Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b19eb340-9713-38d4-b706-7a6ee3fb8dc0.roa
File:                     b19eb340-9713-38d4-b706-7a6ee3fb8dc0.roa (raw, json)
Hash identifier:          daIorXXTAGEhDPOe3ERUIztRrOGm76TrGTrplYAwkjM=
Subject key identifier:   B5:C0:36:E6:37:8A:DB:4A:14:1C:AD:03:A6:FF:B3:CF:39:15:BB:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B909EB41D939A4B75E7DC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b19eb340-9713-38d4-b706-7a6ee3fb8dc0.roa
Signing time:             Wed 11 Dec 2024 15:18:00 +0000
ROA not before:           Wed 11 Dec 2024 15:18:00 +0000
ROA not after:            Tue 11 Mar 2025 14:18:00 +0000
asID:                     396591
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:90:9e:b4:1d:93:9a:4b:75:e7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:00 2024 GMT
            Not After : Mar 11 14:18:00 2025 GMT
        Subject: CN=6e76585b-10a4-4c9d-81bb-7df8e1b591f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f4:c6:91:40:96:de:16:43:71:6a:b2:fb:83:
                    c9:ca:8b:72:7c:0a:c7:fe:03:49:29:5d:c7:86:20:
                    aa:c7:1d:b6:49:d6:c3:04:3b:d1:82:9f:97:c0:97:
                    31:78:63:d4:f2:02:9d:5f:2e:90:1e:7f:1a:53:7c:
                    0b:c1:9a:19:0c:17:2d:7e:e4:76:fa:75:c0:10:1d:
                    85:db:ed:4c:03:83:07:d0:c4:bb:53:c2:cf:84:f5:
                    8a:ba:2b:ce:3c:99:1a:c7:27:c0:e4:3a:0e:d4:f9:
                    23:d7:74:2a:3e:a9:7e:3c:91:79:24:42:59:f9:20:
                    0f:e5:cb:50:4b:8d:ee:83:d4:ee:65:8d:d3:14:c1:
                    f0:81:ed:d6:26:27:22:72:7f:a6:00:ea:90:d0:76:
                    b2:ce:29:be:a9:be:e2:80:b5:c8:30:42:89:64:68:
                    89:10:81:97:fa:d9:0c:89:54:5c:f4:84:be:39:fd:
                    39:db:f0:e7:e0:43:25:fd:b5:a6:6b:04:70:f7:77:
                    2a:b1:e7:b3:97:48:de:d1:27:cc:01:2c:0e:e1:46:
                    1d:b7:cb:83:10:46:7e:d4:5d:75:9a:7c:17:06:74:
                    22:28:a8:62:7b:a1:0a:6c:fe:c1:77:e0:47:93:ff:
                    70:58:17:80:af:34:8b:73:94:63:7c:71:a5:a1:fc:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C0:36:E6:37:8A:DB:4A:14:1C:AD:03:A6:FF:B3:CF:39:15:BB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b19eb340-9713-38d4-b706-7a6ee3fb8dc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d1:76:47:92:74:ed:4c:a6:c4:b1:6b:4c:8f:ea:78:75:eb:
         10:d2:f9:bb:3f:eb:72:a7:0a:4e:cf:9b:1f:f7:2c:ea:33:55:
         cc:3a:36:5c:9f:ea:f0:40:1e:74:c9:cb:cc:71:0b:f6:3a:a1:
         c2:17:9c:fc:fa:8c:43:dc:a3:6c:a8:32:0d:3a:8d:b6:f4:00:
         7c:8f:79:d0:ea:c9:de:0b:fb:97:c8:ea:f0:db:72:31:83:bf:
         f4:c0:58:7e:89:62:8b:9e:6d:b7:fa:b4:4e:72:ac:bf:41:d2:
         4a:2e:39:9c:09:c8:9e:b4:48:28:dc:f8:f1:22:fa:4c:98:42:
         7e:bc:9a:67:be:ba:55:0b:76:3f:3a:18:5a:08:49:12:8e:67:
         5b:bf:64:0d:33:e4:30:a8:84:ba:b2:6f:1c:e8:bd:e4:ae:f2:
         b9:df:d5:36:ec:01:b5:94:ce:11:6e:21:2b:29:1e:fc:68:7b:
         2d:79:70:3d:65:27:c3:23:49:22:a3:1f:c8:ea:8c:dd:f0:09:
         40:75:63:13:ba:8c:de:cc:e9:90:8b:45:08:95:06:b5:c5:de:
         4b:23:2b:50:26:6c:0e:63:d4:29:93:9b:97:c8:c3:fb:b7:2b:
         2f:c3:3f:9c:a5:ef:d6:23:b3:ee:56:ef:10:7d:5a:e7:8d:a3:
         7d:ee:df:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----