Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92bce0c7-fc67-3bc9-9176-37f34389e010.roa
File:                     92bce0c7-fc67-3bc9-9176-37f34389e010.roa (raw, json)
Hash identifier:          ovs9PZBUPCOE9UjbOsD+p43XCt4znar6DHpSExHn1C0=
Subject key identifier:   39:DA:B5:09:74:0F:98:4B:5F:3D:9B:89:79:FC:5B:83:E5:96:76:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A049ED75B7117566764C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92bce0c7-fc67-3bc9-9176-37f34389e010.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396542
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:49:ed:75:b7:11:75:66:76:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=19ed5810-d4d6-4528-90ab-0e2c9f3ae326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:b3:58:ad:bf:8e:1e:5e:c4:30:f0:50:62:
                    03:bd:4e:6a:9b:f5:10:53:29:3b:e6:51:89:6b:ca:
                    e7:53:40:cb:8f:5f:cc:d6:11:de:99:c2:79:d8:d0:
                    84:2e:e4:78:fd:29:6b:f0:37:55:dd:cf:26:6b:81:
                    6e:79:13:da:45:b7:1d:64:fe:be:95:4b:ff:8a:5f:
                    62:db:93:49:e3:6a:84:41:6b:bd:85:b2:01:97:3b:
                    9b:b6:d7:fc:81:f8:3b:9d:31:85:b9:7b:79:f5:f2:
                    b6:bd:c2:7f:f6:2b:d5:11:90:27:5f:4a:fd:f7:26:
                    61:f1:7b:d5:42:6e:e9:f2:3e:6f:f3:a3:95:f6:99:
                    3b:92:d8:ac:3c:aa:55:47:7c:4f:15:59:bd:b0:2c:
                    21:dc:60:f5:a9:c6:11:1a:13:21:8e:f2:4e:ae:02:
                    20:0c:27:53:28:e7:6f:91:db:2e:7a:04:e1:04:df:
                    fe:67:8a:27:98:e3:8d:0d:62:99:0e:00:72:88:2c:
                    e4:f9:75:ce:e7:bf:6d:e7:7b:ad:01:bb:d6:48:b2:
                    9f:23:21:01:2c:4e:94:78:95:84:b5:5c:a9:fd:ce:
                    31:9b:c6:1f:62:6b:a6:0a:d9:93:18:1d:6d:1b:59:
                    b3:1e:49:6f:49:33:a5:61:9f:16:e3:35:15:d3:b0:
                    be:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DA:B5:09:74:0F:98:4B:5F:3D:9B:89:79:FC:5B:83:E5:96:76:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/92bce0c7-fc67-3bc9-9176-37f34389e010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c6:bf:94:8a:41:5d:18:63:29:b1:08:7a:42:c7:7e:91:a2:
         75:b3:49:44:c6:ab:07:1b:3c:ec:00:e2:e2:08:67:d0:29:9b:
         5f:7e:e0:97:a3:12:48:7e:b8:6f:ac:ff:34:c0:9c:33:43:c9:
         b8:07:af:af:ba:53:9d:00:ad:df:e9:e5:1d:be:3e:bc:a2:10:
         33:55:28:2e:dd:b0:63:26:1a:80:5b:f2:1b:80:95:52:fa:0e:
         b2:d1:eb:8d:41:0b:d0:59:12:d7:3a:be:02:03:1c:74:2d:7b:
         44:51:4d:30:1c:93:14:28:ef:7e:ea:b7:66:e8:39:6e:f4:a5:
         6b:03:98:f6:c1:c8:62:20:3c:95:1b:6e:23:74:5e:4b:59:c2:
         3f:d7:ce:a4:e2:a5:00:df:33:41:88:99:87:6c:48:42:0f:9a:
         18:e3:26:58:84:4c:3d:13:5a:1b:71:c5:1e:b8:41:03:16:76:
         47:dc:97:d8:12:91:6d:cc:71:d0:bd:ad:26:8f:97:08:fb:74:
         81:df:cc:b0:2f:36:6d:c8:1f:71:b0:d2:4b:8e:f8:02:42:05:
         9e:3d:d8:b2:57:5c:aa:b3:d9:e3:94:43:81:a8:5a:02:1d:fa:
         f4:6c:29:9c:21:66:ef:5e:a5:48:fa:f6:fc:fa:bc:cf:70:06:
         7c:3b:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----