Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad7a0259-a645-3643-a0bc-56d389a95a1e.roa
File:                     ad7a0259-a645-3643-a0bc-56d389a95a1e.roa (raw, json)
Hash identifier:          PWziY3wddAiAW9sAPpWWbdqPC1dWIPDw3Ia5B0GwX+8=
Subject key identifier:   2D:15:32:51:7B:19:AE:7F:F6:4A:99:BD:F8:0B:B5:9A:70:73:14:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FD499743751AB6BEB200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad7a0259-a645-3643-a0bc-56d389a95a1e.roa
Signing time:             Thu 19 Dec 2024 13:45:13 +0000
ROA not before:           Thu 19 Dec 2024 13:45:13 +0000
ROA not after:            Wed 19 Mar 2025 12:45:13 +0000
asID:                     396603
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fd:49:97:43:75:1a:b6:be:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:13 2024 GMT
            Not After : Mar 19 12:45:13 2025 GMT
        Subject: CN=a11a782e-de23-4dea-b8f6-ed2b16d4c4c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:6b:04:b3:81:4f:44:3d:e1:fe:1a:0d:53:
                    ae:66:2d:ab:d0:23:5f:b5:7b:13:18:25:d9:21:f0:
                    71:8f:f5:50:d7:3d:bd:40:a0:8c:e5:7d:a6:c3:65:
                    ad:80:5e:c1:73:89:86:21:fe:4c:4b:d6:b6:28:be:
                    5b:46:64:44:ad:2e:cf:cc:3e:3a:f2:71:29:10:97:
                    11:b7:5d:71:31:31:d9:d4:28:65:45:62:ba:2e:c2:
                    b2:c3:2c:41:28:3c:9a:41:48:09:ab:e1:3e:44:7c:
                    02:ed:e5:45:9e:bd:b5:ad:e1:b8:6f:73:94:d3:8b:
                    d6:35:07:f2:bc:3d:6d:35:1e:e1:88:60:8b:67:23:
                    35:85:aa:16:0e:ea:d3:75:9f:18:cd:be:50:53:f2:
                    03:42:d0:1e:33:d4:fd:d3:82:df:dd:22:76:a7:1b:
                    e3:b3:31:c3:f4:98:33:c4:8f:9e:41:ab:c9:20:bc:
                    b7:70:28:08:9d:10:98:84:53:e4:a3:3e:b3:f6:b5:
                    1f:35:88:e9:50:74:de:ce:28:5b:ae:d7:4e:ce:c7:
                    fe:30:24:af:97:fd:46:f6:72:ff:e1:cb:98:5a:c6:
                    7a:03:9a:27:90:5a:24:b1:c7:53:08:ef:47:f5:2d:
                    e2:9d:8d:60:bc:d0:05:58:29:f6:d3:51:ef:b5:1f:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:15:32:51:7B:19:AE:7F:F6:4A:99:BD:F8:0B:B5:9A:70:73:14:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad7a0259-a645-3643-a0bc-56d389a95a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:64:48:cc:b2:72:bb:50:6a:2a:4d:dc:6f:cc:a0:14:50:02:
         01:a8:da:07:bf:9c:b8:b7:12:40:ff:08:dc:5e:1e:9f:22:b4:
         d1:3a:d9:c7:4a:e0:36:d3:61:85:01:35:00:ce:6e:91:0c:14:
         ba:e3:56:6a:53:cc:77:6d:e2:3c:51:c1:d2:48:f7:22:9a:13:
         70:b7:5d:84:cf:00:49:c9:69:b7:9a:d1:a4:d6:f5:c3:04:dc:
         5a:60:10:1f:48:d5:f1:d3:7e:8d:95:79:71:58:2d:1d:bb:9f:
         b8:ee:26:06:2c:20:fa:ed:42:6e:b3:84:53:90:00:53:6d:29:
         86:4c:24:3c:d5:eb:09:1d:f9:6a:7e:56:02:29:71:7f:03:d5:
         23:10:6d:ee:2f:cd:2a:1c:05:f3:c5:57:ee:be:4e:7e:c2:8e:
         fd:11:65:3d:ca:e8:f1:4d:a5:27:28:14:7f:a9:05:82:98:8a:
         63:5e:10:79:85:af:1d:37:52:bf:9f:f5:a4:f9:16:76:2e:b1:
         ba:1c:1d:c5:96:b6:82:8a:55:dc:48:1d:30:51:31:28:76:2c:
         d9:c1:41:a4:1f:25:8d:d0:37:20:3c:28:2d:02:63:7e:2b:72:
         39:6e:15:0e:17:67:b0:35:ad:1e:a6:e3:f6:96:c7:d9:7b:61:
         bf:71:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----