Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffd266d1-d51f-3710-b549-398deb09bc06.roa
File:                     ffd266d1-d51f-3710-b549-398deb09bc06.roa (raw, json)
Hash identifier:          3wm1SY4hhtglrv8SWKh0E2+MrukUGh7yQxNDC3jRUwI=
Subject key identifier:   BD:30:5D:53:FA:CA:60:58:F6:CD:7E:26:5F:DC:55:73:9F:5A:30:85
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584861005DC486AD23D1033602C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffd266d1-d51f-3710-b549-398deb09bc06.roa
Signing time:             Mon 30 Dec 2024 14:00:51 +0000
ROA not before:           Mon 30 Dec 2024 14:00:51 +0000
ROA not after:            Sun 30 Mar 2025 13:00:51 +0000
asID:                     396613
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:00:5d:c4:86:ad:23:d1:03:36:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 30 14:00:51 2024 GMT
            Not After : Mar 30 13:00:51 2025 GMT
        Subject: CN=5b1ef9be-ff43-493b-b7e9-f403bbe1e11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:4c:29:11:f6:f1:51:51:41:6b:1d:14:7b:
                    33:bb:5b:6f:e2:f5:c7:4a:8a:53:9a:14:fb:ee:7e:
                    70:4d:95:1e:05:40:15:29:77:36:98:cb:9d:b1:db:
                    c8:fb:16:d6:1f:48:f7:f1:92:0c:89:ab:5e:bf:ed:
                    0b:35:2f:81:4a:37:b6:d3:17:25:bb:ac:2c:c1:7c:
                    f3:48:89:32:91:c6:d2:bc:e4:bd:7a:4d:47:89:d1:
                    6c:db:12:ab:92:a4:cc:96:f1:84:73:f8:19:82:9b:
                    dd:0b:e0:f2:23:c2:6b:96:e5:4f:59:f5:38:e1:45:
                    a2:70:3d:e1:d8:20:8c:af:5e:70:54:51:9c:fd:d4:
                    6b:5b:55:50:39:9f:73:22:73:8b:55:9f:46:82:d4:
                    a1:47:b2:74:f8:b0:ff:0f:94:d9:69:84:87:98:4e:
                    e5:b4:86:dd:ed:f2:12:ca:92:b6:c5:80:b0:0e:b0:
                    08:f3:23:e5:5a:36:13:45:68:a6:0a:d7:a6:51:6f:
                    79:7c:a9:88:57:96:8a:d8:a0:f9:05:e6:b8:ab:43:
                    69:f7:7d:ec:9e:42:2f:77:dd:92:05:8a:a5:e1:08:
                    f9:90:91:be:4b:ce:c9:54:7c:3b:62:05:e6:a5:76:
                    b1:fc:d9:06:ec:12:41:2e:cf:ff:32:6f:0b:e9:4a:
                    cb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:30:5D:53:FA:CA:60:58:F6:CD:7E:26:5F:DC:55:73:9F:5A:30:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffd266d1-d51f-3710-b549-398deb09bc06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:cc:e3:e8:c2:2d:ef:3c:95:c0:3f:a8:ed:b5:78:ca:4f:48:
         53:23:b6:f4:16:8f:07:21:17:62:3a:60:1f:1c:13:13:64:b9:
         30:7e:42:4e:21:23:ee:32:5b:3d:3c:47:92:30:3a:fc:45:0a:
         f2:22:b2:cb:7f:3c:8e:e0:0e:d0:b8:69:68:84:36:ed:de:cb:
         0a:69:2f:31:76:74:52:0c:fe:4d:61:1a:b1:12:b5:42:e7:de:
         db:64:4c:22:39:71:43:90:67:a8:ab:a0:13:71:cd:0f:3e:5d:
         ed:c6:3f:e0:21:74:e0:a3:a1:74:38:a3:13:b3:72:07:af:0e:
         2f:36:74:cd:2e:3b:ec:4d:0a:54:ab:7b:40:da:d2:0c:46:31:
         09:96:62:a5:c7:8c:90:97:e6:f3:a4:af:07:87:6d:b0:7e:b5:
         72:e7:ed:fa:ed:4b:4e:e5:c1:01:32:fb:7d:bc:98:01:3e:1f:
         10:d0:5f:2d:72:ec:7f:c8:56:cb:e4:7c:04:27:e7:41:13:2a:
         21:f0:9e:79:a4:e8:44:14:a6:98:83:73:1c:0c:15:8d:b5:ab:
         22:18:d1:77:dd:05:4c:f6:5b:c4:1c:82:44:bb:42:ef:5b:96:
         64:61:5e:94:4c:4d:b6:c1:f5:d0:3d:94:69:7f:34:f0:da:0e:
         20:24:63:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----