Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d0007c-f8f2-387f-b037-5c25e8e97bef.roa
File:                     e9d0007c-f8f2-387f-b037-5c25e8e97bef.roa (raw, json)
Hash identifier:          nPE1O+piOPYZy6MTTW4hR++sb0lZvgnByF5S1QArqMg=
Subject key identifier:   62:0B:31:20:BF:52:7F:30:53:0C:F0:7C:78:E8:66:AB:F0:5E:70:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842431B1ADD442FA9FCF0DD24
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d0007c-f8f2-387f-b037-5c25e8e97bef.roa
Signing time:             Thu 19 Dec 2024 13:45:27 +0000
ROA not before:           Thu 19 Dec 2024 13:45:27 +0000
ROA not after:            Wed 19 Mar 2025 12:45:27 +0000
asID:                     396572
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:1b:1a:dd:44:2f:a9:fc:f0:dd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:27 2024 GMT
            Not After : Mar 19 12:45:27 2025 GMT
        Subject: CN=b81cca19-194b-4570-8780-cb6cb08fe9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:ce:81:d7:ef:87:d9:0d:83:4b:5d:3c:f3:
                    5d:87:34:5c:4b:23:e6:fd:ad:51:e7:74:f6:ec:70:
                    7d:65:45:6c:40:41:a8:3d:e1:0b:0f:12:fe:43:4d:
                    10:0b:cb:ea:47:2c:a4:be:60:fe:58:d3:f0:47:01:
                    48:a8:14:e5:fc:5e:39:0c:d0:16:ec:f5:a0:fd:38:
                    95:bd:50:8e:06:dd:00:f3:a1:55:ea:5e:45:70:c2:
                    2e:54:32:f7:18:f4:53:d6:fe:bd:87:30:f2:de:6b:
                    58:26:9d:47:88:87:f1:d2:fd:bd:90:b8:2f:2c:12:
                    a9:df:4e:d0:a8:75:56:43:d5:77:8c:61:03:b1:a8:
                    1f:b6:d0:6e:ec:ee:9f:48:8d:23:ef:4f:01:6a:fd:
                    fa:0d:91:4d:4f:df:6f:fe:33:37:e9:03:ea:f0:c1:
                    30:c8:92:52:b5:87:bc:68:0c:5d:5f:b4:23:d8:62:
                    e4:73:7c:09:c9:92:c2:9b:5c:72:4d:a9:fb:cf:eb:
                    2c:7b:f9:f8:fe:29:4d:9b:64:05:5b:55:c6:28:8b:
                    8f:86:b1:9b:92:2b:96:6e:9e:9e:b1:ce:1a:84:c1:
                    07:8a:2d:f7:0a:70:d4:20:7e:e6:08:17:34:f4:08:
                    c9:36:c6:53:7f:99:38:d7:c9:cd:24:11:22:81:36:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0B:31:20:BF:52:7F:30:53:0C:F0:7C:78:E8:66:AB:F0:5E:70:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9d0007c-f8f2-387f-b037-5c25e8e97bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7b:2d:c5:92:13:c7:13:1e:ff:76:75:66:53:3b:93:72:52:
         a6:c8:80:b7:6f:0c:ee:ce:f8:31:ed:5f:3d:f4:25:a0:11:5b:
         75:dd:58:ec:ec:4d:10:45:d9:3a:40:e2:1f:b9:7c:4f:91:a2:
         4b:16:d7:cf:dc:62:4b:c0:2b:8f:aa:a7:5a:35:03:f4:ef:09:
         1c:59:9c:1e:96:5d:e0:50:34:05:9d:59:79:06:34:aa:39:0b:
         22:2b:c0:23:98:53:d4:ee:f4:7a:53:0b:e2:c1:85:a3:9e:a5:
         1b:ab:90:22:29:03:c1:2b:1d:00:4d:d2:d3:ec:e6:9c:31:55:
         65:68:9a:1c:0d:81:b6:d4:7f:71:53:a9:af:83:9c:24:ef:ca:
         ef:f0:a2:11:33:e7:2b:f9:76:21:65:26:fe:69:4a:0d:79:ae:
         93:2c:b7:6e:15:dd:99:3f:35:ef:e6:59:a7:96:45:1e:f1:8b:
         14:4a:b0:69:39:dc:c4:c3:ea:31:95:cb:95:e7:d4:a2:10:de:
         21:f4:91:20:8a:f6:19:12:d4:35:9e:ad:37:d8:da:5d:d1:26:
         61:b3:d2:fb:18:02:1d:92:89:b9:ff:ac:b9:32:10:93:90:7f:
         d5:ce:c3:0f:08:57:2d:9c:a8:6d:31:03:b1:44:d7:c2:80:dc:
         4e:c7:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----