Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/203fd1fd-162d-307f-b4f3-11f068389a7f.roa
File:                     203fd1fd-162d-307f-b4f3-11f068389a7f.roa (raw, json)
Hash identifier:          Ec1f/BlZxSTR+2w6ziWe3WlDYSQo9jdCEJQfRVFtvxA=
Subject key identifier:   61:FD:67:B6:79:28:52:0A:80:FE:5E:A7:70:4D:63:E5:40:F1:A0:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB5220D8560DB362F52C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/203fd1fd-162d-307f-b4f3-11f068389a7f.roa
Signing time:             Thu 16 Jan 2025 13:38:18 +0000
ROA not before:           Thu 16 Jan 2025 13:38:18 +0000
ROA not after:            Wed 16 Apr 2025 12:38:18 +0000
asID:                     396826
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b5:22:0d:85:60:db:36:2f:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:18 2025 GMT
            Not After : Apr 16 12:38:18 2025 GMT
        Subject: CN=92ef3afa-059a-42ff-ab21-3ec01aebbb93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8b:09:54:59:74:38:58:a3:39:d5:0d:b6:dd:
                    61:37:ad:64:6d:5a:a7:8d:3d:50:1d:12:30:42:1c:
                    1a:7c:53:50:ce:4c:24:bc:bf:5e:e4:da:44:8c:54:
                    ba:16:71:77:7d:71:b3:dc:f9:09:63:6c:9c:3e:04:
                    e6:0f:cb:9d:77:49:b9:09:92:1c:81:f5:a2:56:de:
                    65:6b:18:76:8c:ec:22:82:26:ea:d1:6c:2f:77:59:
                    62:ea:dc:d9:ce:8a:71:ce:75:27:70:90:f3:4f:63:
                    37:fa:b6:49:89:64:88:89:1d:46:65:e4:e3:74:95:
                    95:43:f6:9c:20:aa:76:2c:fa:82:76:24:3e:cb:79:
                    dc:6c:c6:e6:f8:c9:44:21:87:5f:b2:c0:dd:c2:6e:
                    9f:f9:08:b6:12:af:30:ec:59:d8:f6:c8:ca:05:cc:
                    6d:d6:94:a0:5e:24:ee:df:4e:ab:3d:f6:22:eb:c0:
                    7d:a3:1c:94:5d:61:8a:2d:7d:89:fe:a7:59:b5:9a:
                    57:2e:a4:af:1b:4f:63:4f:7d:1d:9f:14:e5:ff:cc:
                    c2:72:84:34:68:14:f2:1a:73:1f:03:b2:39:c9:4c:
                    0c:75:68:cd:a3:69:35:1b:e0:c1:e7:85:f5:7c:98:
                    c9:87:ba:01:b3:d0:de:28:04:5f:d7:48:45:cb:68:
                    58:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FD:67:B6:79:28:52:0A:80:FE:5E:A7:70:4D:63:E5:40:F1:A0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/203fd1fd-162d-307f-b4f3-11f068389a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:31:85:17:6f:83:a7:08:4b:0b:8c:93:7e:d7:05:5b:b0:ae:
         74:75:b9:3d:da:8e:79:3a:35:d3:eb:9d:d7:fb:bb:c7:25:44:
         af:63:be:a8:4e:36:c8:f9:48:de:e3:9b:a0:2b:a4:e4:5b:f3:
         87:30:63:71:f3:d1:a3:71:90:15:40:cd:11:1f:6a:46:b0:a7:
         00:43:6b:fd:e6:36:d3:63:74:92:2b:8e:0e:b4:bc:03:77:bc:
         14:25:77:91:19:4e:4a:e6:87:52:3d:e3:7c:7a:bb:92:ea:10:
         6e:aa:bd:10:e4:be:f4:5b:c9:c8:5e:06:09:0a:17:25:52:9d:
         2d:88:35:45:38:9e:05:b4:75:8e:18:ed:61:eb:5f:1b:1f:2a:
         f2:32:84:d0:97:00:fe:37:8a:d2:65:2b:da:50:4f:34:08:d0:
         88:5a:13:67:5b:93:d4:cc:ca:65:1e:ad:30:bc:b7:59:c2:ee:
         48:c6:8b:78:9b:27:98:b6:bf:b7:b2:e8:13:b1:10:df:bb:78:
         05:6a:14:e6:fa:80:ca:eb:73:48:bc:21:be:77:f1:91:3a:31:
         b5:34:dc:3b:36:e1:94:5a:cd:6d:7a:e7:60:c6:03:80:07:57:
         d0:2d:98:ad:a1:31:d4:e9:f0:f1:77:36:2a:d6:51:c7:1c:cb:
         ec:ad:eb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----