Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa
File:                     9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa (raw, json)
Hash identifier:          Hj3jafvk1NwoH4LdfamDtI3KO/qacQpL3IPgPvwLmvg=
Subject key identifier:   6B:44:73:E4:C7:C0:5D:C8:97:20:B4:9B:F2:48:39:58:E1:AB:16:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB71E80D4A560CBBE148C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396586
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:71:e8:0d:4a:56:0c:bb:e1:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=e79fb456-1535-42e3-9e98-5dd7e07c3de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e1:4f:43:04:f5:91:75:e3:7d:c6:f9:11:5a:
                    0a:f0:b8:9f:a2:f4:a5:e8:be:e7:16:79:5a:6b:88:
                    6f:8d:a1:8a:c4:d0:2a:17:95:a7:3f:c6:fb:83:67:
                    f1:f1:94:b0:81:39:a5:43:8f:86:45:8a:77:34:44:
                    9e:5b:8e:fe:ff:0d:d1:69:b8:78:1d:e1:21:fb:d8:
                    86:06:32:54:36:46:29:4e:fa:f0:40:91:a8:f0:09:
                    d3:fc:80:7e:7d:9d:67:76:20:69:5b:a4:57:eb:5b:
                    b9:26:48:1b:db:88:52:c7:9c:e8:07:2f:23:56:e6:
                    27:68:57:e0:27:03:0b:50:3d:74:9d:91:ef:e7:08:
                    01:40:dc:43:42:6c:f8:ec:4b:8a:64:af:20:1e:a0:
                    2c:fd:f8:3a:03:f5:e7:79:ed:61:f6:0f:22:b8:14:
                    59:2b:31:37:89:33:65:79:da:b5:0b:9d:68:2a:e8:
                    d8:91:2a:ca:06:30:6c:e7:f5:dc:9f:ff:c5:95:69:
                    c0:9c:97:50:d1:04:b4:fc:fa:49:81:4a:cf:2d:33:
                    26:65:aa:69:04:24:b8:96:5e:50:76:0f:5d:01:78:
                    e6:b0:48:66:3d:13:d4:28:c1:d2:ac:6f:e5:e7:1d:
                    04:1c:dd:6b:db:f2:7e:30:0c:1d:a8:52:fe:21:44:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:44:73:E4:C7:C0:5D:C8:97:20:B4:9B:F2:48:39:58:E1:AB:16:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af6ccfe-ace5-3c31-9c17-e5b1c7a2be53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:90:02:3b:5a:b6:1e:b3:8e:f1:08:1e:ac:61:61:fb:59:3d:
         62:7d:13:fd:96:49:ad:2a:ca:d0:4c:b5:87:c9:ce:a1:93:d3:
         7c:fa:d8:7c:cb:92:36:ad:7a:29:bd:46:7c:05:20:99:7d:21:
         95:ab:f6:89:3a:b1:6c:1e:03:94:09:fa:b8:97:10:da:36:ca:
         fd:e3:be:d1:6d:39:74:18:5f:9c:f9:00:98:95:a8:2e:17:14:
         5d:7a:fe:f3:05:d4:02:e2:f6:03:8a:a1:08:16:55:14:a4:ba:
         2a:89:cf:a3:30:47:bb:29:1e:74:c7:49:bb:3f:32:0c:61:15:
         c6:48:c2:8e:d9:8f:58:39:76:8a:3f:c8:6e:ed:b7:c2:22:df:
         c6:ed:59:b1:af:43:e8:e0:0d:9e:67:1e:0b:fe:fe:8b:49:23:
         a8:39:55:f2:ec:37:3e:a3:6c:c0:30:48:6f:d6:79:cc:48:60:
         44:03:e9:17:02:3c:04:50:15:dc:ed:df:ae:03:9e:ee:05:31:
         47:17:cc:8c:46:25:d1:2e:b7:b6:5f:fb:67:44:ff:1f:1b:91:
         f7:33:53:51:2b:1f:0c:4f:37:f7:8b:1f:69:34:dc:0f:27:af:
         60:75:31:23:73:5b:81:23:2a:bf:87:5e:17:57:a0:4c:c5:a0:
         10:a4:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----