Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/015fe184-a6c1-349b-a38a-e27198f5d759.roa
File:                     015fe184-a6c1-349b-a38a-e27198f5d759.roa (raw, json)
Hash identifier:          sH1LaLZHb1dt52HqH3PCb3bLQ8aTAEyiWo0YPoClu5U=
Subject key identifier:   CB:72:4E:6A:D8:57:87:BE:D2:C3:4E:2C:A4:1C:A9:C1:06:47:6D:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424312DA4F0CB19064BF7320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/015fe184-a6c1-349b-a38a-e27198f5d759.roa
Signing time:             Thu 19 Dec 2024 13:45:23 +0000
ROA not before:           Thu 19 Dec 2024 13:45:23 +0000
ROA not after:            Wed 19 Mar 2025 12:45:23 +0000
asID:                     396570
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:12:da:4f:0c:b1:90:64:bf:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:23 2024 GMT
            Not After : Mar 19 12:45:23 2025 GMT
        Subject: CN=21e7538d-e68a-45f7-b30f-21c1fe1ff164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:23:7f:c4:30:16:50:2f:bd:d5:5c:f0:ba:
                    8c:9c:14:e9:06:a2:54:17:7b:16:ff:2c:79:ed:0a:
                    b8:de:59:2a:41:2a:b9:4c:68:69:24:45:d5:1d:53:
                    1b:fb:dd:d9:97:88:8c:36:80:af:b2:1d:ac:57:7e:
                    91:31:c7:9b:56:6e:1a:8c:ae:75:36:dd:de:5a:36:
                    d0:b1:a5:92:03:5c:ed:7f:c2:7a:44:b5:f8:55:f9:
                    8f:c9:45:ec:92:1c:31:19:85:bb:4b:ee:f7:33:9d:
                    03:85:c0:51:c5:f0:bd:ad:c7:d7:7a:12:75:94:9d:
                    b9:b5:6b:c0:c4:b3:c9:d2:d2:ec:57:51:ca:3e:50:
                    cd:24:dc:9c:6f:f7:97:45:1e:aa:b8:d7:6e:e3:69:
                    71:53:9e:f4:70:35:fe:35:77:c9:fa:39:3b:35:81:
                    79:2b:b0:ad:ff:9e:26:4e:d2:61:b1:3e:0c:9a:fc:
                    05:a2:c1:aa:05:78:e4:12:1d:7d:5e:f6:8a:ce:38:
                    7a:a6:e2:cd:3c:45:f1:ff:37:a5:05:89:cb:0c:82:
                    62:61:b6:d2:2f:d4:49:e5:4d:75:97:7b:17:54:5d:
                    73:19:2a:7e:2e:ee:12:fe:b9:2e:18:8d:87:f3:e2:
                    81:0f:3a:b7:56:62:35:80:0e:d0:d8:d0:09:86:af:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:4E:6A:D8:57:87:BE:D2:C3:4E:2C:A4:1C:A9:C1:06:47:6D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/015fe184-a6c1-349b-a38a-e27198f5d759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7e:b1:a5:1a:a0:05:14:a2:55:cf:e9:dd:be:fd:c3:5e:0c:
         ba:a7:e7:67:ee:b9:27:4c:df:fb:0e:8f:fa:cc:ff:d2:71:a3:
         79:2c:4d:04:78:67:53:23:6c:d4:6f:36:e6:50:46:29:03:6e:
         de:43:f8:cc:e3:59:2f:89:b6:23:de:0d:9d:1c:6e:64:bb:78:
         55:fe:de:f7:28:db:f7:b9:25:e3:ca:fe:67:44:9e:05:f6:c6:
         ae:e8:fe:e4:17:e0:bc:6f:65:4f:24:5e:d6:de:37:cc:41:5e:
         56:b0:63:fe:2b:30:14:f8:1d:d2:5f:cf:a4:31:21:ab:73:ba:
         3f:a2:8d:a2:df:ac:e9:a6:d1:e0:c2:ff:42:37:dc:68:c2:44:
         16:94:a2:bf:2b:d2:d1:25:2b:fd:ab:37:5d:85:ab:98:da:d5:
         ee:77:ce:43:e5:0a:3c:87:1b:9f:0e:84:cc:7a:1d:ae:76:67:
         25:b0:0a:d6:01:4e:ee:b8:8c:08:66:df:ab:8e:9e:59:7f:73:
         0d:70:ef:83:4e:48:4b:2d:8d:f4:5b:84:94:65:6d:c7:3c:4b:
         c1:e8:f1:10:e1:cf:db:b9:c5:63:1f:4b:15:d3:f2:96:17:a5:
         ef:c6:a9:28:d0:cd:a1:51:f1:1d:54:40:ad:c6:da:1d:1f:57:
         d3:70:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----