Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f692da-baff-3d57-b44f-0c50d1927ad7.roa
File:                     b7f692da-baff-3d57-b44f-0c50d1927ad7.roa (raw, json)
Hash identifier:          kpjE2nt/B3pkCICzT093nnbWT86B0YclO3VxBV2CtWQ=
Subject key identifier:   AE:BF:3A:ED:59:B6:89:D0:3A:62:B2:CA:27:FA:0C:73:0A:3D:BD:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B99298C21D6AA584BCBE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f692da-baff-3d57-b44f-0c50d1927ad7.roa
Signing time:             Wed 11 Dec 2024 15:18:04 +0000
ROA not before:           Wed 11 Dec 2024 15:18:04 +0000
ROA not after:            Tue 11 Mar 2025 14:18:04 +0000
asID:                     396550
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:99:29:8c:21:d6:aa:58:4b:cb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:04 2024 GMT
            Not After : Mar 11 14:18:04 2025 GMT
        Subject: CN=b3c84f87-3a97-4284-b589-4e26e33e3e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:c6:25:69:67:84:2e:21:32:e1:43:f1:df:
                    da:e5:32:83:e1:0d:69:ec:c0:8c:21:1e:5a:d6:e1:
                    49:28:0a:83:ab:5f:c5:3b:20:13:48:e1:62:cf:9f:
                    47:aa:f6:4c:55:f5:eb:38:5f:dc:67:36:79:48:4d:
                    36:4d:eb:87:1d:d0:8d:27:45:f3:33:ee:f1:bd:6f:
                    69:45:84:43:88:55:fc:69:60:d5:fe:b0:f5:7c:af:
                    36:2d:73:23:97:3a:f1:9a:92:0e:a1:1e:66:9b:c0:
                    50:d1:cd:1f:30:a5:2f:d5:40:4e:65:b9:79:ed:e2:
                    ec:50:4a:48:23:3e:a2:f7:b6:62:59:3e:68:1d:c6:
                    b1:92:e6:ce:95:b1:bd:78:de:79:ea:78:6d:35:46:
                    7c:a5:15:76:66:69:6f:cd:12:b4:7e:60:76:a1:6d:
                    8f:89:f5:89:a7:c4:37:33:8f:ab:01:6c:5a:a1:03:
                    8a:d2:7b:8b:99:57:b4:7a:54:57:07:35:1b:b0:7c:
                    c3:8d:b5:5f:99:f6:a4:67:70:67:b7:22:78:c7:58:
                    5a:a0:ab:4f:48:ac:40:9a:6d:99:2b:59:cd:89:8c:
                    ca:b4:54:ea:64:66:22:1e:9a:32:4f:09:de:e8:e3:
                    35:01:dd:a0:ff:33:47:ca:2a:a3:e3:94:68:84:41:
                    52:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BF:3A:ED:59:B6:89:D0:3A:62:B2:CA:27:FA:0C:73:0A:3D:BD:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7f692da-baff-3d57-b44f-0c50d1927ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7b:4a:0a:2e:a7:9c:07:07:7e:7a:dc:d7:d7:d5:3b:40:fc:
         ff:07:5b:e5:1a:45:d6:0a:90:7b:ab:e6:75:93:aa:83:1a:af:
         8e:8a:a3:4e:b5:1f:5e:b7:65:ba:c9:95:7b:11:28:a4:47:72:
         81:c5:60:f9:15:a5:50:ba:a4:49:55:47:3c:b2:65:b4:e8:e5:
         1e:fc:b1:b7:1c:84:55:ed:12:50:89:f9:86:b5:9d:de:2a:65:
         fa:e0:42:7d:28:89:01:0b:0f:06:ca:c8:58:2b:e2:0f:fb:06:
         41:0c:9a:b7:6d:f1:b3:bf:df:82:06:ce:0c:97:5f:87:3f:0c:
         7a:f4:06:82:bd:b6:48:41:4d:57:3d:53:05:6e:1d:f3:64:27:
         eb:68:fc:d4:43:3f:cf:8a:cd:8f:ed:eb:79:0d:19:2d:76:ca:
         8c:a5:6b:6e:fb:36:e3:7c:91:7d:11:95:b7:2c:d4:9e:08:20:
         88:71:3c:bb:bc:7e:d0:e2:a6:af:bc:7f:0e:e8:07:55:2f:18:
         71:8d:de:0f:c7:fb:f8:cd:8e:63:81:bb:be:22:82:37:3f:a5:
         65:9e:20:e4:03:06:a3:6e:eb:3c:73:57:45:56:73:4f:fc:f8:
         b9:dc:3c:18:0d:03:6c:c5:43:e8:29:c1:50:3c:4c:67:aa:15:
         df:7e:5a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----