Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa
File:                     f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa (raw, json)
Hash identifier:          vxCthzNeK1Knqtwbo9Co1xIget6a9FdXdlBTxYANRBM=
Subject key identifier:   AC:4B:FF:CA:84:A3:02:5B:DF:8A:AC:10:86:69:60:DB:E4:35:79:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D4BF43916920AA508E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     396565
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d4:bf:43:91:69:20:aa:50:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=b2c0ae2a-1d9a-4038-a434-8856aaabb9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:0d:23:94:43:c7:0f:e8:5f:2c:f2:87:33:
                    7d:e7:1a:6e:b8:d7:9c:34:33:f8:bf:d9:8f:a5:33:
                    6c:e2:e7:b1:80:bf:cb:06:99:2a:e5:2c:c8:ba:5d:
                    1d:af:92:d5:9a:1d:7e:60:bc:90:48:16:06:27:0c:
                    98:a4:6c:ae:5c:e7:77:e7:15:74:89:6f:7a:7b:aa:
                    64:02:04:4a:82:f0:f3:33:0e:a4:a9:57:e0:27:06:
                    38:6f:a3:4c:2f:0e:81:84:bb:3c:5f:d5:8a:de:d0:
                    33:9a:46:a9:63:6f:3d:bb:d5:e9:80:bf:e3:19:8a:
                    14:cd:bc:1d:98:73:f3:0d:22:cf:32:4b:03:56:8b:
                    95:7b:97:d7:40:3f:9d:4d:5d:08:e3:db:65:85:86:
                    53:56:3f:ad:49:c7:8a:42:f1:a8:94:c7:04:d5:e6:
                    fd:59:06:18:90:c3:6c:41:02:ba:34:1e:8e:81:dd:
                    eb:b4:98:9e:d8:17:f4:d7:98:23:9e:21:63:99:79:
                    bd:11:0d:60:c3:90:d0:26:37:ea:d3:6f:91:6c:af:
                    6e:c4:fe:a3:87:61:fe:b5:bb:bd:1c:85:81:08:ae:
                    bc:73:ba:2c:9f:36:63:a5:8b:2f:2f:50:3e:2f:aa:
                    b5:ce:e3:bd:52:29:76:fa:bf:0f:9a:fa:e1:19:4a:
                    5c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4B:FF:CA:84:A3:02:5B:DF:8A:AC:10:86:69:60:DB:E4:35:79:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89ce2c0-536b-3375-84ec-e77ef8c28c75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:d4:14:2f:76:9d:0e:52:74:20:41:9b:bf:d0:a9:4b:87:
         19:65:68:ad:93:c7:6a:0b:8c:29:19:ed:fd:e0:99:6d:b6:34:
         47:20:dd:7a:92:e9:c1:38:c7:8e:24:a3:d4:46:a2:4d:69:58:
         50:64:8b:49:73:4d:72:63:9d:87:17:46:6e:25:db:e0:2d:16:
         20:9e:0f:7a:b4:40:78:14:be:d5:09:7d:2f:fa:00:f8:9f:db:
         22:ee:75:76:65:7e:5d:07:52:63:dc:34:49:c5:9e:42:94:20:
         32:fa:4b:a2:ce:9f:83:68:21:dd:7b:b5:bb:06:90:f5:eb:b3:
         d9:db:1d:c2:05:23:a0:0a:3b:5f:70:0f:3a:c7:3f:18:32:1d:
         c4:12:b2:69:c6:17:6c:0a:50:0f:d9:d0:c8:db:ce:ff:e1:ba:
         c6:32:25:7d:c7:db:54:b9:91:42:05:aa:d7:fe:b4:17:07:36:
         4f:69:fa:8c:32:8a:4d:6f:1e:1d:5c:5e:0c:e0:d7:94:f4:48:
         69:a5:76:dc:f7:9b:12:ac:d6:cb:b1:7f:8f:51:00:43:55:86:
         f8:4e:f1:6e:f6:81:96:b7:07:40:ad:9f:eb:96:ae:0c:d9:93:
         c2:66:72:88:a9:93:6c:48:96:19:d0:1e:e6:8d:d2:e6:fb:28:
         5b:9b:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----