Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa
File:                     4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa (raw, json)
Hash identifier:          YWX8PzpMTIJfegNyEtR9eRhmwxdpzhAnXUnDHbkxKi8=
Subject key identifier:   3F:97:4C:92:03:DC:FD:F7:AE:00:B5:9F:71:78:A5:20:7F:21:42:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F51829DD7AAD7DCD67C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa
Signing time:             Thu 19 Dec 2024 13:45:09 +0000
ROA not before:           Thu 19 Dec 2024 13:45:09 +0000
ROA not after:            Wed 19 Mar 2025 12:45:09 +0000
asID:                     397197
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f5:18:29:dd:7a:ad:7d:cd:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:09 2024 GMT
            Not After : Mar 19 12:45:09 2025 GMT
        Subject: CN=2c38c10b-e9d3-4a94-92e9-ce6680bcfbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:77:54:ae:ad:9b:5d:88:dd:03:16:8f:38:7e:
                    69:9e:b5:c4:7f:b8:59:83:5f:36:e6:70:f2:2b:cc:
                    de:36:ba:b0:7d:36:96:36:ad:6a:f8:12:9e:0b:55:
                    1f:72:69:2b:a4:f5:00:e7:fa:20:3d:9a:d6:85:2a:
                    2a:be:18:36:1b:a1:4f:1b:8a:96:ec:24:4b:75:0a:
                    bf:39:7b:58:c7:9e:10:4b:a4:68:79:2a:ef:ea:11:
                    9e:8e:14:b6:d1:5c:c8:3e:09:5b:44:37:7c:9e:6e:
                    bf:ac:dd:68:81:57:c2:82:23:e9:58:39:59:f9:00:
                    35:8d:f2:73:62:67:10:82:86:05:89:62:d1:e9:e3:
                    c7:23:8c:a7:7c:97:ce:a4:66:28:e1:b5:1d:d4:98:
                    66:58:9f:64:15:57:a4:e7:ec:6f:21:cc:1c:2f:db:
                    9b:38:7a:03:68:f8:f5:74:77:20:da:e1:6a:30:20:
                    52:09:65:de:77:e7:19:24:75:93:b0:45:4e:7b:25:
                    5e:ce:58:05:13:0b:b3:65:41:b5:62:8f:de:55:1d:
                    85:e4:d9:52:1c:fe:09:d4:f9:10:15:3e:93:80:b5:
                    98:71:d9:8b:cb:8c:7c:5d:1f:7d:22:70:e1:82:90:
                    62:7a:6f:67:bd:64:40:c9:ab:2d:a1:b7:14:88:79:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:97:4C:92:03:DC:FD:F7:AE:00:B5:9F:71:78:A5:20:7F:21:42:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e33fc74-1c8b-3952-b46a-86f41a4c3bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:96:3e:17:a6:77:2f:0b:03:58:24:3e:f2:8d:ea:3f:5a:36:
         48:03:e1:72:71:89:31:60:8b:05:8e:59:a3:70:1e:06:12:17:
         77:b5:6c:4e:08:17:b1:d9:5f:23:5f:0a:f0:e4:5c:51:0a:4f:
         cc:aa:57:7c:08:b7:1a:cc:12:ea:bb:50:fc:bf:a7:d2:55:cd:
         70:da:96:1e:a1:ed:81:f2:10:f6:ef:b2:69:80:ea:88:76:8a:
         92:68:ec:d9:31:6a:18:e7:b6:79:09:22:32:fd:f3:c2:ed:6c:
         7e:66:fa:1a:54:84:55:a7:8e:5e:ab:12:7f:30:3c:be:63:af:
         a2:81:82:39:5e:9c:92:66:15:d1:ed:ea:6e:77:19:16:b9:68:
         b1:05:21:b9:24:e8:3c:1b:07:e1:c3:d0:d7:41:5c:01:d1:cf:
         f5:ec:5e:3f:57:67:4f:de:e8:f3:1f:b4:34:07:e0:2b:3d:ac:
         0e:59:68:31:47:cf:18:b2:c9:cf:f6:c9:0a:bd:e1:5c:34:a0:
         6d:0d:57:1f:d2:8b:26:7b:68:7e:09:51:27:ee:67:51:fd:6a:
         20:5a:ab:5a:d4:3a:79:aa:f6:32:2f:2f:6c:23:86:a7:d1:de:
         79:65:ee:2a:80:c8:5e:6b:88:3f:1d:05:dd:90:2c:cc:6a:1f:
         f7:be:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----