Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0adae0ae-f299-3458-a4b5-a898ebbc8b64.roa
File:                     0adae0ae-f299-3458-a4b5-a898ebbc8b64.roa (raw, json)
Hash identifier:          Gt/w+3r65ZGb/I0Pih24M9GZevn3gI/y6SWKvcsWgfE=
Subject key identifier:   76:2A:C7:BC:0E:D7:62:BA:63:C5:8A:57:E7:30:76:FF:8C:20:DA:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848906AB56F924E358A1CE80520
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0adae0ae-f299-3458-a4b5-a898ebbc8b64.roa
Signing time:             Thu 16 Jan 2025 13:38:18 +0000
ROA not before:           Thu 16 Jan 2025 13:38:18 +0000
ROA not after:            Wed 16 Apr 2025 12:38:18 +0000
asID:                     32651
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:6a:b5:6f:92:4e:35:8a:1c:e8:05:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 16 13:38:18 2025 GMT
            Not After : Apr 16 12:38:18 2025 GMT
        Subject: CN=1f9b08d1-9e59-4508-af7c-437d8f4e46e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9a:0a:03:e2:56:43:9b:02:6f:ea:12:d7:97:
                    bf:a3:5a:09:f7:9f:62:c2:ac:86:6c:56:30:f7:f2:
                    3c:7c:66:79:7b:65:9d:19:42:11:58:33:08:0f:8a:
                    3d:8e:ac:3c:1a:e0:48:78:fe:a2:52:bf:38:1b:94:
                    64:84:27:b1:e8:fe:57:86:3a:89:4c:7e:1d:c1:ee:
                    3e:cb:53:df:f9:b2:d9:d9:fb:95:fb:cf:9d:70:65:
                    97:ea:c1:05:c4:b0:28:ea:c8:5d:37:05:82:39:43:
                    9b:dc:be:64:69:6f:d8:14:d1:27:97:99:97:df:45:
                    72:7d:51:78:00:77:e8:f1:2e:f8:9a:dd:95:53:ce:
                    b8:3b:c6:38:39:d8:4e:e6:36:53:e3:54:16:b1:f5:
                    5c:44:ac:27:e7:74:e0:73:2b:72:fd:26:33:86:b2:
                    b7:da:eb:35:cb:ad:77:23:8d:d1:8a:82:de:6f:51:
                    85:a0:28:f0:90:73:43:84:41:3e:9c:60:93:a2:2b:
                    45:31:1a:04:30:6c:de:b6:fb:14:78:04:67:4c:a1:
                    ce:65:da:65:bc:13:d0:12:92:72:6b:b3:62:09:b2:
                    73:af:11:80:d3:30:95:ed:d6:f7:97:e8:81:24:4e:
                    85:a7:e9:56:d5:f9:ba:27:e1:43:80:b9:e8:19:b9:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2A:C7:BC:0E:D7:62:BA:63:C5:8A:57:E7:30:76:FF:8C:20:DA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0adae0ae-f299-3458-a4b5-a898ebbc8b64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:94:82:74:63:4d:2e:3a:2d:72:9e:3c:a1:47:d8:3e:49:63:
         7d:01:f8:ea:d4:f7:75:9a:70:95:a8:5a:32:8a:e5:ab:3d:a1:
         33:22:a6:82:bd:1f:a8:7b:e7:28:df:ea:38:6e:5b:91:9d:d6:
         71:7a:c2:17:1f:1b:70:f3:99:b4:70:c6:59:79:4d:d3:d9:72:
         0c:55:0a:64:dd:c7:e3:6f:16:0d:53:b1:01:5d:d1:2d:53:58:
         0c:b6:7f:5b:fc:fa:9d:22:67:ee:7b:58:71:d5:11:84:4d:ac:
         90:ab:bf:34:c9:ce:c6:41:9f:1d:0d:77:55:e1:4d:39:35:38:
         8c:ba:53:54:37:ba:36:47:cd:b2:a3:d4:fc:03:fb:d0:a8:5a:
         d5:fe:d6:7a:e7:ca:da:84:8d:29:15:6e:b3:8e:82:9e:ce:e9:
         04:b0:2e:f4:0c:46:6a:86:a3:0d:cd:e7:52:df:24:15:9f:b1:
         b7:db:f4:e4:9d:64:9a:72:4e:4f:0a:b4:25:c4:53:f3:bb:a9:
         af:db:a5:cc:6f:0d:b8:8d:24:ac:58:14:ec:0d:c1:5c:33:65:
         f7:0a:6e:ba:1d:6f:6c:19:d3:0d:c0:55:43:0d:25:57:2e:ad:
         0e:dd:05:7b:53:cc:7c:a9:06:76:55:a4:be:dc:58:ad:a3:6e:
         eb:fa:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----