Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
File:                     f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa (raw, json)
Hash identifier:          Q+N0HiRjiOXLBcQD8/OfewhcXmfnzQRGqKkGYx6xZug=
Subject key identifier:   0F:95:64:3A:F7:DD:3E:98:55:37:B3:70:C5:A4:F3:6B:91:E6:B1:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584858A04E0A37DA4BD9C1F71280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396578
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:4e:0a:37:da:4b:d9:c1:f7:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=8fab7f92-35e5-4de6-bd80-bd53d5c0f676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1e:14:e7:54:d0:a9:8a:79:d9:ca:f3:bc:69:
                    ff:48:a5:51:af:a6:73:49:03:99:fe:32:7d:52:72:
                    5e:b4:a0:9a:f9:20:94:2f:d5:9e:b6:26:e4:91:be:
                    36:db:9e:11:c5:8b:92:23:f4:36:7e:a5:51:3e:3a:
                    a9:e7:75:83:c6:32:3d:64:c3:db:c1:2f:ed:43:f6:
                    50:f7:00:ba:a6:50:0e:9e:c2:40:c0:5f:35:67:43:
                    6a:d0:3b:80:00:04:0e:05:3b:90:5e:0d:e1:cd:42:
                    4c:30:1f:89:f9:ce:93:1b:e7:fc:3b:95:bd:52:67:
                    00:d3:87:59:ac:bb:22:26:93:38:3c:0c:2a:9e:e5:
                    59:92:d7:cb:4c:50:c2:fb:b3:0f:22:0b:1a:e9:63:
                    53:7a:a7:83:ff:03:cf:96:b1:99:5f:ae:30:de:98:
                    3a:11:4d:bb:44:c1:a5:1a:61:1f:ec:5c:f3:b1:c6:
                    a7:59:9a:5f:5a:8d:b8:17:28:9d:c9:73:36:4b:ad:
                    31:fa:c4:15:4b:7c:41:80:ea:2d:65:b6:6d:13:2c:
                    d3:ce:38:f1:5d:38:3b:a4:06:ef:b3:a3:d1:59:2f:
                    59:e8:35:5e:4d:89:b1:dd:4a:78:49:ca:e5:40:42:
                    b2:7a:1f:df:27:11:c0:c4:8e:3d:61:33:d2:3d:b8:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:95:64:3A:F7:DD:3E:98:55:37:B3:70:C5:A4:F3:6B:91:E6:B1:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ded0f0-0269-3614-8f0a-f69c5e22dc40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:d6:9a:7b:c3:8f:7c:db:bb:12:e5:d2:70:86:a5:dd:36:
         89:b6:78:69:93:b3:34:7e:f3:dd:da:22:91:be:df:03:1d:3d:
         ae:37:dd:77:72:73:33:dd:00:fb:d4:3a:8e:8f:47:ee:c2:57:
         ca:23:6b:ca:9f:79:b9:63:23:2e:88:ad:a2:25:cb:35:00:75:
         62:8f:25:ae:60:11:e2:c3:1c:96:92:01:38:e2:0f:fa:3b:14:
         97:00:df:c2:8d:b3:97:48:32:eb:75:05:0c:f7:b1:31:2b:64:
         1e:01:02:c0:45:66:71:04:5f:8d:47:68:be:55:34:a5:94:54:
         f6:3c:3f:5b:d1:dc:0e:aa:ea:43:60:30:74:11:3b:33:54:af:
         85:9e:d6:35:b3:25:a1:af:a1:cf:e4:cf:74:1b:46:21:9b:79:
         78:8a:d6:db:1d:a8:80:d7:bd:ce:c6:5c:95:a8:06:92:ab:da:
         96:b2:f4:4d:95:b5:93:c1:9f:8b:07:95:2a:7b:8d:ba:d5:60:
         17:8e:ea:30:9a:19:76:c1:94:8a:e9:1a:b7:6d:34:ba:90:3c:
         df:65:ed:2b:9e:46:8c:87:13:46:db:84:58:c9:94:28:f1:c6:
         cd:2b:13:5e:2f:76:5a:f2:57:86:f9:4a:44:4a:bb:ba:29:ac:
         6e:c3:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----