Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa
File:                     b69522b8-88a6-3604-999e-40690867ecc5.roa (raw, json)
Hash identifier:          6nGuv1cMmDZJMiN9Y5GbL5SE150BBOS0ZCPjh0PNbng=
Subject key identifier:   A5:89:A0:EA:CF:08:4F:F9:E1:F9:75:68:AD:72:06:57:D1:33:9D:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F7046B14C0EEA573CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa
Signing time:             Thu 19 Dec 2024 13:45:10 +0000
ROA not before:           Thu 19 Dec 2024 13:45:10 +0000
ROA not after:            Wed 19 Mar 2025 12:45:10 +0000
asID:                     396826
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f7:04:6b:14:c0:ee:a5:73:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:10 2024 GMT
            Not After : Mar 19 12:45:10 2025 GMT
        Subject: CN=6e41643c-32b6-4511-9360-837a3d055e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:bd:3c:a2:a3:aa:dd:96:65:47:43:94:a9:
                    96:8c:10:eb:65:31:f4:2a:79:74:a1:64:58:61:99:
                    73:20:0e:07:ad:a0:4b:64:5f:60:58:38:3e:e5:c2:
                    5e:c8:83:66:8c:70:5c:82:fd:b6:dc:34:1a:86:81:
                    bd:80:d9:2a:1c:68:eb:22:1d:52:53:40:b4:79:59:
                    65:13:2e:90:54:9b:de:aa:0f:1c:1c:6f:5e:36:c7:
                    4a:8e:ca:23:a9:bd:81:47:3f:ce:64:1e:4a:0a:0f:
                    6b:50:74:09:16:4c:93:64:5e:40:2c:c2:a4:e9:89:
                    58:21:b3:a2:b3:16:1f:77:17:91:84:24:fb:33:42:
                    29:26:2b:33:ab:47:b3:7c:8f:1e:27:38:55:96:db:
                    c5:13:74:57:d5:cc:bd:a8:1b:a0:33:94:24:57:35:
                    4b:6a:a2:6b:63:e6:8b:72:c7:aa:64:46:76:be:da:
                    d1:fa:b4:7c:1f:80:f6:62:db:d1:85:0b:af:ab:10:
                    dc:fa:7c:f1:fc:cd:65:cb:d7:03:bc:26:52:ad:b9:
                    f4:6d:db:bf:b4:34:f4:e9:58:f1:47:55:05:21:51:
                    02:13:6b:04:2d:a5:eb:4d:1f:f6:4c:b9:e8:27:77:
                    46:27:57:17:50:71:a4:ca:ad:95:9a:c3:64:d6:7c:
                    35:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:89:A0:EA:CF:08:4F:F9:E1:F9:75:68:AD:72:06:57:D1:33:9D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:93:e4:68:a4:f2:cb:34:e4:af:56:87:3f:ec:2b:b6:d7:
         f9:d2:22:b7:7f:48:81:75:06:11:4c:b9:3b:f9:70:19:e1:f9:
         d5:3c:25:2b:89:19:35:e8:8d:00:8d:12:5f:d4:e2:d8:ab:36:
         2d:18:13:94:25:d0:ce:4c:d8:34:dd:06:31:59:d2:d4:d9:69:
         21:b2:5f:f5:2b:3f:4b:41:ee:49:bb:85:cb:8b:a5:e3:0d:4e:
         15:9a:50:67:7c:20:57:ca:69:d8:1d:15:dc:89:fe:d2:a8:d6:
         06:19:09:1c:70:00:96:6a:06:f2:77:45:94:9f:af:a7:52:6a:
         2c:3b:ca:cc:30:7b:68:8e:8a:a3:67:39:b0:32:94:2f:92:97:
         15:29:51:63:4b:4b:2f:7f:83:ea:84:36:a6:8c:bb:4e:cc:17:
         2b:1c:e7:57:35:90:a2:2f:a3:e9:d0:b2:0e:49:84:97:26:37:
         ea:55:90:aa:df:0e:d0:6d:54:a6:39:79:c3:cd:16:9b:b5:8f:
         53:ab:78:92:12:2d:e7:5b:36:85:1e:48:e8:60:d8:0e:9a:05:
         29:bb:44:1b:3e:cb:61:2b:5d:7b:20:5f:2f:d9:39:ba:96:8a:
         90:04:13:ed:8c:d9:81:bb:64:e3:5a:10:fa:bb:ad:b7:0e:b6:
         e4:e4:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----