Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c22f8558-8f7b-3518-b993-8b11f8bb02e0.roa
File:                     c22f8558-8f7b-3518-b993-8b11f8bb02e0.roa (raw, json)
Hash identifier:          U6ckNhr/d7zmtWA8o05bVd4iqsGgUP5AP0f7b6JtZAY=
Subject key identifier:   26:F1:C1:F7:57:5B:2F:A3:04:4B:19:71:23:55:F6:BA:BE:75:8F:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005EFEF16FAD79A6FC8AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c22f8558-8f7b-3518-b993-8b11f8bb02e0.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     396555
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5e:fe:f1:6f:ad:79:a6:fc:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=fe246d5e-4277-42bc-85ca-d6c6265818f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:a6:80:23:b0:3e:d2:8c:4c:b9:f5:b0:42:
                    06:a6:bd:60:b6:41:f2:81:a7:0a:71:d8:23:ea:e7:
                    5c:d5:21:e5:51:89:9a:38:cc:d3:3c:34:dd:3e:16:
                    c6:9b:66:0d:27:e6:b4:98:6e:d2:e7:f8:19:e6:2f:
                    d8:c4:25:12:f5:2b:eb:11:48:2b:7f:cc:80:9c:f2:
                    bf:f1:3a:b0:4c:0f:f4:1b:33:7f:76:a1:ab:5a:cf:
                    85:b7:c9:a0:72:dc:88:2b:01:56:45:2e:9e:55:35:
                    da:21:4d:8f:ed:a5:d4:d8:da:42:17:64:b4:9d:fc:
                    64:40:b9:ca:5e:2e:4b:d0:ef:a1:43:31:09:e3:af:
                    b1:76:bf:2b:7b:b9:99:1f:0b:e6:89:8d:19:a9:bc:
                    ae:1d:74:45:0e:9d:c7:65:32:c5:a6:fd:28:29:d0:
                    2f:c6:96:23:14:49:63:05:2c:d5:78:af:b9:28:07:
                    43:a8:9d:b4:e3:45:57:b1:c7:35:a9:01:57:10:c0:
                    59:4f:55:73:d1:bf:04:ce:be:d9:8a:35:7b:c9:82:
                    3d:e1:0d:38:4e:e1:db:b0:d6:ba:65:04:f6:b5:bc:
                    56:70:e2:ba:c9:01:eb:d3:c1:05:8a:02:6e:12:66:
                    33:8a:87:a3:8a:e4:e4:f9:69:c0:20:1f:90:6c:6d:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:C1:F7:57:5B:2F:A3:04:4B:19:71:23:55:F6:BA:BE:75:8F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c22f8558-8f7b-3518-b993-8b11f8bb02e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a0:8d:7b:88:77:18:cd:55:73:44:67:74:88:3e:ed:3b:f0:
         5b:8f:99:43:ee:fd:15:d4:aa:6e:28:8e:de:ff:f4:36:7f:88:
         4d:4c:47:05:a3:28:fd:72:8f:da:4f:d4:9d:a2:cb:3f:97:d0:
         ff:a8:f3:88:0b:6e:1e:60:80:4d:e7:e1:a0:23:95:42:34:43:
         45:06:3d:dd:9a:86:f2:bf:9e:fd:97:d8:ed:0a:0f:3a:4e:03:
         31:e5:b5:c8:c9:81:a3:f8:b6:a0:8a:c6:5d:c5:1e:3a:92:74:
         fc:bc:c2:85:7b:0e:ca:1e:ba:3a:e8:e2:ef:f6:23:22:b5:a9:
         eb:e2:01:90:6e:3e:e1:c1:f3:38:21:16:b9:2b:f4:6a:6f:c6:
         07:8b:c0:e8:a5:21:dc:13:9f:cb:04:33:b4:58:22:08:d7:f4:
         67:f9:f7:01:47:c3:2d:c6:2f:a4:a1:03:3d:29:8a:28:e2:a0:
         f4:30:88:6f:73:e7:79:76:73:59:d8:fc:0b:1d:7e:f6:48:fe:
         a0:2b:6d:ce:ab:56:ce:ac:69:40:a7:45:b2:75:75:08:6f:92:
         43:89:01:95:f4:93:39:30:74:07:a5:c2:f0:62:f5:64:22:f0:
         00:74:b0:35:cf:e0:f9:fd:6f:8b:7e:bc:7a:19:75:cc:31:bd:
         56:2b:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----