Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bead1688-33bb-35f6-8092-fe6e9958ff4e.roa
File:                     bead1688-33bb-35f6-8092-fe6e9958ff4e.roa (raw, json)
Hash identifier:          Zq/Xct1IfZY3NetbuWKKNPQ06ucIb2OPJN2xlWrC8CE=
Subject key identifier:   87:61:96:4B:89:14:CA:79:0E:BF:CC:06:C9:39:24:F0:5C:39:61:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584845157AE7F84DC295AD96F340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bead1688-33bb-35f6-8092-fe6e9958ff4e.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     396590
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:7a:e7:f8:4d:c2:95:ad:96:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=c13e7ba1-e911-42da-bee8-a3495b2dd45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:a8:b4:fe:01:b1:f1:2d:1b:bc:a9:f7:f5:
                    31:49:1d:c1:93:13:bc:e1:7f:03:fa:02:a2:a8:3b:
                    f4:07:7a:d9:6a:79:8d:2a:80:14:ac:5d:30:91:59:
                    aa:af:2d:37:ec:4b:4f:4d:c4:42:ea:db:77:a2:82:
                    cf:9d:04:65:f9:05:6e:2c:a3:f2:3a:1e:d1:93:bd:
                    aa:61:f8:6c:15:8b:50:87:a1:a4:7a:86:32:40:eb:
                    1d:77:6c:25:eb:38:67:c3:93:f7:f9:59:7f:ff:8c:
                    79:4d:80:e5:3e:97:28:01:45:7f:97:9d:35:2f:22:
                    57:33:77:8d:8e:cd:e3:2d:c9:76:12:e2:6e:bd:04:
                    68:bb:e2:ab:b8:5c:76:2d:b2:29:88:b3:ad:05:23:
                    e9:ec:42:5e:7d:51:fe:a4:ec:99:6c:0a:f4:9d:a2:
                    f9:bd:c7:bf:44:2a:e9:16:60:b3:15:b2:05:3b:ee:
                    8e:a5:ac:96:ce:20:55:1b:b6:45:27:02:75:fb:5d:
                    f3:51:a1:63:30:2c:02:17:de:58:a4:f2:35:84:d0:
                    91:71:c0:50:1d:78:de:2b:22:bf:88:e4:46:58:f4:
                    dd:dc:c3:54:7d:59:18:4d:f7:92:3b:4f:44:63:1c:
                    b4:e6:36:ec:e5:f5:55:78:54:80:fd:a9:3c:14:2c:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:96:4B:89:14:CA:79:0E:BF:CC:06:C9:39:24:F0:5C:39:61:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bead1688-33bb-35f6-8092-fe6e9958ff4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:72:67:02:15:7e:d5:ab:e1:4b:c3:68:d4:8e:db:6b:f5:
         a4:a9:cf:49:da:25:ba:ef:06:c1:43:63:1f:a6:dd:69:d3:89:
         a6:ca:6e:56:09:74:66:c7:85:61:71:d9:88:42:68:1b:93:77:
         c8:f8:be:17:8f:1c:94:98:7f:18:ea:30:c2:09:41:f6:6e:8e:
         f8:04:d7:2f:f8:2b:bf:8d:f7:5b:8e:70:a0:4b:dd:c2:c3:85:
         30:a7:7d:45:ce:b7:17:c2:d6:c8:56:97:ac:25:bd:d3:e1:5c:
         a5:63:8a:41:ab:9f:94:e5:fd:ba:bc:0e:49:df:d2:67:6a:70:
         56:2a:df:bf:81:cb:4c:64:09:bb:7a:e0:f7:18:af:6d:f1:05:
         8e:7c:53:e2:d0:fa:cc:97:00:79:e4:ca:f0:aa:9b:29:e0:0c:
         6d:d7:44:f4:e8:2c:f3:e1:dd:24:29:2f:7e:fd:6b:2c:28:96:
         c6:cf:14:1b:b6:a8:12:65:a8:de:62:dd:fc:6b:3a:54:0e:39:
         21:e4:b3:a0:1e:63:2d:87:c7:71:b6:d6:2c:32:5d:02:19:9d:
         6e:cb:48:92:83:67:0e:43:d8:b0:4c:56:4c:e4:a4:cb:2d:c1:
         f9:be:c3:5e:40:76:c4:9d:31:80:67:cd:40:01:81:a7:7b:61:
         56:9f:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----