Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/641f005e-2d9b-3826-8fd0-5f3697ae91c0.roa
File:                     641f005e-2d9b-3826-8fd0-5f3697ae91c0.roa (raw, json)
Hash identifier:          n2LzltZv05GVMt1/VWuw+I9X4JStbdHDmvxI8XwmV/I=
Subject key identifier:   89:B2:0F:89:C6:90:89:0B:AB:30:A4:30:F6:09:03:E5:85:CE:69:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430F6035191CB9438B0900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/641f005e-2d9b-3826-8fd0-5f3697ae91c0.roa
Signing time:             Thu 19 Dec 2024 13:45:21 +0000
ROA not before:           Thu 19 Dec 2024 13:45:21 +0000
ROA not after:            Wed 19 Mar 2025 12:45:21 +0000
asID:                     396615
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:0f:60:35:19:1c:b9:43:8b:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:21 2024 GMT
            Not After : Mar 19 12:45:21 2025 GMT
        Subject: CN=4814accb-5146-4b17-b8ae-d9f5c440b50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:f3:2b:94:c0:d0:50:5f:9e:bd:a1:0b:87:
                    76:c7:15:75:e1:03:56:35:27:6f:c1:b6:c2:a6:82:
                    53:7c:b7:46:74:f7:fb:f3:45:8d:87:bd:b7:af:ab:
                    cd:46:ad:03:2c:c9:2a:af:ae:6f:f2:96:b7:72:39:
                    6f:e7:ff:9f:9c:48:ee:ea:8d:ea:31:fb:1d:5d:cb:
                    e3:dc:6f:bf:fc:7f:8f:95:48:86:8a:ad:69:21:1b:
                    c0:3c:0e:60:ff:95:6b:66:82:cb:ce:9c:cc:f6:a1:
                    98:80:7b:6b:72:4e:f5:24:39:1d:9b:42:3c:d9:3d:
                    a6:f2:ee:8f:7b:7a:f9:b3:e9:1c:26:37:ed:fb:99:
                    b3:ab:65:50:e7:ab:16:f0:79:a6:60:76:ac:c9:2f:
                    eb:7a:94:63:45:eb:eb:3d:fd:aa:23:d1:e2:6b:69:
                    60:ff:50:15:ef:82:0e:e1:ef:17:9f:ca:60:ba:1e:
                    e3:f1:8f:28:1e:82:1b:d9:21:b6:4f:be:a1:d7:21:
                    b8:68:b8:b9:5d:cd:80:6e:a9:a1:d3:8e:80:ed:bf:
                    70:f6:94:c9:15:8e:a7:71:58:0f:9b:54:9c:7f:8b:
                    66:70:84:a4:8a:1a:41:ff:0e:21:07:91:18:22:f7:
                    e2:17:71:d4:76:68:f3:3f:96:61:4d:5b:15:bb:1c:
                    cb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B2:0F:89:C6:90:89:0B:AB:30:A4:30:F6:09:03:E5:85:CE:69:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/641f005e-2d9b-3826-8fd0-5f3697ae91c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:80:94:21:00:dc:e7:a4:39:79:18:36:4e:de:ba:66:da:
         f2:c5:87:2d:f2:c1:2e:b6:2f:88:ed:2a:44:03:46:67:6f:19:
         1b:0f:b1:2d:c4:48:09:d4:74:fe:1a:86:2d:04:c0:b4:93:f7:
         1c:60:6d:62:36:0a:2f:3b:4b:4c:b8:bb:89:e2:44:62:72:f4:
         92:db:32:96:b1:72:4e:65:e2:89:03:ff:d9:7e:04:ad:4e:00:
         df:ad:0c:20:32:b1:b7:29:d4:52:6e:0c:10:a5:cc:00:8b:de:
         90:f1:ae:78:67:94:53:22:b7:15:74:fe:3b:a7:fb:17:65:46:
         1c:19:c9:b8:cd:fa:9c:bf:91:06:cf:2c:d1:43:65:5e:b3:7d:
         e3:9e:8b:b2:8b:6e:7c:d4:83:f5:60:cb:1f:85:c5:6c:55:7f:
         67:22:0c:ff:79:fe:81:bd:a2:7e:17:8d:fe:50:ff:fb:1b:86:
         43:79:09:a0:23:ce:e2:45:41:0c:6b:9c:17:ac:ad:83:88:56:
         ce:1d:fe:bf:d8:43:90:9d:62:72:a9:d0:17:6f:a5:c4:da:9e:
         2b:4f:de:9d:a6:d6:f4:07:f1:a2:d3:84:70:92:65:08:bb:39:
         11:7a:e2:62:69:12:1e:4f:c6:29:0e:d7:02:f4:0a:ee:26:e5:
         82:ae:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----