Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b8f43e-08c8-3a64-b8c8-43afdef501c4.roa
File:                     60b8f43e-08c8-3a64-b8c8-43afdef501c4.roa (raw, json)
Hash identifier:          c5k0KcG2BExBHVX5GQGO+tAWSs5HW1Y9630DqQceoac=
Subject key identifier:   BA:B5:AC:01:BC:DC:18:9D:04:6C:69:45:25:A8:E7:FF:BA:99:67:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885F80C952D6E5D09FE650
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b8f43e-08c8-3a64-b8c8-43afdef501c4.roa
Signing time:             Thu 14 Nov 2024 13:35:48 +0000
ROA not before:           Thu 14 Nov 2024 13:35:48 +0000
ROA not after:            Wed 12 Feb 2025 13:35:48 +0000
asID:                     36628
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5f:80:c9:52:d6:e5:d0:9f:e6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:48 2024 GMT
            Not After : Feb 12 13:35:48 2025 GMT
        Subject: CN=6150aa67-7e5c-47f9-b27d-14137e5f6a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:90:ef:f7:e3:b6:08:ec:09:17:55:ee:5f:
                    b8:8d:8e:2a:e7:36:37:7b:54:93:c1:ec:7a:48:12:
                    86:2f:2f:ec:61:92:03:c6:3f:c4:45:64:76:a7:7d:
                    49:15:79:03:b4:2a:16:a1:ff:af:2f:a0:a2:42:7e:
                    43:d1:8f:b1:e7:d5:34:ba:0d:76:82:78:10:b7:9e:
                    ff:16:4e:c1:bc:f6:86:db:d7:12:35:95:58:68:08:
                    3a:68:3c:e4:f9:ff:75:84:c1:05:61:e1:fc:22:99:
                    a7:93:28:1e:61:3a:af:0c:d1:d8:1d:e3:6e:e1:61:
                    c2:a6:aa:73:66:b2:86:34:32:e8:7f:d8:6e:69:98:
                    65:b1:b5:5a:0b:9f:7f:b1:46:47:ce:5a:95:e3:70:
                    0f:e6:7a:9b:ac:5b:b6:5d:31:5f:28:7f:04:a5:df:
                    12:b4:d4:8a:3a:c2:64:b7:ee:7a:1d:76:70:73:aa:
                    e3:3a:ea:5b:56:d9:36:b4:f7:f5:0f:cf:8c:1a:c1:
                    aa:2f:b3:af:44:a7:52:67:ee:c3:86:94:dc:d4:54:
                    9e:2e:9b:e0:66:60:68:d5:ce:e7:2d:bb:ed:af:f8:
                    26:db:73:f4:f8:ac:52:f9:d4:54:fc:71:b1:2c:4c:
                    22:c1:e4:90:b7:c7:cd:fe:eb:0f:19:8b:96:58:3f:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B5:AC:01:BC:DC:18:9D:04:6C:69:45:25:A8:E7:FF:BA:99:67:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60b8f43e-08c8-3a64-b8c8-43afdef501c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:bf:06:ab:ce:67:ce:67:53:82:46:3c:d2:76:c5:14:63:5c:
         d5:d1:ea:ca:bf:60:0d:e8:96:55:f3:29:4e:c8:0a:e5:16:73:
         1c:03:9a:0e:e0:99:b4:6d:f3:62:8a:ca:6e:7a:c5:fe:e4:d1:
         4e:b8:de:fc:ff:d2:5e:3c:0e:72:5e:62:64:87:79:aa:77:27:
         8b:fd:14:ca:e0:97:9b:1b:22:0a:fe:a6:d4:e5:c2:b3:0b:5b:
         d4:ed:6b:dd:83:42:fa:a1:8f:64:e2:4a:31:e0:93:ec:09:d7:
         98:5b:1b:17:6f:8d:0e:08:a0:af:61:87:84:35:01:e5:27:b8:
         ec:73:fd:51:5a:5b:ba:62:df:f5:40:27:0e:34:8f:46:4b:1e:
         c0:f1:aa:48:78:06:36:02:01:f6:5f:49:87:57:de:50:7c:f4:
         a0:4b:9c:b7:21:f6:28:80:05:f4:f3:91:01:43:ea:c9:2a:93:
         9b:2d:80:e9:04:cf:91:8a:b2:c9:42:e2:f9:c7:75:e1:0e:94:
         50:c6:8a:77:ee:fa:0b:61:48:e4:52:88:8b:e8:06:51:44:7e:
         96:3d:00:6f:f5:e2:3b:2a:d7:a7:18:ba:99:76:6b:3d:55:64:
         d3:6d:77:0c:80:35:03:ae:87:4c:0e:f9:e1:5a:ea:a6:53:14:
         1a:12:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----