Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebe1c0b2-12ac-357a-9158-2feaec36c841.roa
File:                     ebe1c0b2-12ac-357a-9158-2feaec36c841.roa (raw, json)
Hash identifier:          9rEse7oh8KH81WelOYZAiaWrFu6mvJ+PO40n3Y3izJ8=
Subject key identifier:   61:DC:F7:09:53:6B:7F:CD:3B:9B:2C:7D:FA:97:58:33:DF:6A:A3:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F6E0B5909959EA191BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebe1c0b2-12ac-357a-9158-2feaec36c841.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396608
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f6:e0:b5:90:99:59:ea:19:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=b7de0406-fa00-4037-98f0-d98ca32eca62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:82:67:f3:da:f9:cc:56:d3:5d:4e:ce:77:
                    15:fd:95:9d:68:74:95:1b:85:12:5d:30:48:06:64:
                    15:dd:99:53:12:81:88:6b:10:f5:1e:1c:1c:58:5d:
                    f8:72:94:32:c9:1b:34:50:5e:3b:a1:4c:86:ad:24:
                    81:49:c9:eb:c5:01:81:de:4a:c1:1b:70:1e:d2:8e:
                    7a:2c:e1:ef:53:35:e6:29:92:9c:ef:74:c5:34:ff:
                    ca:b0:d8:bd:08:21:bc:13:5c:f3:00:44:ad:ba:e6:
                    06:0a:96:61:c7:71:8f:c6:79:25:07:dc:27:7a:eb:
                    52:a6:e9:45:9f:eb:55:38:e9:c3:79:bf:f0:33:a7:
                    f7:88:b4:44:e2:5c:04:8f:de:dd:e5:a8:11:94:72:
                    7a:3e:6f:bf:17:17:68:c4:67:cc:3f:4f:f4:42:58:
                    13:9f:f0:c4:13:ff:61:e8:68:30:16:44:67:43:c1:
                    e9:73:a4:71:53:9d:ed:b8:f6:47:38:68:7a:04:25:
                    08:b2:5d:9b:04:ed:bb:b5:42:16:2d:d2:4f:9e:d9:
                    17:4a:6c:36:5e:53:76:0e:11:f8:f5:d9:3d:6e:61:
                    15:ee:48:6f:cb:19:86:7b:a8:d2:e2:d1:45:a0:c1:
                    66:85:64:9e:ab:75:a0:79:b6:a3:7a:5b:fd:4c:45:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DC:F7:09:53:6B:7F:CD:3B:9B:2C:7D:FA:97:58:33:DF:6A:A3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebe1c0b2-12ac-357a-9158-2feaec36c841.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:25:f0:8f:57:80:67:b1:1b:5f:08:55:d2:c5:eb:75:38:1c:
         39:82:42:bc:30:ad:cd:bf:08:73:b0:db:e5:68:bd:bb:fb:1f:
         6e:f1:d8:ea:9a:38:cf:82:f6:39:a1:21:17:21:67:4e:53:5b:
         bd:0f:50:29:4d:4f:55:f0:90:1c:1c:fa:11:66:51:1a:a4:2a:
         55:15:29:d4:74:47:e9:2c:05:53:60:ee:86:df:13:ac:98:d5:
         65:0d:d6:61:43:21:d8:4b:84:cd:76:89:75:b8:d2:e1:36:06:
         ec:3d:e4:a2:cf:9a:47:3d:a5:37:d1:bf:bc:4f:ce:47:f2:d8:
         e8:60:0d:89:78:ab:9e:fe:76:36:34:1d:42:86:37:4a:07:92:
         ab:9b:d2:ec:49:b2:fb:34:f8:54:3c:da:2e:52:2a:89:06:1b:
         f8:48:a7:83:aa:a3:d6:ca:3e:cc:a5:51:8d:b2:3e:4d:8e:67:
         b1:2c:b8:3f:7f:1c:87:1f:35:ae:f4:ab:f7:31:50:7e:83:01:
         c7:7f:19:2a:c0:98:a3:3a:55:22:e0:5c:cd:cd:b6:20:3d:c1:
         71:3c:ce:f9:38:ea:eb:64:f3:8c:6d:2d:9f:24:ea:a8:26:2b:
         9f:1a:fc:54:72:b7:ce:91:19:92:f4:e6:94:af:8e:5f:ee:a9:
         95:16:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----