Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3997ba42-222f-3081-a641-6329046dd5b2.roa
File:                     3997ba42-222f-3081-a641-6329046dd5b2.roa (raw, json)
Hash identifier:          TDDbSkkfQOG0z1FX7NlUcNtxGgDyRmdAh7LVEUWoSHE=
Subject key identifier:   A5:8D:13:92:4B:19:75:1C:4E:74:BF:18:2D:90:D1:74:8D:17:C7:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E48D8C4F8E310CA067700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3997ba42-222f-3081-a641-6329046dd5b2.roa
Signing time:             Tue 21 Jan 2025 13:34:35 +0000
ROA not before:           Tue 21 Jan 2025 13:34:35 +0000
ROA not after:            Mon 21 Apr 2025 12:34:35 +0000
asID:                     396570
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:48:d8:c4:f8:e3:10:ca:06:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:35 2025 GMT
            Not After : Apr 21 12:34:35 2025 GMT
        Subject: CN=e5db3fdb-1e06-4d06-9220-59dc39fc532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:de:2a:ce:67:7d:1c:bb:13:09:a8:70:06:84:
                    cb:a1:15:3c:6d:99:68:36:2d:04:26:94:a8:70:dc:
                    d0:e2:6a:88:ea:36:2e:75:ba:de:68:e2:56:bc:61:
                    82:83:3c:44:68:18:e7:e2:53:a6:d9:3b:36:b6:ee:
                    8b:38:bb:93:f6:06:f9:1a:30:67:72:c6:c9:22:4c:
                    97:9d:2d:47:49:6f:e0:c4:73:73:20:fb:83:19:23:
                    59:cf:07:46:b2:08:1f:b8:34:63:51:ed:79:25:18:
                    ae:21:56:37:36:c4:78:59:62:e8:fc:ee:d2:eb:1d:
                    56:a6:d7:09:9c:63:f3:ae:5f:24:5f:42:2a:a1:56:
                    8d:59:f4:d7:76:31:33:fc:f7:ba:2b:42:48:34:82:
                    a7:7c:bc:66:8b:39:b5:2f:a6:e7:bf:bb:27:f7:d4:
                    e9:79:e4:b4:5e:99:db:d4:9b:83:c8:dc:a8:cc:cc:
                    42:e3:2e:cb:df:17:dd:ae:2d:8e:a9:e1:24:a3:e5:
                    f6:88:9a:88:0d:c6:de:9f:83:18:bb:cf:05:e6:31:
                    34:03:73:7c:11:92:8a:9c:a6:f8:d9:af:de:55:8b:
                    6b:ee:da:d8:02:80:79:9c:20:80:6f:4a:10:81:a5:
                    ab:f9:2a:77:54:2e:30:c7:78:28:9f:25:c9:ae:2a:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8D:13:92:4B:19:75:1C:4E:74:BF:18:2D:90:D1:74:8D:17:C7:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3997ba42-222f-3081-a641-6329046dd5b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:43:33:99:2d:9d:79:07:d2:d3:b0:ff:6d:02:68:14:e8:ae:
         12:96:03:cf:f4:41:d2:bc:b7:0d:0a:e7:c7:4a:b0:42:fe:6f:
         94:36:db:0d:b2:6d:09:39:dd:b9:4e:90:1c:88:b6:5c:87:23:
         bb:1e:18:ee:8e:e4:1e:c9:59:0a:97:a9:ba:6d:35:67:97:36:
         fd:6f:a8:c1:18:01:77:8a:a9:61:f3:58:69:a9:1c:a4:d7:d5:
         35:52:2e:87:de:53:1e:55:b1:0c:e0:98:22:21:6d:c2:58:75:
         95:87:90:53:87:94:4c:44:ad:22:a8:48:d7:46:c2:6b:91:f5:
         b7:22:1c:a2:ea:0c:2b:d9:df:9b:42:71:a1:eb:3e:41:67:86:
         4e:ab:5c:e0:d1:2b:c4:b3:e9:be:cb:dc:09:5b:10:ea:94:d2:
         ee:47:68:7f:9a:66:ea:32:e0:6d:7a:54:b9:01:c3:62:e2:a5:
         ab:ec:82:aa:78:d9:c2:17:f6:e8:87:c0:64:bf:e6:f7:22:24:
         e0:6d:d6:69:f6:9c:e9:77:e4:e9:8b:f4:fb:4a:1a:b8:44:df:
         f9:0d:4c:62:96:99:96:e9:ad:76:50:3b:d1:d2:5b:c4:36:9c:
         8f:ec:36:19:69:8d:72:4e:24:62:93:c4:57:58:7f:95:0b:69:
         43:0a:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----