Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
File:                     753a5fd3-7ead-3451-8a4a-8d52bc868907.roa (raw, json)
Hash identifier:          JZUo/RhAjd/4/F/6NTE1ubnQU/xVf/emQ5b42VGG+PY=
Subject key identifier:   94:8B:06:37:71:A8:96:08:0A:33:B6:CD:40:EB:7F:54:67:E4:D4:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0886330146FFDCC0D928800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa
Signing time:             Thu 14 Nov 2024 13:35:49 +0000
ROA not before:           Thu 14 Nov 2024 13:35:49 +0000
ROA not after:            Wed 12 Feb 2025 13:35:49 +0000
asID:                     396543
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:63:30:14:6f:fd:cc:0d:92:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:49 2024 GMT
            Not After : Feb 12 13:35:49 2025 GMT
        Subject: CN=f077de89-a8f4-48c1-b2fd-a04f14b1cb80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:f3:6a:f8:74:83:cc:36:9e:78:08:fc:8b:
                    3c:a1:c2:e4:23:a3:e0:ff:a3:73:8d:33:0d:5e:97:
                    12:d5:07:0c:ba:da:08:44:68:ee:6f:6b:09:1e:a1:
                    70:db:14:62:3e:7d:03:36:f6:80:7a:83:76:70:bf:
                    b9:8e:83:f0:66:0b:d9:8c:8c:f5:f5:48:3b:5f:56:
                    e9:bf:3a:e0:be:8b:bf:21:f5:13:78:6e:3d:7e:b8:
                    3d:79:74:7e:70:9a:cc:c6:9c:59:ef:51:27:31:89:
                    da:94:65:21:e0:f0:c9:6d:57:a3:db:ff:50:63:1a:
                    31:81:5b:c1:ae:74:79:60:08:b9:16:dd:48:b5:02:
                    96:da:4c:d7:b8:13:57:e1:66:f3:78:bd:de:9f:6c:
                    89:1e:e1:97:85:07:e1:c3:46:d3:4d:2b:b0:aa:44:
                    7c:ed:a2:b3:74:28:2a:6c:42:bb:3a:2c:52:ac:26:
                    56:6f:33:14:15:67:5d:70:25:c1:4b:c2:98:de:e5:
                    e3:8a:37:4d:48:3e:65:82:34:de:7e:90:07:a2:df:
                    c9:93:47:b8:04:9f:9f:f7:de:15:0e:8b:04:5b:06:
                    bd:a7:f8:fa:49:2a:c3:e8:de:c0:0d:60:a1:5b:7f:
                    52:07:35:dd:fe:2a:75:d6:80:fe:45:81:fc:f6:33:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8B:06:37:71:A8:96:08:0A:33:B6:CD:40:EB:7F:54:67:E4:D4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/753a5fd3-7ead-3451-8a4a-8d52bc868907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:70:ed:58:3e:cf:95:a1:2c:16:9d:fa:92:8f:21:8c:85:85:
         63:75:d8:f3:70:2d:de:9f:35:25:f7:f3:ac:44:80:e3:31:f7:
         df:ba:f8:86:db:ff:96:cb:cc:01:c3:b5:00:1a:5c:32:51:36:
         1f:7c:87:cc:83:1a:46:95:29:a8:23:b3:80:fe:95:59:0f:40:
         46:1f:04:22:16:38:3e:a2:4a:1a:95:80:c1:51:e4:10:b9:70:
         a5:5a:eb:3d:23:14:3d:97:cb:2e:a7:15:b3:49:cb:96:c9:ee:
         84:19:1d:37:f3:f5:d7:54:6c:58:a2:cc:f9:a4:77:91:cc:29:
         2d:21:92:2b:91:43:12:2a:38:39:5d:51:50:f7:eb:6d:7f:4a:
         42:40:39:3c:db:93:cd:e2:fb:c3:0f:ff:1f:53:4f:b5:ad:b5:
         3e:3c:54:a6:91:89:39:aa:50:b4:18:06:57:f5:7f:05:44:f8:
         8e:75:72:1f:7c:33:c3:17:09:2b:1c:d1:a3:e8:0a:51:e8:8c:
         fe:ce:db:2c:bf:df:c1:2b:c7:d7:2a:48:49:78:42:c4:a4:af:
         9d:c8:4e:1d:cc:84:44:68:4b:88:2e:72:f6:b1:ad:38:26:e4:
         ef:e9:8a:48:54:44:8e:ca:b8:0a:d9:f2:40:36:3d:ec:a9:79:
         50:56:59:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----