Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa
File:                     f3359e85-f33d-3b60-bc7c-daa031cad17e.roa (raw, json)
Hash identifier:          qjYa5k4A1fCwAfcWL3ywWxhIv53AS9BCeworD8RjFsU=
Subject key identifier:   8E:DE:0C:09:05:C6:8C:E9:2A:14:7A:76:FC:87:E7:E4:B5:50:C8:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C573345864874A53998FE460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa
Signing time:             Tue 04 Feb 2025 13:33:15 +0000
ROA not before:           Tue 04 Feb 2025 13:33:15 +0000
ROA not after:            Mon 05 May 2025 12:33:15 +0000
asID:                     396561
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:34:58:64:87:4a:53:99:8f:e4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:15 2025 GMT
            Not After : May  5 12:33:15 2025 GMT
        Subject: CN=7149deb8-bd6c-4cd5-80a7-6d38735f63a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9f:5c:97:42:7b:56:cc:69:b4:14:7b:1d:af:
                    6d:7e:7d:14:fa:44:91:21:01:4a:ef:6d:a3:53:12:
                    3f:e1:58:11:05:c8:6c:d0:a7:e6:7b:6e:8e:a4:34:
                    0c:72:fb:f4:88:9b:a0:15:40:9b:f1:91:dc:c4:15:
                    29:25:96:55:b7:7d:33:01:4e:f5:a1:ad:c4:1e:20:
                    3f:63:fb:23:26:6e:ee:1f:2f:25:dc:47:cb:25:5f:
                    60:94:7c:2a:d3:33:1f:30:a6:17:03:f2:1c:dd:43:
                    60:b2:82:36:fd:6f:26:ab:41:bc:3b:6a:21:a4:a5:
                    1d:89:51:49:fc:e6:94:b8:22:16:47:5a:c2:5c:26:
                    a0:10:5f:09:db:b2:95:25:c8:53:08:78:92:f7:95:
                    34:b8:40:2b:46:d0:54:dc:b5:24:dc:22:80:d4:ce:
                    73:40:a0:fb:37:0c:c4:6c:7e:82:6c:3a:70:3f:27:
                    69:6f:be:1f:59:17:ed:b7:4c:87:2b:37:6e:95:c5:
                    d8:60:29:68:75:ff:30:d3:85:0c:95:9e:04:57:39:
                    af:44:53:d6:41:bc:0e:35:2b:1c:21:2a:7a:76:cc:
                    b6:76:5b:6a:b3:16:00:a1:13:56:ae:b5:82:64:a7:
                    77:1e:94:6d:aa:11:c9:35:44:30:58:91:d7:b0:ea:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:0C:09:05:C6:8C:E9:2A:14:7A:76:FC:87:E7:E4:B5:50:C8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3359e85-f33d-3b60-bc7c-daa031cad17e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:fe:3b:93:eb:3d:77:19:6e:c9:cb:40:63:b5:57:ec:77:
         58:13:6e:a5:89:5f:de:cb:5b:f3:3e:79:cf:d3:af:6e:b1:d0:
         6a:78:6a:9b:42:46:e2:2c:83:4a:ed:3d:bf:c4:b3:b2:94:8a:
         6c:f3:c5:02:2f:17:75:5e:6f:41:d9:e3:99:bb:37:ec:f8:66:
         92:c9:e4:81:06:32:b5:da:4f:13:32:2b:09:06:72:89:37:6d:
         b9:16:c6:17:63:da:bd:c7:60:a1:91:1a:ca:55:4d:fa:23:80:
         59:a7:cc:71:d5:cf:17:b3:48:2c:e9:ea:85:ab:da:da:63:b7:
         53:f9:74:57:95:f5:99:ec:10:20:5f:32:56:fe:02:c7:3e:95:
         b1:19:1d:1f:e3:57:65:be:a6:af:93:21:5c:e7:50:91:80:95:
         b6:e0:ac:ad:27:16:24:d9:6c:3c:ee:3a:04:84:9b:99:6f:c7:
         84:5f:4a:30:8d:43:7a:49:6c:f6:bf:9a:6f:32:e5:ff:e8:bd:
         9e:39:72:8b:d8:d9:e8:16:1c:9d:82:cf:4d:d8:56:5a:cc:3d:
         b5:55:e7:c6:9d:64:12:9f:29:a8:8d:76:2c:b8:d9:20:ec:d7:
         51:22:8c:7c:e9:59:44:dc:cd:c5:c7:16:5f:7c:8e:ff:19:c5:
         e3:7e:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----