Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa
File:                     11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa (raw, json)
Hash identifier:          4+UiGC+eRtmQn8pzj71wRicYbFeDoug1qD8k4ce8NKQ=
Subject key identifier:   08:BB:6C:1E:FD:C0:92:6E:11:4E:F9:88:3E:FF:1C:BF:83:BF:A1:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484243043DD6AD7A694C6D3300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa
Signing time:             Thu 19 Dec 2024 13:45:16 +0000
ROA not before:           Thu 19 Dec 2024 13:45:16 +0000
ROA not after:            Wed 19 Mar 2025 12:45:16 +0000
asID:                     396575
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:04:3d:d6:ad:7a:69:4c:6d:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:16 2024 GMT
            Not After : Mar 19 12:45:16 2025 GMT
        Subject: CN=f1388e9d-4525-455c-8129-e42edec2d7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:b0:e0:89:32:ff:d1:04:f6:ef:fd:ce:c9:
                    fc:27:4a:f0:13:b8:be:a8:07:6a:a3:3d:f5:f5:20:
                    9f:cf:98:ea:fc:86:67:e7:bd:a1:f8:19:f2:9c:2d:
                    2a:6b:f4:ae:f8:77:af:37:ce:2b:05:0b:58:05:f5:
                    fb:a0:d7:fd:2e:48:c1:cf:c3:38:54:2c:23:c8:ea:
                    89:d0:14:5d:a8:2d:87:e0:36:7e:62:c0:23:0a:95:
                    b8:35:78:76:d6:bd:6e:9b:71:97:8d:df:70:ad:89:
                    a4:b9:ee:4a:15:72:72:3d:41:d0:c0:a2:af:aa:11:
                    e0:ae:06:8f:24:e1:7f:07:6f:ad:cd:0b:05:90:65:
                    01:fb:08:8d:79:10:06:e6:7e:cc:a8:38:e4:18:71:
                    67:d8:25:f1:c1:52:c7:a6:3e:8b:72:2b:23:42:fe:
                    d3:75:d1:f4:24:c4:c4:70:f4:de:db:ac:1d:8b:71:
                    44:eb:91:6a:3c:d0:e1:35:4d:85:3b:b1:a8:52:de:
                    20:7a:4c:67:57:2e:05:39:a0:cd:48:4b:55:9c:1a:
                    e3:0b:e8:68:bf:d8:cb:4d:41:8d:0a:0b:89:3d:a5:
                    71:7b:93:58:6f:47:7f:0c:69:ae:3a:f0:74:19:ff:
                    92:48:8b:3a:38:ed:e5:a0:1b:d6:6a:77:2a:8c:20:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BB:6C:1E:FD:C0:92:6E:11:4E:F9:88:3E:FF:1C:BF:83:BF:A1:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:e4:01:fa:24:d6:74:e6:63:90:07:1c:97:e6:5c:45:8d:4b:
         60:b4:6a:de:56:be:2e:e9:30:3c:3a:d1:e5:a0:4c:b7:25:59:
         c2:19:95:bc:89:c5:44:cb:05:3f:90:75:b8:9a:c0:dd:f0:32:
         d3:da:ec:27:d3:a8:e1:71:4f:01:3b:f7:bb:14:ee:d5:8e:55:
         7c:9e:f8:f6:7f:98:d0:f4:3f:42:39:eb:53:32:d2:d7:73:90:
         ec:f2:fa:80:22:35:b8:a5:ef:b7:d8:62:14:79:d7:df:3b:6d:
         32:ad:9d:a0:56:2b:71:5f:f6:05:03:70:79:fe:4c:44:e4:65:
         e4:22:49:60:25:61:bf:7a:07:21:72:88:dc:36:fa:76:68:c1:
         bd:ad:6a:3f:d4:f9:67:6c:8d:c8:0c:ce:1c:84:0b:65:8e:91:
         f9:ce:de:d7:2d:37:40:fa:41:2c:b2:cd:21:5b:21:09:12:ab:
         36:db:e8:08:fe:ca:cd:35:84:91:08:c6:cf:ea:53:e0:e3:1e:
         7b:4c:1c:0e:c2:ff:50:c7:fb:d7:d6:73:48:02:d6:f1:ab:92:
         2d:fa:32:9d:0a:54:c9:25:51:5c:ad:27:8c:f3:32:61:eb:97:
         74:ef:84:e1:02:cc:27:f0:4f:44:07:48:db:6c:80:31:c3:56:
         40:36:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----