Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa
File:                     844ff308-1930-3872-bc8c-12b8c0fd5864.roa (raw, json)
Hash identifier:          k5VuWWjDD8MDcKSs3opPAOD0eU97S0Ry9Rn6FqLz74s=
Subject key identifier:   09:A0:50:8B:FD:96:7D:04:BE:85:46:30:F3:7A:22:D5:80:D9:4A:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A04C2504991340DB710C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     36621
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4c:25:04:99:13:40:db:71:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=9929b8de-94c0-422d-a944-13114bdef5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:90:28:82:97:97:4f:b1:c3:36:82:0e:b1:
                    8b:01:26:70:c3:91:8e:d2:a9:88:90:8d:fc:2b:f7:
                    50:82:d2:80:d5:4b:19:e2:54:55:48:5a:31:8b:f9:
                    9f:61:63:77:c6:7f:d6:ec:03:c5:23:53:3d:e3:8e:
                    1f:c4:df:2d:5c:01:a1:97:5a:24:cc:42:21:d8:61:
                    5a:45:2f:5b:b2:d8:c1:b6:55:80:26:f2:54:7e:11:
                    9d:82:bc:5f:5d:a4:b6:90:63:ba:5c:93:98:73:5b:
                    b9:91:88:b9:73:d9:06:f5:42:21:b6:e3:1a:5f:a5:
                    2b:d4:0c:6a:7e:6c:df:b8:56:5c:0f:a1:29:eb:7e:
                    36:2a:37:fd:92:39:26:67:08:1c:d7:a5:e0:13:41:
                    c8:43:9b:d8:d2:14:5f:1f:13:4f:40:45:a9:91:d3:
                    53:9a:09:35:95:5c:0f:6e:8e:76:19:d0:a6:de:76:
                    d4:a3:65:bf:57:84:49:e9:3c:c3:11:8d:c9:f5:3a:
                    a4:db:88:ef:56:1e:5a:3d:44:ec:b9:dc:6f:bb:54:
                    a1:27:67:30:96:34:50:3a:ee:fc:9e:1b:1e:f3:ff:
                    e6:1b:2b:a8:f0:cd:9d:4b:de:90:f9:fa:19:26:15:
                    b3:f7:06:23:de:ee:d1:6a:43:f4:26:d2:ae:53:8e:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A0:50:8B:FD:96:7D:04:BE:85:46:30:F3:7A:22:D5:80:D9:4A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/844ff308-1930-3872-bc8c-12b8c0fd5864.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:b4:98:49:76:c1:b4:30:80:c9:05:d7:9f:3f:30:77:00:7f:
         a4:01:f2:83:e3:7e:12:af:29:f1:0c:54:22:5b:55:86:cd:4e:
         1b:95:e0:ef:dd:54:a3:64:e6:2d:92:37:12:b6:6c:ad:8d:64:
         09:42:fe:36:6d:ee:7f:c3:5a:3b:e3:c2:8f:51:6f:13:8e:83:
         b1:0a:bd:15:eb:b5:61:9f:5a:15:8f:13:9d:73:c0:5c:29:d2:
         13:b6:8b:4e:22:ab:ae:c3:f4:18:31:e8:ca:c3:9c:8b:7a:9c:
         96:80:02:9f:33:4d:c9:14:9d:20:37:65:ef:9a:1d:a6:a6:fb:
         87:7b:35:8b:8c:3c:d9:f6:0b:f4:19:02:17:1f:02:4b:84:da:
         fa:0d:12:a4:90:40:3e:73:f8:f5:a3:67:a8:12:b7:f6:a3:c3:
         e6:6b:12:00:91:78:46:54:fe:8b:a1:5a:ac:73:89:5c:fa:cb:
         55:00:f6:6b:86:a8:90:58:d6:d2:6a:d4:12:36:e6:7b:3f:13:
         4f:d2:43:78:4b:60:57:77:32:0d:70:99:51:df:7e:93:43:23:
         4d:a8:43:ca:dc:49:45:15:f0:4b:96:87:fe:39:8d:f2:4c:69:
         2f:0d:a7:b9:1d:dd:24:4e:ea:ce:66:d7:0a:fd:8b:99:30:e1:
         66:cc:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----