGbm1HEDyiORKQSLrLpmPTLTi6j48REMX17DA5GD7Gjl
PxTN23dkRJvxXBoiMOCGf2KiFJ6A/i5gWpirbvalHyyxxNSOIQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCfqem5aEcgg2br99OtS2s2qA4ePMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWFkMDY2MjYtYjI4Zi0z
M2FiLWI5NTYtYjM4ODc0ZWEwYjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCIlb77LnNHZQ6G9E79N9tx9uLRNNYt/vi64t5S
NbZ3n0ehtr7fOX2UJ5tHo9cPRUZOfDSKaZ7gbPBAaDa50dgbYc7DmhxEzz7ynVfY
pQMgG2zbPb634CqJ7JqddoIVzZddXw8ZGZgDA/iXxXmmHuSHj9amcKS5Fb048aTZ
+J8/CbOTDSFYCn0ZCdniGtVT5T5y66TkL7N6HUmykPcfesOACv4zDkb8haJDstcN
JmCKJYWhItpy1Wt5nbm9c8O7Xdz2z8wFwh3sYBWCssrmKFk9vdFyekVy2P10Dx0E
vTUjZ3Gk2RdSXFxpBWs/tk7boAFR4SEKbw6kkhqWqPArir5U
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:44 2025 by rpki-client