Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa
File:                     3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa (raw, json)
Hash identifier:          n5ZAFdq/L+ePP2hiyKiDRGeF9O7+l9DOOR0APND+ffU=
Subject key identifier:   11:D2:7D:64:65:81:46:B1:AF:0A:B0:51:11:2E:53:38:4B:03:99:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B99B572D1929A64153B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa
Signing time:             Wed 11 Dec 2024 15:18:04 +0000
ROA not before:           Wed 11 Dec 2024 15:18:04 +0000
ROA not after:            Tue 11 Mar 2025 14:18:04 +0000
asID:                     397194
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:99:b5:72:d1:92:9a:64:15:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:04 2024 GMT
            Not After : Mar 11 14:18:04 2025 GMT
        Subject: CN=84d01744-d3e7-452f-842d-d210bc465406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:17:e6:56:4c:82:d3:77:b9:5b:5d:37:02:
                    9c:41:f2:69:bc:cf:c1:aa:35:68:b6:4d:ad:af:41:
                    fe:2f:99:54:1a:26:76:9e:1e:37:09:e3:fb:37:a8:
                    c2:47:a2:1a:f3:6f:c2:b0:68:37:48:43:28:f8:ce:
                    35:7f:b6:5e:80:b4:22:7f:0d:0c:a1:bf:bb:9f:ad:
                    53:ae:8e:6f:ed:84:74:39:4e:32:88:de:4e:c2:db:
                    7e:cd:b3:9f:b6:4c:8a:50:15:d6:5f:58:bc:d4:a0:
                    c1:66:65:60:11:f6:00:42:4a:24:f9:a4:ff:9e:5c:
                    0a:cb:8d:d9:c0:40:39:70:31:cb:b7:68:71:a3:40:
                    3e:00:6a:df:a8:60:47:23:bd:22:0b:9c:68:88:f9:
                    77:98:3b:32:fe:6c:48:e2:8a:a5:e0:1b:07:de:87:
                    0a:7b:78:fc:81:f8:49:72:1b:2e:9f:48:8f:08:3c:
                    7f:ad:b3:55:fa:5f:ae:b8:d3:91:92:e6:f7:47:c7:
                    72:d0:a2:c2:0f:87:4b:e4:9d:44:a7:20:e5:17:6a:
                    69:08:89:78:de:0e:5e:f7:9a:e1:c1:3a:ab:6f:06:
                    65:07:18:72:f8:80:88:50:33:04:d3:33:7e:dc:70:
                    28:06:8d:05:20:e4:9d:53:16:7d:9a:24:a9:d2:cc:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D2:7D:64:65:81:46:B1:AF:0A:B0:51:11:2E:53:38:4B:03:99:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:10:31:3a:20:f7:9b:d5:9c:2b:47:44:99:50:18:4a:94:0b:
         16:f8:84:90:9f:16:23:6e:f6:97:7b:15:75:f6:6e:a2:5f:2a:
         ff:73:f2:1b:50:5e:ef:38:c0:01:2d:c9:8c:d0:45:4a:bc:1b:
         51:19:75:bd:99:29:3e:8f:ed:ba:88:e7:3d:9f:71:20:44:94:
         ef:4b:5e:59:1d:cb:e3:0e:cc:6c:21:c8:f8:f6:0b:6e:c2:3e:
         3a:67:d2:d4:31:15:65:bd:83:85:41:9e:03:8a:1f:45:c1:89:
         8a:c8:47:46:f5:cc:4f:2e:0c:58:19:fb:94:28:d6:98:b3:a5:
         01:7b:d6:35:e2:42:13:02:42:02:20:d9:27:7c:ca:1f:de:9b:
         f9:d8:34:8d:ae:95:fc:03:a0:20:bf:9d:f7:c8:0c:89:fa:ee:
         e1:4b:56:bd:d7:93:8e:14:3b:6c:a6:51:87:c9:93:33:e1:44:
         c0:13:51:e8:7f:51:0e:da:f2:25:b4:71:60:6b:0a:86:7a:e7:
         66:06:68:e8:5d:e1:12:11:8a:31:a4:ca:81:6a:ea:75:59:4e:
         3d:3b:e9:8a:16:50:f1:d3:7b:87:e8:9b:64:f0:a4:2a:09:1a:
         41:b0:7e:62:43:87:4a:bf:d1:7a:f4:2f:4a:cb:db:89:b1:81:
         0a:12:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----