Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa
File:                     3008bdb1-9f79-34fc-88d6-2982a3603d83.roa (raw, json)
Hash identifier:          PFzqosV2CSsi2pbmYpUoFNBKaZ6vwJ849oRYaXn55fc=
Subject key identifier:   DF:32:B0:93:84:50:7F:91:B3:53:89:71:C1:D2:0C:C6:F7:B5:BB:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242EF16CC7649E6FD40E700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa
Signing time:             Thu 19 Dec 2024 13:45:06 +0000
ROA not before:           Thu 19 Dec 2024 13:45:06 +0000
ROA not after:            Wed 19 Mar 2025 12:45:06 +0000
asID:                     397205
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:ef:16:cc:76:49:e6:fd:40:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:06 2024 GMT
            Not After : Mar 19 12:45:06 2025 GMT
        Subject: CN=f5034fbd-7ad9-44f0-a96c-fd15e59b1979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:55:5d:05:3c:09:88:6b:7d:a7:5d:38:6a:
                    f1:bd:8d:3f:17:f4:12:4e:02:ef:45:76:39:80:7d:
                    05:93:79:fe:8e:56:60:13:78:1b:f7:a5:a5:2a:3a:
                    16:06:84:38:22:38:e9:00:55:9b:40:0a:09:e8:df:
                    4a:48:e6:c1:df:9b:3c:e1:1c:72:aa:75:45:cd:8c:
                    e3:dc:00:30:03:ff:ae:89:84:0e:ba:0d:ae:f5:38:
                    ac:ab:fb:a8:37:7a:fb:80:54:33:73:8b:70:33:a9:
                    cb:7a:15:b3:d7:af:e3:30:50:8a:5f:14:60:f5:b7:
                    b5:04:5f:8b:e2:e6:8a:9c:0a:d6:f8:52:35:64:9c:
                    d7:9b:d3:f7:d7:46:86:a1:08:0b:85:03:45:1e:1e:
                    42:d5:b0:10:e8:6b:16:09:95:4b:b7:25:63:95:0c:
                    ac:89:e4:20:11:53:37:dd:05:b0:2b:b4:c6:63:ad:
                    b0:73:db:41:80:34:07:00:79:6b:d2:3f:6d:bf:6a:
                    b3:0e:9a:b4:5e:bd:fd:23:79:b7:e2:73:9e:30:35:
                    b9:07:d6:1d:e7:41:ac:a1:d4:d9:9a:63:6e:e2:25:
                    9d:5e:38:cb:0c:ed:16:6d:e4:8c:15:c2:f1:d9:7f:
                    59:69:f8:f1:4a:9c:fa:20:d9:2c:1a:4c:f2:a7:0f:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:32:B0:93:84:50:7F:91:B3:53:89:71:C1:D2:0C:C6:F7:B5:BB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3008bdb1-9f79-34fc-88d6-2982a3603d83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:1f:ea:69:eb:8b:ec:43:5e:96:8d:a0:7d:e2:fe:9f:50:
         05:f8:8e:8e:3c:9c:37:d2:f4:1d:04:5d:fd:5a:ba:8f:41:46:
         c8:4e:b8:c2:36:c4:a0:bb:92:b4:a0:a2:c6:46:ab:ed:02:e3:
         8c:1e:f7:6e:29:6e:d8:d9:85:e5:31:2a:a7:fa:a1:51:c5:a1:
         fb:1f:30:c4:82:91:7f:2b:d9:c3:60:78:a4:80:af:4c:0c:92:
         b9:1c:eb:21:e5:ad:20:0a:d3:6a:c5:83:00:ad:1a:c4:cd:ec:
         6c:07:27:6e:ab:5c:08:2f:2c:8d:35:ca:0f:ea:d2:6f:c2:75:
         10:23:61:53:51:14:7b:66:a3:f0:99:bc:e8:48:ab:77:0b:4f:
         18:bd:f7:8a:73:38:dc:24:bc:a5:3a:e2:3b:72:d7:e0:86:94:
         52:19:42:20:8e:e5:e8:b2:1d:6c:f5:dc:02:0a:b9:25:8a:d7:
         6d:13:a5:5d:12:66:d3:2c:7b:4b:2f:a8:65:d2:8e:fb:a6:bc:
         7f:2a:14:1b:b2:67:b8:74:f9:ab:ec:6c:8d:ee:e3:74:25:e6:
         de:1e:41:b4:e1:08:3b:1f:b8:e4:3f:b4:b8:9d:ce:de:9c:4a:
         c9:0c:59:a8:cb:a9:02:44:1d:05:99:8b:f7:c5:30:17:b9:f8:
         f1:09:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----