Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397024ef-0405-3c32-9613-6a5b37c11f6f.roa
File:                     397024ef-0405-3c32-9613-6a5b37c11f6f.roa (raw, json)
Hash identifier:          8sS/dXZmEDu47pCsMByPG3myPwuYKsBFhYLGu8SVRWk=
Subject key identifier:   E7:05:41:47:83:AF:0F:D5:0F:11:67:2E:22:D7:73:29:B8:DE:88:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BAB943A44F63CCE305000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397024ef-0405-3c32-9613-6a5b37c11f6f.roa
Signing time:             Wed 11 Dec 2024 15:18:12 +0000
ROA not before:           Wed 11 Dec 2024 15:18:12 +0000
ROA not after:            Tue 11 Mar 2025 14:18:12 +0000
asID:                     396565
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:ab:94:3a:44:f6:3c:ce:30:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:12 2024 GMT
            Not After : Mar 11 14:18:12 2025 GMT
        Subject: CN=fbf7172b-55bb-4a6f-9df6-f24b20bd3cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:4d:6b:e9:55:35:38:50:a9:31:5d:fa:85:
                    21:6f:23:a0:56:cf:ff:10:6e:a6:12:77:46:63:0f:
                    a3:70:9c:c7:f5:34:10:77:2c:1b:e1:23:9a:86:45:
                    9e:f3:aa:a9:fd:cc:2c:f0:ed:d0:02:3a:2e:d7:1c:
                    5b:23:a7:e8:df:fd:8b:65:c4:89:fc:e4:db:31:97:
                    f3:01:db:0c:f2:94:a6:e0:d1:7f:69:7f:0e:61:37:
                    ad:a1:4a:85:e0:3e:bf:0e:20:ed:6c:95:78:f6:81:
                    a9:09:1a:af:aa:41:21:2e:46:99:35:49:40:87:bd:
                    f7:1c:a6:c6:6b:db:20:09:e5:c3:26:6f:b7:8d:af:
                    47:4f:9d:23:2e:eb:54:45:5e:a7:0e:01:f2:97:9b:
                    d9:dc:77:cf:8f:45:b1:67:6b:d4:78:3c:ea:0b:ef:
                    40:23:65:ae:7d:a2:2a:bd:db:30:bc:a5:a1:45:5e:
                    c5:92:95:24:ec:4f:a1:05:2c:7a:38:b2:2a:7d:27:
                    59:ee:f1:80:d4:45:b0:97:b5:6b:84:c6:1e:da:25:
                    ee:e2:43:50:96:64:31:07:28:ab:59:bf:c0:ea:01:
                    72:4e:3f:b8:42:97:30:0f:6b:96:df:9d:e7:37:9e:
                    4e:2c:40:ad:3e:0d:d9:fb:48:96:3b:36:72:58:74:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:05:41:47:83:AF:0F:D5:0F:11:67:2E:22:D7:73:29:B8:DE:88:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/397024ef-0405-3c32-9613-6a5b37c11f6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:98:9a:8f:66:e6:8b:15:b7:9c:ee:0c:7c:3c:14:ff:2d:e5:
         97:a6:68:41:d4:d6:71:05:66:4f:0e:71:8d:73:02:5d:4b:c6:
         2f:04:d1:46:99:07:b1:bd:8f:d5:b4:ee:38:3c:7d:4f:7b:f4:
         9f:05:8c:f8:99:99:fc:84:57:b1:c9:3f:0c:f3:40:c1:01:d4:
         ad:a9:0d:db:0a:8b:4e:3c:17:61:81:fe:4c:76:54:03:21:7b:
         91:e0:cc:9c:1f:63:c7:1b:10:12:b8:aa:ea:30:94:08:88:65:
         ad:88:bc:e6:45:d3:5b:ea:1f:63:1c:f5:2d:fd:e3:69:e3:5e:
         ab:26:f6:e1:49:e9:f0:af:08:45:84:85:94:2d:fa:a6:0a:38:
         53:d3:96:b9:d0:ce:3c:61:4f:95:01:54:d8:49:81:47:c3:6c:
         35:61:7a:1d:41:a7:17:ec:4f:47:9f:63:52:39:1c:86:36:d4:
         e3:4f:d3:b0:a4:b0:1e:42:90:99:c6:d6:cd:a6:02:db:85:7b:
         29:1d:3b:86:76:2c:3a:d0:da:f5:71:13:f1:95:7c:b1:55:ef:
         4e:48:4a:46:72:10:bc:6b:76:56:a4:17:69:bf:a0:a3:d4:fa:
         ce:33:01:f5:80:4c:f1:2b:db:d4:fc:59:77:e4:16:52:9e:ee:
         0e:49:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----