Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
File:                     404cefd8-7ea1-3fe6-b88b-275975481a6d.roa (raw, json)
Hash identifier:          0HS4nadXeLf+90X3/a9wCwgx6SwFAqhskj4Wm+SifIE=
Subject key identifier:   74:24:A5:EF:30:4B:FA:C3:18:D2:C6:21:C1:CC:DE:28:56:87:CA:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BA7AB82E1C437045DE280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa
Signing time:             Wed 11 Dec 2024 15:18:11 +0000
ROA not before:           Wed 11 Dec 2024 15:18:11 +0000
ROA not after:            Tue 11 Mar 2025 14:18:11 +0000
asID:                     36616
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:a7:ab:82:e1:c4:37:04:5d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:11 2024 GMT
            Not After : Mar 11 14:18:11 2025 GMT
        Subject: CN=916a58c8-d77a-4f37-a10a-c3659ac52bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:1f:50:3b:4b:ff:4e:7c:7f:bd:c1:ff:75:
                    cc:8b:06:f4:30:66:61:fa:57:bf:18:05:a7:61:d3:
                    f5:82:77:93:a3:8c:d2:d9:2c:96:1b:13:84:4e:5d:
                    ef:68:f4:0f:cb:46:7b:37:91:dd:65:10:1f:a3:0d:
                    2e:4d:a9:48:39:2c:7d:48:f4:bf:51:8f:f6:b6:8c:
                    0e:32:fd:7b:51:fa:27:c7:77:72:93:87:9e:c6:eb:
                    fc:44:20:33:e9:f4:df:87:31:ea:ff:dc:d0:1e:94:
                    e4:f3:d1:f4:d5:f2:c8:4d:c2:85:c9:17:c2:29:d1:
                    9e:4f:be:36:e8:0f:c1:a2:7d:2d:37:75:11:4d:b5:
                    49:b3:d6:9d:3c:7a:ae:30:da:a0:ab:96:1c:c3:ba:
                    f8:9e:3d:13:21:95:09:68:6f:e6:20:72:4e:3f:72:
                    4d:41:1a:3c:d9:29:48:99:33:f2:13:ac:e6:43:80:
                    d3:52:0d:3d:f4:fc:74:01:df:9c:10:42:5a:06:ef:
                    b8:db:6c:46:7c:e2:18:3f:cf:be:65:65:09:d7:ba:
                    9f:be:65:df:cb:42:94:45:23:f3:1d:b2:18:b3:9a:
                    03:07:8b:b4:3e:07:30:3d:63:ba:ba:9b:c3:4a:83:
                    e9:a8:30:76:11:f6:70:48:76:5e:48:3c:42:70:3d:
                    4b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:24:A5:EF:30:4B:FA:C3:18:D2:C6:21:C1:CC:DE:28:56:87:CA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/404cefd8-7ea1-3fe6-b88b-275975481a6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:40:59:5c:c3:33:b0:6e:95:92:0f:6c:4e:43:cf:0a:87:93:
         35:4c:c9:5b:93:46:1a:0e:cc:33:b8:4a:d0:05:9b:6d:05:41:
         e0:a6:29:1f:a0:92:7a:15:28:f3:d1:33:32:9e:de:82:a9:88:
         53:c0:46:7c:c1:08:65:f3:1c:52:36:92:9e:8b:60:5f:ec:9b:
         b7:90:d4:2d:d9:da:56:c4:9b:e5:9f:45:95:b1:4b:9d:83:12:
         3f:f6:c3:c3:a7:28:1e:8d:c4:18:77:48:91:60:96:e3:75:f6:
         58:37:0a:92:b3:c8:29:a6:71:23:37:bf:55:08:56:98:2a:53:
         79:cf:5b:f7:e0:08:35:b7:79:40:7f:91:3a:cf:8e:3c:2e:1e:
         5c:71:77:49:f0:3e:b2:a4:3d:b6:b9:67:62:2c:20:a0:00:01:
         29:0a:2d:af:36:e1:4d:ea:50:c1:19:6f:95:df:0c:b5:f5:36:
         b1:49:56:cc:fe:d2:f8:95:80:5f:8f:64:f8:d4:a3:72:54:8c:
         60:c5:2f:ff:6d:88:b8:aa:c5:36:27:9b:2d:e9:73:9d:0d:21:
         2f:47:5f:54:d8:3d:f1:28:b8:b7:49:12:1a:ec:8c:a7:ad:31:
         8a:5e:9a:39:a3:fc:3e:61:39:36:1d:37:37:21:54:bc:7e:3c:
         6d:ac:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----