Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa
File:                     b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa (raw, json)
Hash identifier:          YCcyfNOX4Fgfw4xC+UeBHPD7mO2jeIwwaPmcmnisfzA=
Subject key identifier:   BA:15:AF:19:BA:F3:8E:E0:F9:01:8A:76:80:4E:15:67:1B:19:F1:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858483720152A5DA83F4B3FA0FD48
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa
Signing time:             Sun 15 Dec 2024 14:00:53 +0000
ROA not before:           Sun 15 Dec 2024 14:00:53 +0000
ROA not after:            Sat 15 Mar 2025 13:00:53 +0000
asID:                     396550
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:20:15:2a:5d:a8:3f:4b:3f:a0:fd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 15 14:00:53 2024 GMT
            Not After : Mar 15 13:00:53 2025 GMT
        Subject: CN=5a50cb51-293e-425f-9e88-606cbeb73613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:f2:1a:df:7f:0a:b1:8b:24:9f:d6:39:39:
                    15:e1:47:aa:5d:1b:f5:60:6b:9b:ca:60:0f:4c:93:
                    76:01:c0:f4:e8:94:5d:8a:50:6a:d5:26:dc:5c:a2:
                    f1:57:ce:ac:8e:fd:96:08:66:e8:e0:0a:a3:81:92:
                    d8:f3:61:53:7c:bb:6e:ca:0f:d2:19:ea:59:78:a7:
                    91:f4:c9:41:b3:57:21:69:7f:fc:9f:df:e7:43:1c:
                    b0:7c:03:6c:ce:28:59:94:36:4f:36:a4:15:7e:7f:
                    b7:e6:67:c8:20:82:60:ee:51:88:57:1b:4a:f0:27:
                    58:c2:80:e0:57:ec:c2:6c:92:82:4b:34:5a:a4:b0:
                    f4:10:a8:68:7d:6b:95:12:90:63:e0:59:a9:45:d6:
                    8c:fa:0a:0e:ee:ce:a8:bd:07:4b:9b:8d:4c:f9:4d:
                    e0:f7:97:d4:5f:8c:6d:7f:74:0a:c6:92:75:ba:c0:
                    b9:88:8d:30:4c:0a:da:be:93:ed:47:a4:b7:42:5c:
                    b5:d1:70:b2:83:c1:58:43:a5:7e:a5:b7:d0:d9:b1:
                    73:cc:7a:44:67:21:e3:14:98:31:30:8a:fb:67:5a:
                    bc:44:8a:ad:03:88:b3:e9:6d:b1:d9:30:84:c1:6d:
                    ed:44:01:07:c0:10:14:69:b4:05:4f:b8:a6:5e:b3:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:15:AF:19:BA:F3:8E:E0:F9:01:8A:76:80:4E:15:67:1B:19:F1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9cf351a-94eb-3fc3-b6f5-1547c4d87cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:4d:25:a5:03:15:10:aa:f0:66:34:48:f6:9f:0e:5d:28:ff:
         d5:6a:4a:24:04:03:0a:07:c1:7c:ef:0c:1a:fd:67:d0:06:20:
         92:67:fb:ae:a5:41:46:65:1c:7c:9b:80:e2:53:2b:1f:0a:89:
         a8:50:f9:2c:a3:cd:ab:27:f4:a5:0d:34:e4:a3:0f:74:51:4c:
         e7:51:b1:f4:25:e6:4e:36:e0:3b:92:8f:2e:2a:77:7d:e3:29:
         f6:b3:84:15:8f:2a:60:c9:db:15:35:7b:d4:ea:9b:e8:86:a7:
         3e:fe:01:d0:97:85:30:3f:80:17:ac:a1:25:5c:9c:50:8f:74:
         2f:34:0f:f2:41:15:9a:c5:ed:7f:db:ab:d3:01:4d:83:68:df:
         28:90:cf:bc:ed:09:51:4c:ea:6d:95:61:2c:a3:64:05:92:9f:
         7f:a5:ca:c5:3d:ad:b2:d1:29:84:77:c2:40:d0:fa:04:43:5e:
         f3:25:32:9d:52:83:94:9c:71:9d:23:b8:ce:17:ca:60:60:47:
         02:e6:55:6f:51:41:d0:93:a5:cd:84:31:10:52:6e:70:16:4e:
         00:68:d7:a2:90:2f:b4:32:ca:23:04:85:64:7d:06:b0:ea:60:
         97:2e:06:96:26:65:79:f6:56:f7:bb:6f:af:97:01:dc:21:d4:
         a8:ee:0e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----