Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcfa6710-74dd-3dff-87e2-ae0c301797d8.roa
File:                     bcfa6710-74dd-3dff-87e2-ae0c301797d8.roa (raw, json)
Hash identifier:          ERdHsTJRSvBnUG89BesJFXE4O8Ia1L0no5f5TcWq8Ok=
Subject key identifier:   AC:11:14:EA:96:45:D1:F6:EC:10:2A:8A:D9:46:68:20:A0:0E:70:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA4681E1D729D86B5F26380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcfa6710-74dd-3dff-87e2-ae0c301797d8.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     396552
IP address blocks:        2001:503:39c1::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:68:1e:1d:72:9d:86:b5:f2:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=73c04d93-fc03-4a97-af6f-da823556f02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:22:f0:33:6d:90:6a:11:3b:cf:52:ed:55:9c:
                    39:96:2f:da:87:45:cd:a5:4a:23:aa:f0:f9:71:a2:
                    27:d6:0a:a5:17:20:e1:fd:59:51:4d:d3:c6:6e:87:
                    0a:fa:e7:cc:10:f6:5d:77:ab:71:aa:28:e9:20:a5:
                    d1:00:43:a5:8a:b8:3e:35:6f:be:9e:8f:ec:b8:55:
                    01:71:1c:ff:16:41:f0:e2:7b:f5:a5:d4:4a:e8:07:
                    64:6b:89:78:54:de:ea:6b:cd:7a:3e:03:4d:6c:39:
                    b4:e6:ec:45:ba:79:f3:99:2e:b4:81:c3:06:7d:bd:
                    f1:ce:0a:eb:05:25:96:c7:8b:ef:99:74:e1:4f:b0:
                    ac:db:85:14:29:e0:83:8f:48:22:5f:5f:6a:e9:61:
                    8f:d9:bf:4e:17:3d:16:69:ba:3a:f5:2f:81:4e:a3:
                    54:7d:f0:2f:07:e7:12:af:1a:20:29:53:c7:c2:df:
                    67:82:a3:a5:8d:60:ce:cb:ba:74:68:fd:90:1d:74:
                    fb:6f:8a:dd:b6:66:35:f0:a4:a0:ec:2e:78:64:b0:
                    d4:50:6d:3c:cb:25:dd:d8:bd:17:ad:56:18:d4:43:
                    a1:f0:0e:91:aa:b9:56:2a:d3:aa:2a:e5:0b:6d:1b:
                    7c:9e:44:43:60:b2:45:ae:8f:5e:5f:cd:5b:81:01:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:11:14:EA:96:45:D1:F6:EC:10:2A:8A:D9:46:68:20:A0:0E:70:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcfa6710-74dd-3dff-87e2-ae0c301797d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:62:53:46:ea:6a:1c:de:72:5c:99:35:91:4f:0f:95:d5:1b:
         aa:1e:bd:6d:6f:2d:37:bf:e9:fd:9c:3e:2b:f0:82:ec:c3:c3:
         4b:d8:78:11:d2:fe:1f:5d:26:7c:1d:83:78:95:bc:bf:a0:d1:
         32:62:a4:81:f5:bd:63:b2:59:a6:03:d8:8e:f5:38:fa:03:b8:
         fd:7a:f6:0c:09:69:06:fc:0a:35:79:37:a0:2e:58:d0:4e:45:
         0f:3c:f0:aa:13:df:fc:5e:d9:03:f1:48:fd:86:11:20:09:4a:
         c0:ea:10:d3:73:50:c7:33:3d:33:63:21:a5:88:f4:dd:f2:bf:
         47:b6:57:57:f2:ec:0b:45:ca:ff:53:9d:1b:f6:fc:64:f0:68:
         16:28:21:65:7b:80:5d:07:bf:b2:e9:db:62:27:1b:4f:fd:2c:
         67:ef:9b:22:48:7c:31:83:41:f3:19:08:1d:f6:e5:5a:06:d3:
         64:02:d6:71:b3:da:88:c8:4e:92:d3:91:70:75:60:a8:51:f0:
         82:94:26:19:a7:eb:c0:25:75:6b:f1:1f:f3:d9:01:40:1b:23:
         58:97:74:33:df:87:f1:07:6d:ed:84:ac:95:bc:2a:72:15:03:
         10:37:4e:42:6c:f2:33:96:08:51:3b:cd:2f:98:96:b3:5e:9d:
         dc:be:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----