Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa
File:                     6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa (raw, json)
Hash identifier:          F4b7MCtK8LDzi+14oUbqxg5a31hRx8ezs+T8yXQFQRk=
Subject key identifier:   A9:BA:47:B6:B9:2B:5C:EB:62:B4:99:DA:9C:BC:03:4A:C1:04:7F:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584845157B13E062F9903F0D7688
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     396549
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:7b:13:e0:62:f9:90:3f:0d:76:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=e66a07ae-6fef-413b-9a38-c93259b546e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:f8:a5:ab:90:0b:fb:fc:60:d4:b6:82:a8:
                    59:4d:cf:fb:e7:f6:67:30:a7:cf:20:16:e4:7e:3b:
                    77:1f:e9:55:4b:43:aa:e5:91:f1:ab:47:61:33:bf:
                    b6:73:46:dd:f5:78:fb:a4:8b:54:7a:b3:2a:2f:1e:
                    fc:2d:39:8a:e6:ef:2d:49:30:14:ea:22:28:fc:e3:
                    55:e3:fb:ee:e9:d6:7b:59:a1:f3:81:73:1f:3c:bb:
                    eb:ed:e5:2e:2d:9c:0b:7b:dc:d8:16:8e:17:1e:f7:
                    ed:77:ea:ec:13:8b:aa:86:1a:e2:21:d2:e7:83:63:
                    eb:31:84:35:25:46:2f:81:1e:b6:8c:31:b8:85:85:
                    7e:9c:a2:f6:97:3b:f9:33:1c:8c:35:e8:62:e6:25:
                    8c:05:24:2b:a2:f0:0a:7a:20:ee:6a:94:cd:71:41:
                    4e:97:d2:44:41:42:61:6d:1a:47:6a:69:6e:f2:91:
                    44:40:ef:a3:82:aa:bc:21:93:38:c5:eb:61:80:46:
                    62:ca:dd:68:26:ad:72:75:11:8a:20:d6:86:5c:1f:
                    77:e0:41:aa:67:6b:53:26:bb:31:f6:c7:fb:04:d7:
                    6d:e3:54:23:49:cd:d1:38:81:78:1f:2a:e0:b6:c1:
                    90:67:27:3f:6b:30:ff:cd:fb:6d:10:02:b8:a1:7a:
                    e5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:47:B6:B9:2B:5C:EB:62:B4:99:DA:9C:BC:03:4A:C1:04:7F:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e29b680-6dbd-3fa9-8336-0933a6d8bae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:92:18:30:86:93:90:b6:57:11:32:2b:35:9b:c4:24:a4:
         4f:22:0a:57:c8:ba:b0:98:6a:bc:47:20:1c:8a:b8:ec:28:bb:
         c7:a6:2b:a1:bf:1c:ca:65:bc:36:db:b1:a4:5f:b8:b9:c2:ae:
         fc:0b:6d:e6:e8:73:eb:98:43:cc:7a:5c:df:53:53:92:3c:ed:
         38:d1:ee:a3:8b:15:8e:c1:89:e1:0b:0b:da:e9:27:ec:7d:6d:
         01:e5:52:39:22:91:4f:56:5c:3a:05:98:e7:7b:e0:ed:69:32:
         ce:af:06:ff:81:b3:0d:3e:40:43:e2:4c:c8:18:5b:d3:39:bd:
         fb:f9:2d:ca:ce:ca:5c:53:a2:12:b4:a8:7a:7e:da:a7:30:3d:
         f6:be:a0:82:16:5a:4c:f0:49:05:d2:25:1a:50:bb:c3:74:64:
         1b:6d:1a:52:2c:61:4f:75:7e:38:a6:c0:d7:e1:e9:f5:6c:f1:
         6d:de:a2:47:fc:f0:61:9d:8d:ee:d3:f2:22:2b:bd:bc:78:28:
         37:57:fc:01:d2:fc:37:e7:64:e2:9a:5e:87:7d:73:56:b5:fe:
         1d:93:e9:a2:58:39:8a:74:db:1a:77:2e:93:d0:3a:15:f6:02:
         5b:30:ad:41:a0:f3:18:f1:7e:58:a6:dd:37:2b:f1:52:40:80:
         b2:79:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----