Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ac16ce0-8579-3f19-a7db-07d0a355b4dc.roa
File:                     5ac16ce0-8579-3f19-a7db-07d0a355b4dc.roa (raw, json)
Hash identifier:          TQWaZBGshlQ2hAAxmyzAcDV64ObN2EZY1vbc4e/GBf4=
Subject key identifier:   FD:FE:A0:B6:62:9F:82:5E:E4:0C:47:8C:0E:54:0F:B1:66:0C:E4:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489BA0BAB06FD85A3DD12FE600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ac16ce0-8579-3f19-a7db-07d0a355b4dc.roa
Signing time:             Mon 20 Jan 2025 14:00:51 +0000
ROA not before:           Mon 20 Jan 2025 14:00:51 +0000
ROA not after:            Sun 20 Apr 2025 13:00:51 +0000
asID:                     396558
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9b:a0:ba:b0:6f:d8:5a:3d:d1:2f:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 14:00:51 2025 GMT
            Not After : Apr 20 13:00:51 2025 GMT
        Subject: CN=1ff9614f-7825-4004-b6ce-e2bd45cde65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ac:27:37:db:40:ee:94:d5:8a:a7:a6:84:33:
                    02:21:91:28:37:4e:6c:7a:56:57:25:69:61:bc:e6:
                    d8:76:23:41:80:39:15:c0:cc:aa:9a:f6:ad:72:23:
                    1b:bf:50:aa:0e:09:0b:c0:e2:ca:cf:eb:f5:27:93:
                    c5:2f:36:cd:48:b2:d0:ea:bf:c2:f6:0d:30:2b:e4:
                    59:82:9d:c8:35:6d:ab:c0:d8:73:1c:60:9b:4a:9f:
                    d1:da:69:0c:3e:25:3d:01:33:16:f5:ba:5f:70:af:
                    83:bf:92:ab:94:48:40:60:ac:26:97:7c:bc:54:46:
                    18:ee:fa:65:72:eb:42:fe:22:84:4f:fb:05:d2:93:
                    e8:0c:7f:a0:f2:cd:ba:89:93:de:ea:44:8a:0a:7f:
                    e0:ab:1c:39:48:38:1f:e9:bd:8c:17:e8:14:75:db:
                    10:0c:dc:32:5e:a9:e4:0c:d6:fc:84:ff:a6:66:2f:
                    7d:4e:a1:f5:f0:54:50:18:26:2a:68:18:94:aa:fb:
                    1c:9b:f9:65:de:1f:19:80:fa:c4:7c:8b:29:08:5b:
                    78:15:4f:71:54:4a:75:aa:7d:c9:f1:e2:6a:22:1b:
                    0c:17:13:fd:87:ca:35:03:bf:49:e0:8e:2a:f2:c4:
                    84:ca:10:b9:50:da:02:bc:80:3c:13:dc:a9:af:13:
                    95:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:A0:B6:62:9F:82:5E:E4:0C:47:8C:0E:54:0F:B1:66:0C:E4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5ac16ce0-8579-3f19-a7db-07d0a355b4dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:95:ce:03:0c:21:e1:67:f1:d9:ab:60:fd:2d:8a:b5:d6:43:
         8e:51:8b:09:20:f8:3b:22:4d:aa:a0:06:e2:ea:9f:3d:ab:f6:
         fd:a6:a0:75:45:c3:5a:96:f3:3c:7c:41:c9:e4:50:1b:91:60:
         a7:db:81:5b:fa:2b:c0:05:00:d0:45:da:dd:60:50:23:55:77:
         d1:df:0f:78:3c:ca:7b:25:a2:a8:44:73:f9:2a:e0:4a:ed:bc:
         41:6b:18:c1:29:37:27:54:1a:69:c2:06:0d:9c:13:87:bb:fa:
         1c:dd:fb:6c:a2:49:82:94:e5:c0:c5:ee:39:ce:ee:51:42:4f:
         64:67:72:fb:08:10:a8:17:6e:37:87:d1:0a:41:56:a3:50:a8:
         e3:91:e1:e1:06:9c:bf:cb:82:af:b1:00:59:9d:9d:75:cb:27:
         ad:84:f8:e9:db:c2:f3:7e:75:82:a8:1f:8f:70:91:c5:e1:8a:
         78:20:a8:31:bb:09:02:ec:69:0c:14:b0:aa:ec:ae:da:b1:cf:
         0d:46:58:9b:02:cd:67:32:37:73:45:db:0d:d5:51:d1:99:88:
         0a:ff:a2:33:b6:40:af:86:ec:bd:e1:58:07:e8:1f:c4:00:9f:
         48:3d:6b:d2:dc:7d:5a:10:d9:c1:47:34:38:b7:a6:e3:7e:2c:
         2e:ad:f9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----