Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1454e91-6f5f-3b91-8b2a-a83205c33dfe.roa
File:                     f1454e91-6f5f-3b91-8b2a-a83205c33dfe.roa (raw, json)
Hash identifier:          GCdkXpsgWscz7X4c/dB2jau4qGKt0EIew0sQJ0CJItI=
Subject key identifier:   34:C6:9D:FA:DB:10:5B:70:9F:65:CD:CF:CC:2D:14:5A:A9:A8:62:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E451E27170C6FC465DE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1454e91-6f5f-3b91-8b2a-a83205c33dfe.roa
Signing time:             Tue 21 Jan 2025 13:34:33 +0000
ROA not before:           Tue 21 Jan 2025 13:34:33 +0000
ROA not after:            Mon 21 Apr 2025 12:34:33 +0000
asID:                     396568
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:45:1e:27:17:0c:6f:c4:65:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:33 2025 GMT
            Not After : Apr 21 12:34:33 2025 GMT
        Subject: CN=afade522-3a88-4fdf-ac57-13f9834da28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:83:e2:28:46:1f:af:cc:e6:22:a2:8a:c4:
                    b5:d3:bc:8d:a5:bd:19:a4:5b:67:f9:6d:ec:15:73:
                    56:5f:e8:c1:60:95:ad:44:36:70:b6:c8:d7:d3:c9:
                    f0:e9:30:e3:2c:cf:48:75:ce:ec:0e:49:7a:bb:e7:
                    fb:9f:1d:ed:54:ca:e8:37:20:a3:6f:0f:f2:01:3b:
                    62:8c:d9:20:98:53:72:e2:fe:3c:6d:e3:ac:c1:b4:
                    33:be:5b:65:dc:52:27:b5:d5:60:60:79:28:7a:2f:
                    8e:3b:f6:49:a6:71:3c:67:4c:7f:f0:7f:d9:f5:60:
                    e6:1f:6e:41:bd:19:87:bc:2b:b1:00:3e:16:c3:d3:
                    ee:f7:2b:4c:d4:96:90:21:e6:30:41:a0:36:bd:65:
                    ff:a3:b9:79:f3:17:1e:95:9d:3c:a9:22:db:e9:62:
                    98:e3:94:67:44:28:7e:07:e9:7d:31:de:e0:47:d8:
                    fb:7a:c2:4a:72:59:19:93:8d:18:34:f5:50:8d:44:
                    ad:82:12:35:9f:94:25:b4:35:ef:b1:9f:ee:25:b3:
                    03:81:87:f3:e8:99:de:e4:91:41:95:00:73:77:77:
                    ac:39:53:a8:5e:fc:0e:99:7b:9a:cc:2a:ec:f1:48:
                    10:b5:16:56:e6:07:4d:27:c4:4e:00:ac:d1:fe:68:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C6:9D:FA:DB:10:5B:70:9F:65:CD:CF:CC:2D:14:5A:A9:A8:62:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1454e91-6f5f-3b91-8b2a-a83205c33dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:10:5f:7b:da:7c:3a:12:ae:f5:74:d4:88:78:8f:d2:6c:61:
         5c:46:2e:12:e2:e7:ec:f2:d0:8f:df:5d:dd:51:80:7b:d8:ee:
         45:51:94:d8:8a:48:13:8d:ad:13:b5:14:ea:ec:ac:ef:66:72:
         f9:bf:9b:ad:55:4b:d5:e7:3e:cc:4c:e2:e9:f6:06:b6:66:e4:
         11:3d:62:85:78:5f:83:57:1a:61:e6:69:9e:b1:86:a1:bd:3c:
         ee:20:5c:72:8f:59:d6:d1:8d:f6:2c:1f:a6:65:b6:ec:c6:c0:
         0a:66:ca:6d:a8:8a:0a:24:7c:f5:38:54:93:61:b6:eb:64:b1:
         e3:71:ba:7f:7b:6e:c2:77:24:95:2b:73:a6:ed:eb:dc:1f:4e:
         8f:52:b6:e6:75:0f:b6:b9:eb:1f:7c:21:ea:86:f2:d3:db:b1:
         59:b9:bd:77:a0:11:ad:08:55:3e:0e:a0:9a:61:6c:fc:fa:eb:
         1b:7a:f0:86:9c:a9:68:86:2d:d1:22:f9:ae:1b:9a:4e:2d:28:
         aa:cd:c1:d7:c7:f9:a0:85:73:51:42:cb:b7:a9:98:dd:ed:da:
         81:60:60:9e:2b:1a:e4:53:a6:97:93:38:60:6a:d8:d8:9d:4b:
         ae:d1:e4:c5:12:17:26:6d:bb:d2:ae:e4:a4:8e:94:04:8a:21:
         1a:ce:0c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----