Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa
File:                     42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa (raw, json)
Hash identifier:          1X6GcaHjZ2wXg/BMnyAni/H8dDiZf5k1aPPyBZGT654=
Subject key identifier:   E7:2B:47:84:9B:2F:19:48:B6:96:8F:F5:EA:A2:55:66:B8:CC:E9:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430A3941073C113EE059C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa
Signing time:             Thu 19 Dec 2024 13:45:19 +0000
ROA not before:           Thu 19 Dec 2024 13:45:19 +0000
ROA not after:            Wed 19 Mar 2025 12:45:19 +0000
asID:                     397210
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:0a:39:41:07:3c:11:3e:e0:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:19 2024 GMT
            Not After : Mar 19 12:45:19 2025 GMT
        Subject: CN=a67c053c-6bce-40f5-ac3e-e2958918dad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:3c:e6:3a:ff:b6:89:ad:c1:e9:e9:38:f9:
                    d6:06:9e:de:d9:e3:26:b7:73:a5:8d:4b:7d:0a:b7:
                    4f:b2:f1:43:75:6a:41:83:f1:27:11:f5:17:73:ec:
                    cf:63:78:e9:06:7e:21:df:8f:1b:d4:7e:e1:4b:26:
                    9b:83:37:9b:a3:67:d1:65:93:38:b5:fb:10:ff:32:
                    55:25:03:3b:5a:1d:e1:49:b1:52:e6:80:f0:bc:f0:
                    3c:e6:45:ea:14:ca:d7:71:04:41:c1:d8:12:ae:95:
                    5a:0f:64:de:b7:ce:c2:23:e1:57:6b:0b:46:64:45:
                    0e:82:4e:6e:ae:b1:3f:94:b3:b4:51:64:f3:da:f5:
                    a4:a3:a3:36:82:55:d0:aa:dc:af:8e:73:4c:e5:11:
                    a6:12:0a:bf:69:e1:f1:af:db:c3:42:48:b7:fa:b8:
                    ff:29:e1:18:39:3d:39:9a:d0:e9:db:b2:62:fc:94:
                    92:10:5d:86:c8:54:50:eb:33:12:8b:fd:96:8a:ca:
                    b6:1f:84:65:d8:09:e1:98:30:7b:22:12:5f:42:35:
                    62:28:96:48:aa:02:46:92:e5:4b:37:df:b8:ff:93:
                    20:0a:90:f2:46:22:8f:88:c2:9d:13:10:83:0d:1b:
                    25:f5:96:a6:51:e7:20:5a:fa:22:b0:b4:8f:80:17:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2B:47:84:9B:2F:19:48:B6:96:8F:F5:EA:A2:55:66:B8:CC:E9:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42935a61-3c34-37c7-a4a5-3a41bf2169b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:91:d4:8e:38:32:f1:5f:61:83:ae:4e:2f:63:d7:c0:6d:
         98:59:19:1f:6b:2c:7c:45:25:2e:78:88:b1:93:fa:7b:69:31:
         49:c6:30:0a:de:ac:b7:2d:05:74:ec:fd:25:80:71:17:2b:cf:
         48:f7:dc:8a:9f:eb:57:d3:9b:f6:3c:59:c5:8d:b7:68:d7:1c:
         0b:22:54:24:cc:bf:12:33:c5:d2:e5:b6:d5:ac:52:88:b7:ad:
         96:6f:cb:47:54:6c:56:6c:0f:19:3c:07:8e:70:3e:bb:99:a0:
         d2:73:9c:28:7d:af:b7:26:b7:f5:d2:8f:35:be:0c:2c:ee:5c:
         de:61:70:39:75:2d:74:0a:30:0c:b9:97:7d:fd:4c:c2:ec:d0:
         ca:af:91:f3:38:14:16:b0:77:3c:6f:78:83:7e:b0:85:43:20:
         41:35:2e:30:20:fc:e0:5f:17:e6:1d:5d:1a:be:be:fe:e9:a6:
         bb:0a:53:f6:4a:a3:35:bd:a1:8d:ba:f4:f1:e4:f1:06:bb:ed:
         a9:dd:2f:97:ca:ea:b5:17:41:30:83:bc:90:b5:66:d6:6d:b5:
         c5:08:60:7b:28:35:41:57:52:b6:77:c7:65:de:28:2b:a0:1d:
         d1:2a:a7:51:ea:d3:53:9d:17:99:17:65:a2:93:d2:7e:95:17:
         3f:d6:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----