Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa
File:                     bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa (raw, json)
Hash identifier:          XKP/RnQeKXzweucf5LNd4QhSLrspb61/BeiqLR7OgxY=
Subject key identifier:   29:35:95:6C:F3:10:A6:CC:33:7D:82:0B:E6:06:D1:E8:EA:86:9D:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9C7682F4083AD7EBCED40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     397202
IP address blocks:        2001:500:30ff::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:c7:68:2f:40:83:ad:7e:bc:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=0723007e-4224-4857-9b08-9901b8a555e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:24:5a:7d:20:c1:3c:38:b1:c9:a6:56:73:
                    e8:a5:35:54:3b:94:59:9c:26:67:c9:71:ff:6a:c4:
                    98:b3:2e:c3:16:9a:20:23:85:13:62:1d:9d:9c:d6:
                    34:f0:01:70:19:70:9f:d0:ce:54:09:ed:fb:95:07:
                    fc:11:89:08:07:66:58:c2:d1:fc:68:9f:f8:53:69:
                    96:b0:b4:21:f9:65:24:1f:46:92:f3:76:9a:c0:80:
                    0c:8c:ea:ed:2d:23:d9:ec:8b:0b:54:97:33:f6:25:
                    bb:37:b6:7f:d6:2f:14:4c:95:39:b4:8e:bb:43:02:
                    65:72:74:45:c3:e0:21:4a:46:06:0f:01:a0:7f:0c:
                    90:a3:9e:87:04:c9:48:ed:e7:5c:8e:c6:27:0c:73:
                    f5:eb:4e:f6:72:ba:bc:bc:81:f5:f1:fc:20:d3:02:
                    ff:74:b0:fc:2b:f8:09:50:61:25:e7:36:07:74:8b:
                    71:9c:25:c1:c6:75:4b:44:f9:fe:0b:ab:df:ee:5a:
                    f0:50:9b:2b:c1:f5:53:20:3b:85:fc:59:93:0d:6f:
                    3d:8a:36:38:fc:7d:bd:53:e1:d6:69:3c:64:17:d9:
                    33:88:0e:ee:9c:6e:a1:5d:49:ae:11:53:0d:23:2b:
                    9e:50:08:eb:45:07:71:4d:e3:f9:26:1f:d6:e9:bb:
                    5a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:35:95:6C:F3:10:A6:CC:33:7D:82:0B:E6:06:D1:E8:EA:86:9D:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:5c:21:73:74:1e:6c:00:9c:fd:01:11:33:a3:c9:6d:4d:
         c3:32:37:75:63:a0:59:36:9f:6e:04:e8:bb:1f:26:3f:a1:43:
         ba:39:c3:72:33:18:47:70:82:6c:71:82:4a:f6:0c:77:b4:26:
         55:f0:49:35:8a:4d:d8:3a:3f:f3:f8:08:51:64:da:65:11:19:
         d4:95:ee:eb:56:19:6c:fb:6e:fc:7a:bc:4a:1d:47:87:6e:70:
         f6:0f:f1:9d:7c:79:b6:e7:81:1f:eb:a9:97:e7:87:15:c0:f7:
         e6:65:63:ac:d6:75:a3:44:9e:a7:f5:08:a0:c4:b2:bf:17:92:
         0c:fe:cb:49:96:61:60:91:6c:67:98:c6:0a:98:b3:0f:ea:69:
         e8:25:46:1e:2a:df:19:af:b8:51:50:28:76:7d:fc:09:1b:74:
         94:90:5e:2a:4c:34:03:8c:7a:b7:ab:c1:84:92:1f:f0:66:55:
         89:53:54:63:e0:ac:01:cf:a8:1e:c9:91:08:e4:e5:77:de:d8:
         28:00:9b:19:32:9d:2d:93:62:c6:d2:d7:de:c6:5b:10:a0:41:
         4b:96:c8:6a:2a:82:07:3b:6a:25:d3:50:a5:0a:01:04:39:ba:
         1a:1f:a9:d4:fa:3d:d5:48:d0:11:2e:0e:33:65:8a:ec:0c:3c:
         a8:31:b3:d5
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEl62cdoL0CDrX687UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk
MDcyMzAwN2UtNDIyNC00ODU3LTliMDgtOTkwMWI4YTU1NWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjckkWn0gwTw4scmmVnPopTVUO5RZnCZnyXH/
asSYsy7DFpogI4UTYh2dnNY08AFwGXCf0M5UCe37lQf8EYkIB2ZYwtH8aJ/4U2mW
sLQh+WUkH0aS83aawIAMjOrtLSPZ7IsLVJcz9iW7N7Z/1i8UTJU5tI67QwJlcnRF
w+AhSkYGDwGgfwyQo56HBMlI7edcjsYnDHP16072crq8vIH18fwg0wL/dLD8K/gJ
UGEl5zYHdItxnCXBxnVLRPn+C6vf7lrwUJsrwfVTIDuF/FmTDW89ijY4/H29U+HW
aTxkF9kziA7unG6hXUmuEVMNIyueUAjrRQdxTeP5Jh/W6btaJwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCk1lWzzEKbMM32CC+YG0ejqhp0NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmI0ZDBjMTEtYzVlMS0z
MjEwLWFmNDMtYzI5YzgwNjJlZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB9Blwhc3QebACc/QERM6PJbU3DMjd1Y6BZNp9u
BOi7HyY/oUO6OcNyMxhHcIJscYJK9gx3tCZV8Ek1ik3YOj/z+AhRZNplERnUle7r
Vhls+278erxKHUeHbnD2D/GdfHm254Ef66mX54cVwPfmZWOs1nWjRJ6n9QigxLK/
F5IM/stJlmFgkWxnmMYKmLMP6mnoJUYeKt8Zr7hRUCh2ffwJG3SUkF4qTDQDjHq3
q8GEkh/wZlWJU1Rj4KwBz6geyZEI5OV33tgoAJsZMp0tk2LG0tfexlsQoEFLlshq
KoIHO2ol01ClCgEEOboaH6nU+j3VSNARLg4zZYrsDDyoMbPV
-----END CERTIFICATE-----