Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720da740-2fed-3de8-9c25-a4f65a285b1f.roa
File:                     720da740-2fed-3de8-9c25-a4f65a285b1f.roa (raw, json)
Hash identifier:          WCkLtz4Xu1RODpM45RJFGRY4qTu+CxLuQI6q22xfxIA=
Subject key identifier:   E5:DE:95:55:B9:16:37:96:28:68:0C:A6:FA:98:84:A4:C6:42:AE:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584845157AF6A41877F4FFB57200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720da740-2fed-3de8-9c25-a4f65a285b1f.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     396571
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:7a:f6:a4:18:77:f4:ff:b5:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=4185f683-d679-44aa-9fba-f169c9c49dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:94:06:3f:9d:40:86:03:b3:8e:ea:30:f7:
                    c1:b1:ec:a9:cb:da:97:df:a7:a8:b3:17:4d:50:b4:
                    e8:12:41:ba:eb:61:b0:19:c3:19:3f:e1:7f:1b:fa:
                    04:fd:88:de:56:3c:84:50:d4:4c:22:a8:86:3f:75:
                    1b:d7:2f:03:02:5a:20:db:fe:ca:3c:ae:8c:af:6c:
                    98:69:06:61:ae:69:b9:9e:ab:b4:60:c6:1e:d7:00:
                    c8:74:43:73:95:d3:a2:ac:97:9b:7e:5b:41:69:87:
                    45:aa:b9:01:97:d3:8d:04:a8:aa:c3:8d:47:df:57:
                    0c:d3:aa:16:72:ab:99:ee:d0:f0:be:55:d5:48:0d:
                    63:0b:36:50:fc:54:28:62:e9:96:12:df:c6:a3:a2:
                    9a:57:dd:47:88:af:66:ba:3a:8a:7b:6f:51:24:3f:
                    cb:eb:09:d3:a7:b7:a8:d5:aa:3d:af:74:cb:0e:59:
                    b4:12:2e:cc:5e:db:8c:ac:ca:30:19:c8:c0:f7:29:
                    e0:66:66:23:60:72:f7:29:2a:5d:2e:fc:aa:e9:d1:
                    c8:34:73:e6:ab:5c:09:f6:0c:0d:13:49:e2:ec:a9:
                    68:b5:5d:eb:5e:b5:59:bd:26:7b:2a:a0:e1:87:38:
                    70:9e:fb:83:89:d6:32:ab:98:5a:0b:d5:5f:88:82:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DE:95:55:B9:16:37:96:28:68:0C:A6:FA:98:84:A4:C6:42:AE:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/720da740-2fed-3de8-9c25-a4f65a285b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:43:a4:75:de:8f:72:d5:c4:23:56:36:e0:3d:01:ae:71:93:
         fb:0d:01:e6:ca:75:86:ce:32:6f:ad:be:e4:38:cc:a1:bc:7f:
         77:a6:b7:29:5f:bf:af:77:30:08:66:c3:79:ab:3f:b0:62:0a:
         24:fe:c8:a6:d3:7a:24:34:a2:07:60:2a:95:b5:0a:dd:91:9a:
         b2:82:fb:f7:a3:85:50:65:86:37:bc:ca:89:84:61:7f:cc:de:
         4b:3b:dc:40:9f:fd:2d:7b:2b:61:9b:39:e6:ed:83:28:a5:cb:
         57:7e:77:51:6c:fe:46:28:c0:36:e3:dc:d7:e0:ad:a6:90:13:
         f0:b8:df:cc:f4:7c:33:85:72:4d:e1:a0:05:55:15:0c:b6:0b:
         b4:e2:86:47:4b:ad:14:7b:53:20:d6:8a:c7:e1:23:0a:74:1a:
         b1:25:03:48:82:c5:cb:93:9c:66:5c:ac:12:a7:69:81:d6:ff:
         af:a2:d7:18:15:bc:32:f5:bb:65:10:ea:a5:5b:a4:d4:f1:b6:
         1d:92:a2:55:14:47:e2:69:47:6f:e9:a1:b4:8a:a2:52:97:d5:
         9c:24:19:32:89:3c:21:31:33:89:5b:d7:50:a3:6a:c6:7d:cf:
         6f:17:a5:9b:a8:8e:db:e9:77:17:6b:8a:31:6a:58:80:f8:e1:
         df:66:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----