Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f0f592-4463-34dd-bf6a-262ffe682602.roa
File:                     32f0f592-4463-34dd-bf6a-262ffe682602.roa (raw, json)
Hash identifier:          CBsw+fhzoYzT771lM55EynrGrt5swXL3kzqj9hMjdog=
Subject key identifier:   8D:FF:BD:2F:4A:73:D3:47:96:AB:AC:00:03:10:3E:DB:72:C2:1A:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F59052F825E6CF92C86AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f0f592-4463-34dd-bf6a-262ffe682602.roa
Signing time:             Thu 23 Jan 2025 13:38:26 +0000
ROA not before:           Thu 23 Jan 2025 13:38:26 +0000
ROA not after:            Wed 23 Apr 2025 12:38:26 +0000
asID:                     396562
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:90:52:f8:25:e6:cf:92:c8:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:26 2025 GMT
            Not After : Apr 23 12:38:26 2025 GMT
        Subject: CN=ac2af2e7-cada-448c-8ab0-876c23c70ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:60:52:cb:59:9c:49:08:88:c5:c5:df:77:
                    71:fc:b2:2a:f7:b1:53:51:26:e9:dc:5e:a8:e5:6a:
                    f4:e6:25:26:1f:75:f6:f1:79:26:16:a7:34:cc:d8:
                    84:f5:99:cc:db:2b:e9:dd:8e:3f:16:3e:7a:b8:c3:
                    84:40:99:a5:d4:0d:5d:8e:95:a8:f0:f9:75:81:f4:
                    23:8f:e9:51:57:50:f9:6b:4d:5c:69:9b:5c:41:71:
                    7b:1b:22:fa:f2:03:d6:99:47:d4:cd:78:d0:1c:e0:
                    dc:69:f1:55:e4:61:b6:ae:d2:23:d6:e3:16:32:82:
                    d9:d7:00:5d:e0:2f:d7:a0:51:f7:2a:1c:b4:80:bd:
                    3d:d6:fc:6f:72:f5:4f:12:6f:b3:1c:e5:c0:fa:1b:
                    45:5a:a7:76:b7:bf:bf:8e:06:b6:23:0a:4c:ab:70:
                    43:a9:5c:2d:c5:fb:8f:ea:b5:22:2c:7a:32:ef:6f:
                    db:e3:b7:ef:55:25:e8:b6:f9:e5:a3:ee:74:56:18:
                    5c:fc:e3:9a:3f:fc:b5:ce:60:19:85:94:8b:1e:54:
                    ca:fc:b8:32:a2:3e:2c:a3:a3:d0:11:e3:52:3e:50:
                    db:32:fa:8e:f3:c2:37:a4:08:67:b4:51:a2:1b:8b:
                    51:47:b0:41:e8:c6:d1:b5:06:87:32:34:53:a3:d2:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FF:BD:2F:4A:73:D3:47:96:AB:AC:00:03:10:3E:DB:72:C2:1A:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32f0f592-4463-34dd-bf6a-262ffe682602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:4b:a9:da:73:7b:a7:62:82:3e:c1:49:af:fd:24:b9:54:59:
         c9:ae:7e:5a:eb:3b:1e:62:f4:95:53:75:ee:11:c9:e5:77:a4:
         a4:f1:c5:82:03:2e:53:95:ce:4a:75:8d:d2:a9:0e:97:bb:da:
         63:89:8d:f8:45:7b:a4:bf:22:ef:3f:9c:40:74:c3:00:67:3a:
         53:3f:04:34:ce:80:43:3a:98:6d:9e:de:09:7e:80:d4:c7:df:
         5b:a4:56:99:91:a2:ed:db:fa:8c:59:0a:5a:30:d0:29:7a:ab:
         34:21:32:5d:bf:59:e8:54:a1:09:6a:47:66:c1:e6:75:fe:4d:
         17:6b:20:86:6a:85:ab:8a:69:41:05:88:09:df:ce:ea:d4:5a:
         ac:ad:c7:f1:40:30:92:ec:d6:f1:06:bc:0f:18:68:a7:9d:33:
         6b:c8:d5:ff:98:d4:5f:9e:70:23:30:38:fc:41:a2:31:32:bf:
         a0:a5:50:45:72:99:b0:0f:13:86:cc:f4:cf:c9:0b:0c:7d:66:
         71:71:34:f7:21:d1:dc:6d:77:a4:14:21:b7:f5:c6:c5:ce:f1:
         a0:5b:44:89:58:9d:43:43:52:70:75:8d:6e:d3:de:7b:27:25:
         55:e4:36:a9:4b:65:06:09:ec:5c:b0:37:a4:5b:76:9e:78:d9:
         40:21:f9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----