Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90bd92cd-8846-3140-a9ad-18132956904d.roa
File:                     90bd92cd-8846-3140-a9ad-18132956904d.roa (raw, json)
Hash identifier:          l/3WQTnDbPacOCYKHfxmKWivWoNB1CCXcUeQUdzpNkc=
Subject key identifier:   A4:03:FC:64:84:09:94:D3:6A:5C:D6:BF:86:00:D6:3E:A9:41:43:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242EC25C7418DB1423C5A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90bd92cd-8846-3140-a9ad-18132956904d.roa
Signing time:             Thu 19 Dec 2024 13:45:05 +0000
ROA not before:           Thu 19 Dec 2024 13:45:05 +0000
ROA not after:            Wed 19 Mar 2025 12:45:05 +0000
asID:                     397206
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:ec:25:c7:41:8d:b1:42:3c:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:05 2024 GMT
            Not After : Mar 19 12:45:05 2025 GMT
        Subject: CN=1d20913f-8e42-4611-ad21-ff2757ef3a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:ef:b4:aa:f5:96:20:f9:a0:a8:6a:7a:49:
                    c1:54:d7:b7:24:9c:18:52:4c:2d:67:a2:19:f0:28:
                    3c:a2:be:4c:a9:8e:79:95:4f:18:d5:e0:51:97:1d:
                    7e:22:a2:c4:68:b1:ee:27:02:70:3c:55:ef:f9:5a:
                    bd:2c:eb:c4:f1:64:02:1f:ff:4e:75:91:b8:b7:9c:
                    8c:71:94:25:bd:27:99:4e:c8:b3:df:15:84:4e:82:
                    f0:44:16:b3:70:15:96:1a:2f:f6:21:de:32:e8:9e:
                    56:f7:be:df:42:bc:53:62:34:e6:e7:b7:f7:6d:56:
                    5f:ff:02:81:5e:1c:78:23:e7:dd:f5:a4:b7:13:c9:
                    76:10:71:ce:72:d2:b3:25:ae:1a:4c:1f:1d:c3:35:
                    4c:5c:7f:4f:8b:e8:2c:12:05:43:fc:fa:be:03:dd:
                    4b:88:6c:09:91:f3:27:0d:0e:aa:29:66:60:f0:e8:
                    2b:7d:be:c5:53:64:3d:4e:f7:57:45:f2:ef:9a:5d:
                    28:b8:30:c0:d2:b8:f2:af:82:f1:c4:5d:a2:d0:e9:
                    dd:a7:15:78:4e:b8:d0:92:c2:9e:64:77:6d:0b:cc:
                    52:c0:eb:59:82:07:1e:61:31:e5:f8:dc:b7:69:b0:
                    fd:ba:79:b1:3e:2f:84:b7:61:3a:b9:45:21:46:31:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:03:FC:64:84:09:94:D3:6A:5C:D6:BF:86:00:D6:3E:A9:41:43:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90bd92cd-8846-3140-a9ad-18132956904d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:4a:2b:d9:2b:8c:60:9a:86:1d:60:76:19:3a:b2:b5:4d:08:
         3d:d7:cb:9f:b0:6f:90:2e:63:0a:5b:d7:1a:32:bc:cb:48:bf:
         ee:b7:a0:0f:07:58:44:f4:a0:56:9a:54:94:ff:72:60:90:ab:
         52:db:e7:e8:b3:e4:78:de:c2:a8:26:c2:34:ef:e2:5c:b1:62:
         3b:d2:d6:b6:1a:ce:e9:a6:f3:be:75:34:62:7d:5a:7e:72:df:
         b6:e5:f6:66:29:98:bc:54:ab:1c:a1:c2:20:f7:a3:4a:78:e5:
         9c:27:55:5c:56:32:94:34:75:be:70:cf:fd:5b:b8:7c:4f:11:
         ff:fc:35:99:02:f1:de:dd:8d:70:c8:f7:96:95:f5:a1:ed:43:
         85:38:83:e1:fa:6e:2e:f2:25:8f:49:91:b7:00:34:22:2c:54:
         b6:c2:56:71:a8:83:3c:d1:63:94:3c:e2:5e:da:20:da:fe:cf:
         37:e6:17:66:b8:ee:06:7a:5d:0d:02:f4:74:35:af:57:9f:48:
         33:38:ad:00:4e:c7:a7:c7:01:85:68:bf:c0:9b:48:e0:b8:8c:
         d2:f7:cc:a1:1d:44:b1:13:bb:bb:52:84:50:89:c3:f6:c9:e0:
         22:b9:52:92:a5:ae:d5:41:62:f0:38:93:1b:45:b7:da:a2:56:
         b4:20:7c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----