Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2de37ee-a655-3240-a582-2b311f795081.roa
File:                     d2de37ee-a655-3240-a582-2b311f795081.roa (raw, json)
Hash identifier:          bqMLUti+Ge+rcKqT4nH3ZXf9/0EW7J9gvpq/RUIYa4s=
Subject key identifier:   E8:F7:4B:25:FE:0F:7C:BF:C7:F8:36:61:FD:B1:D9:4A:6B:88:90:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424325DEE904939E06370D30
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2de37ee-a655-3240-a582-2b311f795081.roa
Signing time:             Thu 19 Dec 2024 13:45:32 +0000
ROA not before:           Thu 19 Dec 2024 13:45:32 +0000
ROA not after:            Wed 19 Mar 2025 12:45:32 +0000
asID:                     396576
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:25:de:e9:04:93:9e:06:37:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:32 2024 GMT
            Not After : Mar 19 12:45:32 2025 GMT
        Subject: CN=05b09768-7dce-4b11-b077-6c811ccfa3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:f6:31:72:88:1f:01:47:a1:35:3f:08:8c:
                    16:04:3c:61:5c:43:71:a0:c0:2d:58:d2:11:4e:31:
                    24:94:74:c8:84:c1:77:ca:ef:4c:5a:f8:7f:ac:fa:
                    ec:ff:ae:a1:eb:dc:5c:c8:5d:b8:14:e9:32:53:e6:
                    5b:39:b4:de:e4:28:61:83:a3:ed:49:aa:c1:0f:6f:
                    99:05:7c:63:5c:34:00:14:19:3a:81:05:55:2f:d5:
                    fd:87:8b:25:53:12:a6:63:b5:5a:54:9c:ad:39:cb:
                    75:8b:19:ce:7a:88:c0:89:9c:94:76:89:de:dc:70:
                    6c:3d:fd:8c:cd:da:50:20:3e:81:45:99:1c:3f:0d:
                    90:10:ab:a4:d8:bd:fb:54:f9:c7:a7:04:0e:22:e2:
                    33:96:49:73:ed:02:e8:ee:bf:5a:e3:60:42:db:29:
                    ab:a4:e2:03:5b:3f:a2:55:9b:15:6c:c5:19:2b:22:
                    37:d1:3c:5c:04:16:cd:a6:e2:aa:c0:79:ef:4d:5d:
                    2a:ba:ae:00:1e:20:e8:96:11:1e:e1:11:aa:21:9b:
                    3e:e5:08:3b:f9:2d:c3:79:49:fb:ee:78:33:06:75:
                    c5:39:6b:1c:01:77:6f:34:f7:3e:07:16:8a:b5:ba:
                    a9:91:d3:01:3d:d4:04:1f:0f:6d:54:5f:79:ba:bb:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F7:4B:25:FE:0F:7C:BF:C7:F8:36:61:FD:B1:D9:4A:6B:88:90:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2de37ee-a655-3240-a582-2b311f795081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4d:7e:ef:22:58:64:1b:0a:76:78:0e:4c:d1:c0:d5:fb:65:
         e0:32:01:f8:aa:48:b6:68:9d:5c:7d:52:86:bb:15:02:6e:04:
         6d:49:3e:d4:11:9c:17:d8:20:51:8f:3b:58:ca:1f:6d:8a:9d:
         47:6f:62:4e:86:5b:ee:f4:64:5c:7b:fd:75:98:55:d1:3e:05:
         b1:a0:3c:3f:96:fa:30:76:49:7d:99:1f:d0:eb:cc:f7:73:75:
         36:d6:fa:25:81:f5:3f:85:97:fe:24:ba:84:d2:d2:fe:b8:1d:
         e1:fb:fd:5a:db:1a:39:d7:d4:02:05:45:0b:6d:d9:81:90:a5:
         b8:2a:63:49:a4:b3:b3:40:76:bc:94:92:6c:81:26:52:e9:a9:
         0b:c1:f5:41:e6:0d:d7:fa:b1:18:72:0a:f3:86:e7:da:07:fd:
         cb:8b:c1:0f:16:55:f9:82:23:3b:bc:35:bd:47:15:73:0d:0d:
         0b:8e:4c:a2:86:44:30:c3:d9:fc:ac:7d:d1:c2:db:71:9f:df:
         85:f1:6a:bc:6c:f5:69:b9:5a:0a:44:f1:a6:da:8c:5b:14:1a:
         9f:4e:69:2f:d8:47:8e:9b:61:e4:e3:d6:88:bc:27:d5:b0:dd:
         0c:df:91:6e:18:b5:74:ea:52:50:e5:c2:86:e7:14:29:c6:3b:
         29:77:b2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----