Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a3995a6-4c7d-39ce-a7cf-f6ab2d52c8d3.roa
File:                     5a3995a6-4c7d-39ce-a7cf-f6ab2d52c8d3.roa (raw, json)
Hash identifier:          CX6a6y4F0YMUAfEpgFcpimlin4IWMuOo3+f0h/Ina9E=
Subject key identifier:   32:B7:DD:6C:E6:BC:2D:1C:5A:64:93:01:D4:90:1C:AF:D8:EB:01:47
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005CAC3DBECBAF1B911480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a3995a6-4c7d-39ce-a7cf-f6ab2d52c8d3.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     36626
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5c:ac:3d:be:cb:af:1b:91:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=44aa0313-2df8-4853-9b41-05a07e9ebed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:23:53:e0:01:90:05:dd:06:a8:ed:5c:07:7a:
                    cd:2a:db:13:b9:aa:14:fb:f6:57:0e:7e:04:7c:a8:
                    64:d2:25:c9:5b:a5:b2:da:12:46:8d:24:63:b2:6d:
                    8d:43:2d:28:ef:0c:a8:76:5e:80:4c:44:6d:65:03:
                    6b:f9:63:bc:d2:ba:03:cc:48:0f:20:b3:56:7e:8f:
                    81:0f:f6:f4:db:1a:48:0a:78:ef:2d:25:2d:86:72:
                    a2:51:53:c4:6a:1c:fe:66:51:25:33:75:c4:5d:77:
                    ee:6a:3f:75:84:8f:79:45:e1:64:7b:f9:7a:6b:29:
                    d5:4d:c6:ca:fb:dc:31:71:0c:a3:1f:29:b8:8c:5d:
                    b2:4a:0e:00:a9:9c:3c:2a:d4:31:59:39:9c:58:e7:
                    a8:e0:1a:a5:e2:ee:88:f3:5d:30:13:a9:94:f2:b7:
                    2a:20:9e:3b:4d:37:e2:6c:9c:97:92:80:80:cc:4d:
                    c1:6d:85:5a:b3:5d:cb:ac:47:f6:1c:9d:5c:71:e1:
                    6e:0a:19:a8:aa:23:92:0c:15:99:71:9c:4d:e7:d4:
                    db:6c:9a:13:d2:44:28:af:7f:c5:62:01:14:f5:01:
                    a7:6f:d5:4f:e1:69:de:8a:ab:ea:59:ed:75:60:76:
                    f9:2e:e0:c4:f5:d3:0f:7a:e3:87:b6:9b:07:e8:0c:
                    52:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B7:DD:6C:E6:BC:2D:1C:5A:64:93:01:D4:90:1C:AF:D8:EB:01:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a3995a6-4c7d-39ce-a7cf-f6ab2d52c8d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:ab:32:32:c4:ee:c7:74:04:e5:92:57:59:3c:59:c0:df:b8:
         a3:a1:7c:60:9b:f8:ba:57:39:f4:d4:4e:7e:6d:f7:f2:97:0b:
         f8:94:72:b1:a6:40:8c:8d:ec:95:b4:ec:7a:d9:9a:fc:17:00:
         d5:e8:b1:7a:24:0a:dc:16:26:8c:1b:af:f4:73:34:33:d2:59:
         32:7d:93:61:04:42:44:10:c2:9d:d3:25:6f:d4:85:62:bb:ab:
         04:d1:cf:1c:aa:8f:ba:67:df:bc:98:17:5f:a1:b4:9b:88:b5:
         92:4c:ca:ce:f0:b0:71:99:ac:fe:8d:5e:fd:bd:f3:7f:a0:a8:
         ef:f2:e8:60:a1:a9:03:9c:00:a6:11:0d:39:99:1b:57:98:18:
         43:08:f1:2d:35:50:fd:d3:f5:09:ad:61:1d:50:40:04:47:66:
         c0:dc:bb:83:d2:40:66:a5:64:3e:b5:5c:14:cd:d3:8a:3b:71:
         91:7c:74:17:48:85:b9:91:93:23:9d:3d:88:51:ef:b8:18:f4:
         50:d0:d7:60:7f:21:52:b6:a1:ff:79:81:86:13:d5:9e:de:85:
         c4:d0:1d:26:ee:a3:4d:38:69:04:c3:b7:1b:af:37:43:3e:71:
         d5:4c:f2:ff:e2:c8:0e:d2:5a:d2:23:12:83:eb:15:9b:6a:a2:
         4f:ea:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----