Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88e800f4-3e88-37db-a53c-bb0b9543f567.roa
File:                     88e800f4-3e88-37db-a53c-bb0b9543f567.roa (raw, json)
Hash identifier:          52lRKtFJxwGMJ1tfKcq8KWO8NSjplmp8VK0Dps0uVug=
Subject key identifier:   A8:4B:52:71:E8:F6:AB:DC:48:5E:BF:5A:FC:E1:47:21:3F:C6:05:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484243045521EB965FF23772C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88e800f4-3e88-37db-a53c-bb0b9543f567.roa
Signing time:             Thu 19 Dec 2024 13:45:16 +0000
ROA not before:           Thu 19 Dec 2024 13:45:16 +0000
ROA not after:            Wed 19 Mar 2025 12:45:16 +0000
asID:                     396611
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:04:55:21:eb:96:5f:f2:37:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:16 2024 GMT
            Not After : Mar 19 12:45:16 2025 GMT
        Subject: CN=34abe44f-53ff-49b7-9aa9-a4ce5c4ab5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:c3:7d:61:7c:fd:ef:d7:a0:9a:17:f4:a3:
                    ee:4a:51:fb:6a:f2:fe:9c:92:c6:d8:d4:44:45:2b:
                    3c:f0:3f:32:11:f5:ba:2f:71:96:e5:8e:20:0c:30:
                    29:53:7e:f8:46:8d:41:74:3b:b5:ce:57:24:83:b1:
                    76:dd:a9:c3:85:b2:df:5c:05:a9:7e:99:ab:3f:ef:
                    12:09:2d:78:a5:34:a7:ad:8b:fc:bc:81:4a:42:15:
                    d4:d6:c5:c0:ab:c4:43:35:af:cd:e6:17:d4:58:ab:
                    e1:5f:9f:57:c3:ba:db:19:be:94:dc:b3:47:5b:5a:
                    cd:a2:bb:49:e1:cf:d1:d0:28:56:22:9a:75:e5:c4:
                    e9:7f:6e:04:30:dd:57:ad:cf:be:34:95:12:9a:ce:
                    8d:f7:35:39:85:e6:d7:14:70:62:e3:61:c3:6a:94:
                    f9:12:ad:68:8f:ba:4d:e0:39:7d:35:df:7f:1a:f2:
                    c3:18:30:a9:83:49:e8:2b:b2:e8:59:9b:ca:c7:f5:
                    a6:d5:87:91:2e:cb:de:13:fd:8b:13:6d:bb:f4:7c:
                    3b:27:e3:eb:66:86:02:40:e5:ca:39:c4:7f:91:a9:
                    88:92:dd:b7:12:6c:5d:c9:8d:29:00:37:dc:b2:a4:
                    af:b6:02:8e:98:bf:48:a5:1b:55:f7:1e:9e:cc:df:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4B:52:71:E8:F6:AB:DC:48:5E:BF:5A:FC:E1:47:21:3F:C6:05:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88e800f4-3e88-37db-a53c-bb0b9543f567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:45:0b:ac:7e:55:21:46:6d:2a:2f:36:df:f7:10:5e:74:b0:
         3a:33:6a:37:78:4e:0a:30:65:27:86:9d:e8:6b:9a:55:e7:58:
         4b:5e:eb:63:0e:1e:59:e8:d6:19:50:2e:2d:1b:f9:df:d0:61:
         e3:5e:2f:0e:69:27:fb:55:5b:fd:00:fe:30:7f:3e:f9:c7:63:
         df:35:6f:e7:8e:f3:3d:61:d7:d6:e9:eb:1d:59:14:3c:8c:e1:
         01:2c:e9:fa:2a:b3:14:4b:02:78:85:df:e2:b6:be:91:de:dd:
         79:7d:55:28:8b:05:d1:d3:31:55:a3:96:16:5e:cf:c7:50:ec:
         5f:10:3d:73:55:7f:f8:ac:67:9f:cf:f0:a2:df:0d:e5:f8:90:
         e3:d7:05:2c:d1:ca:03:4e:09:45:35:df:af:11:ae:3d:82:3a:
         83:ec:14:b2:05:79:23:c3:de:70:23:d9:49:e9:43:12:3f:d2:
         e9:88:5c:a4:ac:73:6d:e9:a5:8a:ff:76:12:a6:64:89:2e:75:
         fb:32:ce:37:7e:bf:0f:86:4c:f1:95:b6:d6:30:cb:df:03:ec:
         cf:fe:a9:26:cd:a8:9f:1b:46:ad:11:4c:28:3b:44:df:b6:cc:
         42:61:fd:de:d4:f4:44:70:d6:a0:ea:06:13:c7:d2:b4:6d:8b:
         ae:e2:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----