Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceebf715-1a93-357d-8d75-482298ef5b45.roa
File:                     ceebf715-1a93-357d-8d75-482298ef5b45.roa (raw, json)
Hash identifier:          aEDRKs/y35K6VWZtM7Sq15YDk1Zf7zcmrsBOgZl1Hvk=
Subject key identifier:   8E:5B:72:A8:02:F5:D9:F5:71:B0:A3:7C:8B:60:76:13:70:B9:BC:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB7269A513C4D2A686C480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceebf715-1a93-357d-8d75-482298ef5b45.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396555
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:72:69:a5:13:c4:d2:a6:86:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=32e3f101-3010-4ab4-9338-19b788117bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:0f:e8:17:29:85:32:ea:ab:bd:d1:95:16:
                    d8:67:34:89:19:0a:0e:b2:ca:4f:b1:98:cd:89:10:
                    ab:be:f4:81:fc:d9:9f:1a:ac:08:57:ac:de:9e:82:
                    3e:4e:8e:09:cb:69:58:ec:25:91:71:c3:3e:c2:57:
                    23:f5:43:18:0a:d5:ea:f1:54:5d:ce:ca:5e:ca:db:
                    b4:63:fb:f5:88:1e:cd:49:28:f8:fd:0e:78:9d:8b:
                    65:89:ee:5b:c9:91:25:16:37:05:56:70:5a:8a:08:
                    79:a7:d2:c1:89:60:8f:94:56:dc:16:e8:1c:1a:1e:
                    0f:92:fb:e6:8b:98:3b:85:c5:50:3a:75:d6:f3:4d:
                    76:e3:8c:01:cc:3b:58:b3:21:b7:24:fa:48:4f:19:
                    18:1e:4e:d0:9f:bd:fd:87:b6:27:94:0c:38:87:dd:
                    42:41:54:8c:97:10:ea:9d:f4:9a:f8:d1:52:ab:e8:
                    02:36:6d:29:21:8f:62:bb:5c:d8:37:4a:d8:51:18:
                    1d:d8:8c:0d:41:85:7c:37:f8:ce:5f:65:dc:d1:ab:
                    19:1e:09:94:18:e2:55:5f:dd:65:53:e2:b7:b2:a0:
                    56:b1:ed:41:c6:86:5b:5e:04:48:01:f5:3d:0b:4d:
                    e9:88:f2:be:70:aa:70:65:cf:01:72:bb:1b:68:80:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5B:72:A8:02:F5:D9:F5:71:B0:A3:7C:8B:60:76:13:70:B9:BC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ceebf715-1a93-357d-8d75-482298ef5b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:81:14:23:12:26:7b:fb:99:b7:91:39:23:a1:04:ed:f3:
         6f:fc:ee:0b:ca:56:29:cc:3f:bf:d0:f4:21:f6:df:41:94:fd:
         34:c5:39:78:d5:87:da:5e:30:59:df:28:83:6e:8a:1b:fd:c4:
         b1:14:48:92:90:3c:c9:31:01:b9:47:36:98:fe:ff:0f:f1:18:
         c0:7a:62:23:bf:ab:d3:e1:52:a3:7d:39:76:58:bc:82:ff:05:
         a4:29:0f:96:1c:b2:78:2c:e7:5e:72:70:85:dd:d3:44:cb:8c:
         b3:9d:77:e8:5c:84:50:6b:42:a0:b0:3e:76:21:7c:46:8f:9d:
         1b:3b:df:c8:7a:8e:47:9b:69:b9:04:ee:7c:b1:74:9d:c7:38:
         39:70:a7:19:3d:13:2e:4f:65:36:fc:e7:a9:64:37:31:c1:b3:
         5e:ea:1e:75:c9:72:af:65:47:4c:1e:3a:6e:83:6e:26:09:0b:
         f7:6a:db:40:b5:e4:97:8d:20:75:e9:48:91:7e:77:4a:95:62:
         42:60:57:c5:50:5a:47:bd:b3:03:1e:e5:46:c0:3d:d2:41:73:
         e9:6b:e5:98:b4:69:4e:d2:17:00:48:e0:aa:55:a9:40:c4:66:
         f8:e0:91:1c:3d:f4:cc:89:3c:69:76:de:dd:b3:d1:d9:56:70:
         9c:6c:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----