Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa
File:                     220424c3-c5db-3d2c-a100-5eb2b338905a.roa (raw, json)
Hash identifier:          1OG9BR3rwuT5Wk6vtor9pnmDQMQd/m6PUdxjt5zc9QA=
Subject key identifier:   F5:F3:5D:AA:1E:D1:9B:87:9B:CB:28:DE:84:58:5C:7C:1C:B0:B3:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842434B2EBD71265508A40AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa
Signing time:             Thu 19 Dec 2024 13:45:50 +0000
ROA not before:           Thu 19 Dec 2024 13:45:50 +0000
ROA not after:            Wed 19 Mar 2025 12:45:50 +0000
asID:                     396593
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:4b:2e:bd:71:26:55:08:a4:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:50 2024 GMT
            Not After : Mar 19 12:45:50 2025 GMT
        Subject: CN=21c91c9a-f1b9-46dd-b32c-6af8e3f96f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:4e:69:58:e9:bb:9b:b0:94:58:70:d5:34:
                    ce:49:4b:50:f0:ba:29:c2:c8:e1:0c:34:ed:60:52:
                    01:1c:34:ef:f1:02:04:7a:82:7a:3e:3c:a8:ab:e7:
                    0f:7f:9e:00:d5:53:7e:c2:50:97:47:47:a6:e1:23:
                    e2:cb:27:d4:fe:36:c9:50:70:60:b6:9f:66:d8:c1:
                    12:32:75:d3:80:2c:1d:4e:7e:ce:87:bb:d0:85:fd:
                    d4:74:4e:8a:16:03:7c:40:9c:0e:ab:4d:53:72:60:
                    18:1b:d5:ef:23:cd:7d:42:97:ce:a3:17:28:3c:a2:
                    80:f5:52:a4:1f:c8:ef:ff:9d:37:47:7d:08:1c:e2:
                    ff:2c:cf:b7:2d:9c:37:6a:a3:59:d6:75:b8:bf:c2:
                    48:3e:33:2e:c8:a4:b8:d6:dc:de:e2:9a:30:d6:08:
                    e4:df:ed:14:24:c4:bb:dc:d2:0f:2b:ec:a8:4b:49:
                    e9:0c:ed:f5:10:1d:d3:2f:a2:7b:76:2b:fc:7e:f4:
                    4c:a8:16:4a:69:76:0e:34:6f:10:32:7b:78:0b:c2:
                    b3:91:8b:48:a2:76:5f:64:81:91:90:f5:30:30:3a:
                    51:07:12:5b:a7:22:78:37:ad:00:f7:15:c3:2b:40:
                    4d:31:fc:94:c9:4c:ee:17:38:2c:45:38:b8:60:3a:
                    86:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F3:5D:AA:1E:D1:9B:87:9B:CB:28:DE:84:58:5C:7C:1C:B0:B3:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/220424c3-c5db-3d2c-a100-5eb2b338905a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:56:00:ab:d2:81:ed:fa:a8:3d:16:8a:9b:b7:75:78:93:0b:
         2e:64:bd:39:97:ca:1d:f1:4b:17:f3:9a:25:6e:d5:91:68:5b:
         c2:3b:da:f8:8a:72:b4:1d:a7:a5:95:76:f8:e1:9c:a0:86:d5:
         7f:b0:80:1d:d6:66:08:f8:d5:ad:0b:53:eb:79:9f:b8:c4:dd:
         86:00:0d:91:d6:aa:70:6f:ce:97:43:71:1c:e4:1a:23:d3:62:
         41:ed:5a:37:4f:cc:dd:8b:f9:36:62:4e:a2:f8:2a:92:84:ce:
         05:83:d6:59:45:f4:89:05:03:e9:ef:1a:e2:25:0d:79:6b:62:
         51:48:8c:09:15:40:b6:d9:1d:df:a9:cd:d1:a4:da:38:76:78:
         a3:3b:ef:7e:b5:00:93:dc:18:67:18:e7:4a:05:b9:fa:f6:e2:
         e2:7b:22:7d:7d:0a:37:a0:38:c3:50:71:3a:fd:36:01:81:0f:
         aa:3d:ba:8b:37:74:be:5f:9f:a4:6c:cb:a8:79:42:d7:30:e1:
         5b:56:c0:2e:97:7c:b1:e4:1b:f4:0f:98:64:ea:11:18:22:0a:
         7a:09:e7:99:0f:7a:f7:9d:27:27:2b:b4:55:fd:a6:de:be:ec:
         08:1c:15:0f:f6:f4:d4:d8:62:be:85:d4:c3:d5:b3:07:15:cd:
         0e:29:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----