Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa
File:                     8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa (raw, json)
Hash identifier:          UR86Svhq55S4jTpmLeOo6hDySFoWeKIYj7+7Uptp7HQ=
Subject key identifier:   46:EE:5C:36:EA:4B:E7:91:7A:DB:C7:E9:F0:79:13:B4:A7:5E:D2:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847E0885EBFD4AE88FEB3589880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa
Signing time:             Thu 14 Nov 2024 13:35:47 +0000
ROA not before:           Thu 14 Nov 2024 13:35:47 +0000
ROA not after:            Wed 12 Feb 2025 13:35:47 +0000
asID:                     396576
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:88:5e:bf:d4:ae:88:fe:b3:58:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 14 13:35:47 2024 GMT
            Not After : Feb 12 13:35:47 2025 GMT
        Subject: CN=afb758d7-6fdb-4e5a-a38f-6251369c8604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:4d:c7:1a:06:f7:e2:bc:a6:ad:6a:98:f6:
                    ca:17:a9:56:51:c2:f3:0b:42:e1:a3:67:eb:49:62:
                    d9:9e:5d:4a:82:36:f3:ff:00:54:1f:89:2a:59:63:
                    4d:e5:53:1b:58:2e:aa:6d:7e:fe:94:4d:46:db:3a:
                    7b:a4:7c:64:a8:f0:e5:da:ba:2a:ac:90:d4:a8:8c:
                    c6:21:35:01:b4:54:7a:33:d2:76:d4:8c:49:45:61:
                    a8:03:e8:a4:6e:b2:b8:51:29:9b:8e:55:8c:8a:40:
                    ff:85:ba:78:d7:3d:07:cd:48:e5:6a:bc:2d:ee:6c:
                    19:9d:dc:85:9a:62:6a:8b:c5:1a:55:af:87:7d:fb:
                    99:fe:0a:12:69:88:b5:3e:f2:bd:13:52:77:4b:8c:
                    94:e0:22:e6:d7:4a:c9:ce:e4:d2:f0:4f:4e:cc:b9:
                    42:0a:b2:66:ad:20:7b:3d:90:50:fb:bf:c9:3c:7a:
                    e6:6e:94:a0:25:19:eb:95:88:b0:40:1e:dd:a6:bd:
                    a6:6c:16:bd:a5:26:bc:5a:72:21:52:67:25:55:b1:
                    32:89:a6:c8:16:c4:83:e5:a0:cf:52:a4:fa:d4:3d:
                    d7:b8:bc:eb:b6:cd:c0:b6:8e:40:21:ad:bf:ae:67:
                    73:16:eb:b7:b0:3d:99:65:25:88:3d:9f:0a:b2:21:
                    84:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:5C:36:EA:4B:E7:91:7A:DB:C7:E9:F0:79:13:B4:A7:5E:D2:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:eb:61:e2:02:7d:ca:87:35:2c:7a:11:c7:2a:1e:48:3c:d1:
         57:3e:ef:a5:0c:de:50:fe:04:c6:56:72:e1:f7:e9:4e:11:01:
         c1:c4:04:4d:6a:da:b7:5e:e0:c6:6b:2d:46:35:a1:7c:5d:a0:
         be:5a:46:22:29:6a:3a:d4:26:06:a5:6f:b6:11:f9:48:4b:10:
         1a:2d:4a:a4:ef:f3:b3:41:41:a6:86:f1:c0:39:93:72:7b:b2:
         23:a4:60:52:b9:25:95:ba:0b:53:69:07:1d:2b:de:5a:9f:a8:
         1f:d6:49:a0:5f:f1:a3:0b:47:5a:61:9d:db:81:eb:ae:94:6e:
         22:9b:56:57:a6:3d:66:6c:4d:aa:07:da:62:70:fe:c1:f2:ff:
         95:f3:a0:31:86:a7:af:a8:26:c5:5c:c4:08:79:72:d0:d7:0e:
         9a:8b:c7:47:8b:c0:5c:00:67:df:e7:b6:8a:e1:3b:e6:fb:48:
         ad:0e:1f:e3:e4:38:57:14:68:53:5a:34:55:53:8a:ef:7f:eb:
         b0:97:af:80:bc:c3:30:d2:03:67:40:13:06:a2:3f:18:0d:5f:
         9c:44:19:ce:2d:89:ae:dc:9b:8b:c5:02:79:cb:51:90:e3:63:
         eb:70:47:26:88:b6:ed:3e:ad:f5:74:b0:b2:52:c4:52:c4:20:
         07:72:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----