Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/417d2973-9362-3112-938c-931be8162ebc.roa
File:                     417d2973-9362-3112-938c-931be8162ebc.roa (raw, json)
Hash identifier:          veAxg4vrY2hA70is55LmUPfvSwy66+hPAf48x1ko7J8=
Subject key identifier:   E9:C2:84:2B:05:D1:26:91:E6:C0:B1:07:87:F8:27:D2:8F:BB:C5:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005F3EE9DDF59F26849840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/417d2973-9362-3112-938c-931be8162ebc.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     396554
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5f:3e:e9:dd:f5:9f:26:84:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=3ef66bd7-9ca0-47f8-b6db-e4cdc9d3924b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:f4:e1:6e:2a:88:03:54:bb:3b:03:2c:70:
                    f6:48:57:94:f0:e3:4f:14:9f:8b:db:28:e9:fc:43:
                    ad:d9:b6:7e:9d:c3:9e:a4:82:d3:7e:81:b0:ad:34:
                    45:fa:a9:6c:72:0f:de:8a:cf:c9:ff:68:f3:a8:e1:
                    6f:d4:74:f3:a3:b3:cc:01:41:d6:47:de:39:2f:8b:
                    fc:d7:92:bd:c8:36:51:c7:fc:a8:6d:eb:d8:e5:3a:
                    6e:c8:23:5c:f4:47:d6:7a:27:66:1a:84:9c:1b:4d:
                    dd:e0:ca:a8:17:66:58:e2:a7:47:a0:44:4f:90:dc:
                    95:5e:d1:ea:72:bf:af:a3:bc:98:bd:ef:02:3d:db:
                    a6:3e:8e:3d:ef:cb:8e:3e:46:93:b2:c3:a6:0e:6e:
                    b1:53:3f:bf:cd:2c:21:2c:3d:4c:25:12:ea:f6:bf:
                    40:4a:ab:85:53:a4:f2:72:13:f5:3b:16:df:2d:d2:
                    20:dd:f8:38:c9:44:25:df:a6:51:2c:92:78:db:71:
                    4f:0d:fe:7b:23:4f:27:53:4e:cb:9d:9f:ec:73:11:
                    86:f8:50:af:08:4d:f2:32:6f:ee:37:f8:75:df:78:
                    40:19:a3:1f:4d:06:ff:f5:26:b5:5f:87:86:59:40:
                    a8:a2:b4:29:85:97:5a:b4:ba:f5:dd:ad:7c:cd:24:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:84:2B:05:D1:26:91:E6:C0:B1:07:87:F8:27:D2:8F:BB:C5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/417d2973-9362-3112-938c-931be8162ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:7e:6a:30:42:ec:45:af:93:ef:0a:fa:cb:7a:6c:ab:d0:
         8e:66:95:64:7b:ce:2b:84:4b:45:b6:75:05:1e:e5:3c:8f:d0:
         81:f9:38:ac:fb:fe:c2:2e:71:c3:86:97:2a:48:94:f0:9a:3e:
         7d:12:13:36:8b:7f:4e:c1:3f:8a:69:aa:b0:eb:62:c4:87:cc:
         64:f1:64:a9:a3:27:f1:f9:ba:b8:17:b1:2f:00:12:f6:16:28:
         3e:52:c8:4b:3a:e3:2e:48:5e:5b:c7:87:9e:84:d4:b5:b5:82:
         29:46:8f:e4:46:2b:24:a8:34:95:04:3f:ac:e5:f8:b7:22:1f:
         eb:f7:64:aa:6a:ad:05:a7:57:90:ba:0f:d6:a4:a0:58:0e:53:
         62:fc:a4:7c:3c:10:b1:93:b6:06:80:92:d4:39:62:88:c9:ba:
         8a:e6:35:ed:53:e5:3d:3d:fd:0c:29:3c:46:8b:01:79:3f:1f:
         d1:bb:16:70:dd:82:00:16:cb:54:e9:18:27:94:14:87:24:0c:
         1b:b3:3e:02:e5:56:cc:e5:d5:5c:c4:ad:50:3c:04:0d:53:c7:
         43:f3:a8:80:ef:68:18:fd:6d:90:4b:27:23:0e:89:fe:c2:17:
         33:1c:7a:e9:09:02:f2:26:d8:c8:78:be:72:06:2d:51:8d:7f:
         3c:0e:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----