Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
File:                     16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa (raw, json)
Hash identifier:          tHdYzUd7vB89pFluXmixSp8fTwgPPuMOih3prnO22U4=
Subject key identifier:   C6:3B:46:D3:4D:48:F1:95:0E:B7:2F:24:F9:3C:C5:76:B2:07:38:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B8A9BB241340309DE7300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa
Signing time:             Wed 11 Dec 2024 15:17:57 +0000
ROA not before:           Wed 11 Dec 2024 15:17:57 +0000
ROA not after:            Tue 11 Mar 2025 14:17:57 +0000
asID:                     396595
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:8a:9b:b2:41:34:03:09:de:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:17:57 2024 GMT
            Not After : Mar 11 14:17:57 2025 GMT
        Subject: CN=b52def90-f9a7-46ec-ab28-e1f1ee09e7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cb:ac:8e:38:90:6a:b3:91:a8:04:82:85:2f:
                    74:38:ec:90:af:93:38:7f:e2:b6:95:f1:31:83:b7:
                    fc:77:d8:db:e8:49:e7:65:47:b7:30:8a:e6:d3:e8:
                    6b:32:2e:2a:95:88:2b:20:34:b6:2f:ff:4a:d6:a3:
                    83:13:ef:a2:b4:20:a1:7c:2c:05:83:9c:e3:42:75:
                    77:81:76:14:89:76:b3:e2:e3:5c:e0:67:ad:2b:e4:
                    de:8b:7d:b2:58:70:cc:cb:95:48:e2:c1:43:06:c6:
                    13:c4:8a:21:c5:ca:f1:a9:f5:f1:83:40:09:c4:2b:
                    4e:02:29:ca:1b:88:bb:a6:f4:ea:79:ca:fb:6e:88:
                    c0:7e:c3:47:ea:90:13:0f:9b:34:72:bd:60:53:b7:
                    d5:fa:cf:30:02:d4:2a:b5:67:53:3d:2b:25:3e:61:
                    f4:ef:7a:1c:77:8a:bd:82:09:27:d2:6d:98:2e:18:
                    ef:69:62:a0:f7:20:73:bc:88:19:db:11:2a:c1:8d:
                    b1:d8:25:36:48:4d:32:05:b7:e9:0c:83:8c:3a:12:
                    ec:57:ae:d7:80:cd:4a:f3:e9:71:b4:20:ed:e3:55:
                    18:71:64:60:e0:01:b0:64:6f:2f:32:d9:aa:22:ea:
                    c3:f2:45:89:1f:80:e9:d1:2b:30:35:d6:77:7f:d3:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3B:46:D3:4D:48:F1:95:0E:B7:2F:24:F9:3C:C5:76:B2:07:38:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16a1ba98-8a17-3094-bfea-ecadc62c2c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:3c:9e:da:2a:c6:94:b6:f1:9c:9e:3c:44:b8:a3:f2:b9:18:
         c0:d0:1a:27:a0:32:89:fe:bb:d9:c0:e8:40:33:77:73:65:e6:
         33:8b:c4:e3:25:25:0e:c4:17:de:15:a0:c4:d8:e5:63:03:55:
         19:f2:be:05:c9:d4:01:de:91:ea:bf:f5:c6:ca:3f:cb:b0:9a:
         65:5d:83:30:20:1f:d9:ea:a4:a0:75:8e:5e:d6:df:81:5b:e6:
         ce:9e:9e:d6:71:50:77:d0:8e:cd:38:b5:78:13:3b:3b:f0:da:
         72:75:de:a1:e2:c3:ea:e7:95:1d:8d:e4:e7:15:29:a4:ca:09:
         c4:c7:18:a7:d2:39:24:e9:71:db:41:a9:6e:16:2b:ef:a5:e9:
         d9:b1:07:d6:83:7e:0c:4f:ab:f9:90:2d:26:77:db:60:84:c7:
         f0:72:42:ac:ca:33:c8:1f:ec:f0:93:1e:93:f4:aa:75:30:d2:
         81:58:f7:fc:25:78:7e:6d:b9:dc:70:a1:ea:f7:cf:7c:26:ce:
         62:74:49:2e:9b:8d:ba:df:03:b1:e3:e0:be:6e:2a:d5:b3:c3:
         38:50:23:ca:71:81:b5:65:5a:3d:24:fd:fb:c2:9f:07:4b:ef:
         6b:33:ad:cb:54:4c:39:2c:02:a1:51:4a:72:e6:bc:0f:41:c0:
         14:6d:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----