Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5de6c5-523f-3081-9399-00c00a8ad566.roa
File:                     4a5de6c5-523f-3081-9399-00c00a8ad566.roa (raw, json)
Hash identifier:          WXtLA4YOlT/NuiXTEcx8emI4WUVJnUp9BId3G6RRgAQ=
Subject key identifier:   0F:A9:48:53:C9:6B:C7:8F:77:E2:47:10:5D:8B:0A:E4:10:B6:0A:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAF00CB8DF7B9BC8475D0E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5de6c5-523f-3081-9399-00c00a8ad566.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396562
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:00:cb:8d:f7:b9:bc:84:75:d0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=b62a42e0-5373-426d-8d40-a205879438de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:7c:0d:30:8f:55:47:15:c0:ec:c6:06:3e:
                    ba:21:95:a1:29:0e:ce:b9:29:04:00:e1:8d:8e:47:
                    61:b8:be:75:e3:41:ac:5d:9b:b7:f6:4d:c7:a8:d7:
                    6a:45:aa:92:f5:09:0b:2d:ac:c0:b5:77:62:5b:0c:
                    a9:bd:fc:0a:48:3a:af:94:fb:06:da:45:91:3e:1d:
                    1c:20:c3:60:48:2e:f3:b8:0e:2b:24:e4:4a:38:42:
                    35:f2:4e:41:55:b1:0e:44:5f:97:9f:d3:37:eb:bd:
                    d3:8b:e6:a3:97:d3:6e:38:c5:59:b4:cb:7c:7b:f3:
                    cc:ef:a2:69:3f:58:ac:02:32:19:59:8a:08:d0:d0:
                    da:2f:dd:94:32:1f:ca:13:23:52:9b:53:90:9c:0d:
                    97:39:ab:fb:d2:84:1a:20:68:d9:7a:38:6c:f7:f5:
                    d3:d6:fd:86:80:f9:89:66:07:2b:c9:17:06:4e:db:
                    33:cf:86:74:d2:f0:e7:e1:12:5f:7d:b7:c9:29:00:
                    dd:fb:5e:18:ca:d9:69:fb:85:8e:57:24:da:07:66:
                    59:41:45:a1:21:ac:7d:8a:86:6b:8e:95:17:99:a6:
                    7a:c9:c4:a4:3f:47:f3:f1:83:8b:7d:52:f0:ce:08:
                    91:bd:2a:4a:2a:d1:0b:2e:16:9b:a6:46:f6:9c:7e:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A9:48:53:C9:6B:C7:8F:77:E2:47:10:5D:8B:0A:E4:10:B6:0A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5de6c5-523f-3081-9399-00c00a8ad566.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:01:e3:c6:4f:62:ce:21:77:ff:4e:5f:37:55:3e:39:b0:
         50:6b:47:fc:ea:22:50:0f:03:b7:4b:04:1c:15:be:bd:76:f0:
         79:c4:5b:d2:09:e7:f9:1c:d7:3e:82:7a:2b:3c:0b:f8:e0:b6:
         9b:5e:73:4b:30:6d:99:ac:ba:ba:48:10:e9:a2:66:ff:89:ed:
         da:d4:fe:2e:22:61:70:20:91:3d:5b:31:7b:5f:bc:79:a2:3c:
         81:22:60:24:ed:5a:2d:2e:c6:c9:16:6e:91:02:e3:bd:f5:8d:
         91:0b:e4:29:22:46:8f:6b:7d:c2:f8:8f:b2:25:e9:2c:a9:bc:
         29:62:59:c7:fc:3f:b1:4f:04:d4:3b:8a:8d:ef:04:1e:fa:56:
         ce:1a:f4:37:fb:a5:dd:8c:f9:fa:87:8a:4c:46:6f:97:bc:25:
         ba:54:0a:7c:b4:a8:46:6d:3d:06:e4:cd:00:10:46:a0:a4:21:
         36:88:44:d0:ff:41:a0:50:e9:f4:f7:e5:2d:85:67:0d:8a:fb:
         2a:e9:1c:ea:9b:b5:ef:00:28:cc:12:b2:68:6e:47:7a:86:e6:
         ad:07:90:7c:8d:38:27:40:81:13:dd:24:d5:1e:fa:c6:9b:e8:
         aa:1c:44:b5:c7:4d:01:50:04:4e:75:d9:1b:f8:96:9e:e0:ad:
         36:8a:5c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----