Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3528bc16-3253-3c9e-abae-aa52ad8149d4.roa
File:                     3528bc16-3253-3c9e-abae-aa52ad8149d4.roa (raw, json)
Hash identifier:          OMwtAAoEje+44kq7qlDfPI/1vWPvIw74t5Ty36mpQG0=
Subject key identifier:   5A:7C:56:14:02:B7:44:52:8B:C1:2F:D6:0A:33:15:15:73:13:1C:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530AFE765C8A2A9C7EE99CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3528bc16-3253-3c9e-abae-aa52ad8149d4.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     19836
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:fe:76:5c:8a:2a:9c:7e:e9:9c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=f7e4ccfc-def1-4677-bba6-652522988596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:b7:33:7a:c8:9d:24:28:48:b8:ff:52:75:
                    b6:8f:89:96:b1:52:f8:59:e9:98:a1:00:d4:31:54:
                    9b:fe:4d:3e:ee:bd:fa:06:4a:9c:ea:4e:9c:eb:23:
                    63:58:a8:cf:a4:9f:5e:d5:b6:c3:9c:73:70:96:fb:
                    b6:ed:0d:92:06:86:b2:65:98:0a:44:24:a5:6d:eb:
                    49:3e:1e:9c:19:4b:b2:84:3f:a9:a9:0b:f9:1c:3c:
                    0e:0d:7c:2f:74:6b:78:aa:9b:34:db:21:70:fa:85:
                    9a:19:96:46:06:8c:da:db:36:34:13:4e:cf:08:25:
                    ab:42:d9:99:ec:a3:60:e2:51:ab:76:ed:89:06:af:
                    9d:10:12:c4:cd:c5:bd:d6:92:92:da:1f:b5:f4:4c:
                    f4:b0:e0:12:4f:da:16:e8:f3:ae:ae:fe:21:ae:2d:
                    37:df:4d:38:0d:06:d0:2e:b2:a6:5e:85:8f:02:07:
                    32:30:b0:82:d8:1e:ff:88:80:1b:b6:ed:07:ff:e8:
                    53:0b:d8:6d:f3:9d:09:c3:7f:ea:71:13:82:61:dc:
                    f0:88:13:4d:d0:41:bb:b5:3f:21:2c:d3:f6:52:97:
                    25:a9:9e:8a:13:44:de:d4:7e:53:e2:a9:25:a0:da:
                    5f:5e:78:a9:91:c3:55:27:0b:4d:00:0f:84:17:a3:
                    20:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:56:14:02:B7:44:52:8B:C1:2F:D6:0A:33:15:15:73:13:1C:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3528bc16-3253-3c9e-abae-aa52ad8149d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f0:42:78:18:27:7a:69:1d:3b:aa:0b:70:21:a6:6b:92:4b:
         51:b0:d5:61:7d:57:f1:e7:8d:a5:d8:da:b9:b5:0c:14:c3:9f:
         b7:70:93:18:d7:97:65:90:17:fb:bc:96:28:86:fc:61:43:07:
         6e:c1:22:54:c2:d1:7a:b5:57:37:63:e5:74:a7:41:35:18:f4:
         27:ed:1b:bc:d3:97:a7:da:a7:16:ab:58:a4:b2:db:9e:21:ee:
         5a:cd:b6:db:1e:95:13:66:d4:77:2a:8e:f4:d8:89:0f:40:29:
         41:85:59:95:43:e6:0e:5f:2d:96:7b:94:6d:b4:68:5e:c4:22:
         fa:e5:72:24:4c:82:f2:87:1f:62:44:4b:ec:22:99:fd:94:5c:
         ca:5f:ad:46:ef:67:79:b2:c0:18:11:06:57:87:8b:c2:ea:9f:
         00:4f:ce:18:1e:65:2c:90:9e:40:9b:37:de:10:68:ea:70:23:
         f4:60:eb:37:1f:c3:a5:e7:0a:65:67:f3:b8:84:e9:07:da:b1:
         de:95:03:5c:a2:ff:4c:d8:a5:39:d2:89:26:24:cf:57:0b:d9:
         82:0c:29:15:f8:f5:4c:82:58:aa:f4:02:21:52:22:30:46:bb:
         63:72:5e:27:b2:aa:91:59:10:92:41:b5:a3:28:8d:e5:b2:5c:
         6b:7b:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----