Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa
File:                     f25258cd-4993-32b9-98e9-af41e0a3f994.roa (raw, json)
Hash identifier:          QPhSizdpCPu8VJPGB3+mdmU+LHYM1dwYdibAGmABL+Q=
Subject key identifier:   F9:D5:5C:E6:9D:D6:FE:54:4E:60:49:77:11:2C:EE:ED:F1:65:E2:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB7741EE698FC4C985E1E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396569
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:77:41:ee:69:8f:c4:c9:85:e1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=dfd2720f-3f57-41ef-aa14-78d101807305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:95:36:2e:f7:4e:b5:c4:ae:11:06:84:cb:
                    1d:13:f9:2e:7d:35:bd:83:3e:c0:f6:0c:f9:ae:2b:
                    3e:46:a6:59:40:8c:a5:c7:1e:46:73:84:0c:11:2a:
                    bf:8c:16:5d:05:a7:4d:eb:46:5c:fb:4c:93:89:42:
                    66:cb:0b:21:de:82:f1:14:46:19:f5:c6:53:7a:03:
                    01:91:ef:a5:af:aa:de:c0:54:15:6d:04:e7:ea:b5:
                    50:3b:e9:ca:b1:aa:22:fe:81:1b:ad:4b:40:5b:a2:
                    d4:fe:d6:53:8f:54:a5:c1:cb:a2:be:03:c4:4c:79:
                    03:eb:3a:e0:73:86:68:f5:14:27:21:f1:fe:a9:ac:
                    1b:43:74:c0:d0:6c:95:11:9c:04:11:3e:09:a1:76:
                    20:9b:de:64:98:16:85:bd:d1:30:70:c0:96:38:d5:
                    30:81:40:a2:ba:4e:2e:40:e8:45:f8:57:e1:ab:ac:
                    0b:0f:47:c9:f5:51:3d:f2:63:af:5d:b0:a7:71:ba:
                    31:c2:9f:6f:44:33:e1:1c:21:25:fb:2c:23:89:a5:
                    f0:bb:19:09:d7:5c:6c:61:49:38:11:57:11:5f:9c:
                    6f:de:ff:21:f7:bf:c0:c9:98:ee:d8:ea:87:d3:bb:
                    97:72:10:4a:62:37:69:23:a9:93:d5:dc:60:c2:a8:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D5:5C:E6:9D:D6:FE:54:4E:60:49:77:11:2C:EE:ED:F1:65:E2:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8d:bb:8e:d1:41:3a:7d:d9:b4:05:7d:80:cc:f9:39:82:73:
         21:91:2f:91:d8:ec:d5:3a:40:ee:8d:66:c1:7f:2b:30:66:7d:
         91:7b:0c:9c:56:db:7a:7e:fb:81:64:4f:33:88:8f:43:b5:d4:
         aa:6f:0b:fe:80:b1:8f:a0:5f:cf:c0:a8:92:ca:fb:f5:bc:ae:
         1b:ab:d0:af:ee:e3:67:90:3d:7f:98:d2:96:6c:43:9b:bf:0f:
         50:1b:a2:d8:d9:e7:f3:de:79:6c:3f:41:fb:97:8d:39:29:32:
         a2:2a:a3:5d:8e:4f:20:92:62:93:ce:db:dc:0a:3e:aa:17:ce:
         93:4e:18:67:2d:a6:22:88:3f:08:f9:9c:9a:e7:5a:c4:f4:7b:
         ff:e7:e6:ee:c9:bb:10:9a:0c:e8:c6:d8:df:d3:59:74:b4:93:
         0a:78:00:00:43:92:11:c4:8f:b4:e8:68:3f:4d:3a:3b:34:05:
         da:ee:07:bf:94:39:eb:7e:2d:7b:25:b2:0d:7d:37:c5:e6:1f:
         63:94:ea:bf:86:18:0a:4a:d7:b8:ee:b3:78:7d:54:25:d4:4d:
         ac:a4:b7:46:6d:20:f1:35:9a:ea:5d:98:84:cd:69:6c:70:67:
         7a:a1:5b:79:42:be:ce:80:ac:6f:8b:be:c3:db:d2:b6:30:36:
         60:3e:1d:6a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEiNq3dB7mmPxMmF4eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk
ZGZkMjcyMGYtM2Y1Ny00MWVmLWFhMTQtNzhkMTAxODA3MzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP+VNi73TrXErhEGhMsdE/kufTW9gz7A9gz5
ris+RqZZQIylxx5Gc4QMESq/jBZdBadN60Zc+0yTiUJmywsh3oLxFEYZ9cZTegMB
ke+lr6rewFQVbQTn6rVQO+nKsaoi/oEbrUtAW6LU/tZTj1SlwcuivgPETHkD6zrg
c4Zo9RQnIfH+qawbQ3TA0GyVEZwEET4JoXYgm95kmBaFvdEwcMCWONUwgUCiuk4u
QOhF+Ffhq6wLD0fJ9VE98mOvXbCncboxwp9vRDPhHCEl+ywjiaXwuxkJ11xsYUk4
EVcRX5xv3v8h97/AyZju2OqH07uXchBKYjdpI6mT1dxgwqhjvQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPnVXOad1v5UTmBJdxEs7u3xZeK8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjI1MjU4Y2QtNDk5My0z
MmI5LTk4ZTktYWY0MWUwYTNmOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAijbuO0UE6fdm0BX2AzPk5gnMhkS+R2OzVOkDu
jWbBfyswZn2RewycVtt6fvuBZE8ziI9DtdSqbwv+gLGPoF/PwKiSyvv1vK4bq9Cv
7uNnkD1/mNKWbEObvw9QG6LY2efz3nlsP0H7l405KTKiKqNdjk8gkmKTztvcCj6q
F86TThhnLaYiiD8I+Zya51rE9Hv/5+buybsQmgzoxtjf01l0tJMKeAAAQ5IRxI+0
6Gg/TTo7NAXa7ge/lDnrfi17JbINfTfF5h9jlOq/hhgKSte47rN4fVQl1E2spLdG
bSDxNZrqXZiEzWlscGd6oVt5Qr7OgKxvi77D29K2MDZgPh1q
-----END CERTIFICATE-----