Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6321fdc2-cc93-3321-baf0-7bf546ec5351.roa
File:                     6321fdc2-cc93-3321-baf0-7bf546ec5351.roa (raw, json)
Hash identifier:          r+RPq0G4AECO3r9qumSZXT3OF0Oe38+Xu4hidi5T0zg=
Subject key identifier:   3F:80:AF:84:D6:DE:6C:ED:9D:75:B0:53:CD:23:D7:F1:B2:EF:B3:3C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005AC940BB0AAB2DDBC600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6321fdc2-cc93-3321-baf0-7bf546ec5351.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     396586
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5a:c9:40:bb:0a:ab:2d:db:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=311ef78f-5611-4bd3-a235-bef9d04c70c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:1c:b8:b4:78:36:2d:ad:3a:f5:d4:ce:b7:
                    31:b3:07:5e:42:b1:6a:60:02:f8:0b:e5:24:e8:68:
                    af:e0:e8:4c:b1:b6:9b:84:d2:1c:09:72:e6:c1:69:
                    e1:cf:25:7b:5b:44:07:40:a7:15:e9:b6:12:f3:ab:
                    d4:33:d4:3f:1d:a4:2e:ad:82:87:2b:28:8d:fd:44:
                    0c:00:1d:35:d0:60:bf:af:ef:ca:5e:16:af:9f:c6:
                    95:4e:15:2f:8b:de:81:20:98:3a:a8:5e:58:3b:7e:
                    d0:d3:0c:21:9b:94:f3:c5:45:1f:74:d2:dc:ca:77:
                    52:b1:84:5e:68:e5:43:a5:1f:b2:77:80:e1:95:37:
                    3d:f3:2e:15:9d:47:19:de:ec:2c:1d:da:d6:de:96:
                    b7:ed:94:07:81:39:3b:d3:31:e2:fb:e4:9c:99:d8:
                    b6:ce:02:77:ac:09:43:2e:4f:00:73:17:33:04:77:
                    cc:4b:1c:ed:f6:89:bc:9f:2f:c1:e0:94:60:39:45:
                    8c:ff:70:62:f5:46:13:5a:e4:f8:b9:54:f8:a8:06:
                    43:02:53:95:2d:05:f8:2d:4e:ec:8b:a9:6b:65:de:
                    b2:c8:60:fe:5f:2f:9e:5c:d8:f3:d3:a5:9f:d2:cc:
                    82:83:50:f3:51:61:49:eb:af:fb:51:04:9d:7a:b9:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:80:AF:84:D6:DE:6C:ED:9D:75:B0:53:CD:23:D7:F1:B2:EF:B3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6321fdc2-cc93-3321-baf0-7bf546ec5351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:70:62:e1:a0:72:97:39:35:47:13:f3:ae:01:6d:a7:a1:2d:
         16:cf:8d:d2:2d:e6:a0:e2:4e:c4:df:c5:59:09:90:ad:12:88:
         c4:7c:42:fe:99:83:43:f1:34:0d:61:d8:4f:e9:93:28:48:f9:
         d0:a5:d9:8e:d3:5e:eb:bf:6b:8a:89:20:6e:98:a6:8f:42:a6:
         12:69:00:9c:b9:12:61:f7:f1:e4:b4:cd:99:bb:d4:51:e2:c6:
         4c:df:b7:cb:8c:4c:c2:f0:d0:6c:1b:3f:d8:9f:52:24:8b:5f:
         41:e5:c9:7d:eb:50:f7:12:3f:c0:00:ce:bf:64:0a:c0:9f:7b:
         af:7e:5b:b4:94:e1:8f:57:fc:c3:e4:ac:9a:71:1c:c7:38:77:
         3c:cc:c5:86:d5:eb:57:83:aa:41:ec:a0:8f:15:ac:e6:4a:79:
         26:8b:ed:9d:2a:ec:bb:82:5e:b8:a1:5a:bc:e7:96:28:ff:3b:
         f0:c8:07:5d:58:b6:0c:5f:63:38:e5:17:75:39:7a:78:10:01:
         28:20:ea:e7:3b:36:1c:fe:3b:ad:4c:6c:07:4e:6d:6b:68:c8:
         bb:6c:57:95:70:fc:ef:9c:86:6f:5c:96:08:ce:a0:3b:27:cb:
         77:cf:0d:99:d0:7e:de:8b:24:88:c6:19:4d:54:a4:2c:d1:6b:
         e1:02:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----