Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa
File:                     43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa (raw, json)
Hash identifier:          SIAMPXhXiGnlPUZUjoWE20oIzbpT69lCn/SV9plOdcQ=
Subject key identifier:   75:08:A7:6C:34:69:30:9E:7B:F6:C9:D9:4C:EE:55:03:2C:5C:D2:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848530B01FD80F375DB904C11C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     20172
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0b:01:fd:80:f3:75:db:90:4c:11:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=fab20985-9f6b-4291-950c-45f590020f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:94:86:10:ea:4e:85:88:b9:b0:00:ed:eb:
                    bf:c9:52:4e:a3:91:9d:19:e6:5f:a9:cf:59:7c:67:
                    11:38:76:79:f2:94:82:78:96:07:50:c8:2a:04:80:
                    1d:ac:01:e6:e5:b3:7a:ae:de:b9:cd:0f:e8:dc:81:
                    e1:d0:d1:d6:52:3a:e5:3c:f2:b1:3f:9f:b1:bd:b9:
                    32:73:40:9f:07:76:e1:cd:76:47:de:97:02:30:13:
                    b7:c1:37:86:92:00:74:ca:8d:af:88:29:b2:3b:c9:
                    e5:fa:fa:ff:b6:96:aa:59:b1:34:c9:d0:89:dc:2e:
                    b1:b1:60:7d:3a:55:83:72:44:dc:d5:d3:40:da:24:
                    7e:77:7d:54:aa:2b:5c:98:24:46:ee:4c:80:01:73:
                    94:3e:55:8a:f6:29:39:2a:83:41:54:f2:30:85:d7:
                    df:83:14:d6:16:ab:cb:07:80:cd:34:77:20:87:b5:
                    8f:87:a4:64:29:6c:aa:42:4c:c3:69:f7:a4:06:e6:
                    75:4c:80:8e:b0:14:27:fb:43:7c:be:de:3b:0e:8a:
                    e3:b4:17:7b:2c:7b:48:f6:dc:a4:cd:ea:12:cf:85:
                    d9:17:d6:28:db:2c:94:37:fb:5d:b8:42:5f:83:82:
                    27:64:79:0a:39:31:30:79:98:be:2e:e9:f3:fc:c8:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:08:A7:6C:34:69:30:9E:7B:F6:C9:D9:4C:EE:55:03:2C:5C:D2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43f53efc-515e-3e0e-aea2-dbf0a66c269b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:4c:cb:b8:ae:6f:7c:75:c4:91:71:2a:98:db:a2:aa:43:
         66:d4:75:51:41:5b:92:6f:93:85:7a:c5:fa:f4:ea:95:12:e5:
         b9:2a:00:29:26:d0:49:63:3b:2c:24:07:2c:88:0e:32:d0:f5:
         40:ba:32:61:46:72:7e:68:54:b7:82:ea:d6:34:f4:e8:c1:82:
         03:d1:94:7f:9f:ef:6c:fb:13:4b:b1:a0:e5:07:c6:36:6a:5b:
         64:9b:c1:c6:84:59:19:bb:54:6d:4b:a7:75:ac:a6:fd:ff:64:
         5d:34:30:28:6f:47:a5:d4:ff:52:f3:76:3f:1b:e4:9d:2f:e4:
         6f:b7:ee:b4:cd:b9:3a:3a:29:e4:27:35:18:1c:62:52:50:94:
         9b:82:db:c2:67:a8:36:6e:46:11:2c:fb:8f:2a:4f:97:e8:bb:
         8c:45:ef:f9:53:92:e4:a6:07:b8:31:72:bc:d8:77:9b:d0:ab:
         68:b0:8a:35:d0:c5:b0:11:2c:ff:71:b4:d8:1e:ab:da:cd:99:
         63:08:82:d0:f5:50:9b:27:2a:75:24:f2:bd:75:2a:44:cd:84:
         1c:f2:bb:33:c7:4f:21:c6:7d:2e:b5:db:a1:e3:ae:d4:59:8e:
         9e:16:21:5a:6f:2a:da:77:bb:64:9d:c1:f7:c5:b2:32:1d:84:
         f9:da:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----