Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
File:                     43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json)
Hash identifier:          Ad8I/xwRmFeU4m8NEN9cBOLmB6V5pdUoydelJncj9D0=
Subject key identifier:   A9:11:50:27:33:5D:87:8E:7A:17:02:0D:6B:04:B0:AB:56:F1:67:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E088593B1806534BBDD9E700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa
Signing time:             Thu 14 Nov 2024 13:35:45 +0000
ROA not before:           Thu 14 Nov 2024 13:35:45 +0000
ROA not after:            Wed 12 Feb 2025 13:35:45 +0000
asID:                     397203
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:59:3b:18:06:53:4b:bd:d9:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:45 2024 GMT
            Not After : Feb 12 13:35:45 2025 GMT
        Subject: CN=216f9687-dbff-482d-8afb-58105353bce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:c0:8e:55:d2:62:ee:b2:81:27:77:c8:c0:
                    38:2c:b8:d5:cc:d3:fa:51:c0:31:96:b6:0d:73:20:
                    ef:b0:d7:ef:be:0b:cf:46:c1:0d:12:41:4b:7b:90:
                    40:33:3b:40:f3:ae:cb:b1:d8:cf:bb:7f:da:24:9a:
                    59:21:d9:f2:1d:0d:0c:b5:7d:ce:42:0d:6c:57:f1:
                    9b:78:29:84:2f:48:03:81:67:9b:db:f3:b4:f1:0c:
                    81:c6:5a:c4:10:d9:31:52:55:ff:f8:07:c3:84:96:
                    3b:79:8d:8d:f3:e9:9c:a1:7d:b6:d4:55:f7:21:bd:
                    87:51:91:d9:7c:3c:18:14:55:fc:94:88:7f:f4:8f:
                    3f:35:53:c9:f7:29:52:1b:7e:bc:1c:e3:0d:bc:52:
                    70:6b:2b:3c:53:08:18:5b:d6:48:29:19:9e:d2:2e:
                    ff:3d:31:3b:20:2f:52:c1:0c:18:96:3c:0a:2a:6e:
                    d6:37:3b:f2:77:9c:85:7c:6e:80:60:73:40:94:fb:
                    ac:83:bc:ec:66:33:63:55:30:4f:f0:a9:16:07:91:
                    17:8c:c3:e5:81:78:42:72:0d:8e:5a:8d:ac:0e:46:
                    84:23:d1:d9:a8:f5:27:f1:05:6f:aa:c4:7e:e3:63:
                    b5:0f:18:d5:75:98:4b:c7:ad:5f:55:98:db:8c:5b:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:11:50:27:33:5D:87:8E:7A:17:02:0D:6B:04:B0:AB:56:F1:67:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ba:cf:90:f9:36:5d:1a:94:07:48:a5:55:f9:01:ae:fe:cf:
         0a:f7:c7:e6:16:cd:52:4c:79:a4:63:2c:c0:c3:99:e8:60:95:
         d3:43:e6:88:4e:32:83:3e:4b:cc:fb:76:11:3e:bc:c9:1d:cc:
         b3:4d:11:21:08:a9:f9:91:96:f1:49:0b:1c:5b:be:c8:92:f6:
         9d:9b:3c:f0:fd:83:cf:b4:8f:69:e8:2e:da:e3:f3:0d:66:40:
         0b:cc:1c:7e:7f:53:88:a7:4d:25:46:5c:e5:01:3a:c6:70:5a:
         53:20:ec:29:07:52:c2:c4:73:cd:2c:ff:51:5e:e2:4f:8f:d4:
         b2:d1:d3:22:fa:c6:aa:7d:86:1b:5d:1f:6f:93:72:59:88:1d:
         48:dd:a1:df:01:b4:e1:ef:5e:4a:85:ee:32:ab:49:35:8a:f3:
         f2:44:65:2f:1e:e8:e5:91:58:b3:93:e1:71:81:3e:b2:6e:1f:
         8e:fb:bf:b4:1c:ef:74:d7:b1:15:f9:0e:9c:a9:9b:a6:8d:59:
         a2:da:1a:85:77:e8:38:21:cf:fc:53:5f:49:6a:3a:9e:b3:20:
         67:f9:7e:cb:ea:5d:83:cd:d2:fa:40:73:2c:e7:2a:f0:41:f5:
         74:32:e6:49:ed:ea:d0:ac:96:31:19:89:da:09:1c:17:0d:41:
         57:7c:e6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----