Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86739160-c52b-363c-b2cb-cc78423272d0.roa
File:                     86739160-c52b-363c-b2cb-cc78423272d0.roa (raw, json)
Hash identifier:          9mmcQENP2DixZMy0yQAeBJz9yVfgVmgfUK9w0nK4dS4=
Subject key identifier:   A5:16:B4:A6:E1:9C:E4:C1:AE:59:16:B5:9A:2D:17:C8:00:64:F5:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E55DBAF9C2347EFD3780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86739160-c52b-363c-b2cb-cc78423272d0.roa
Signing time:             Fri 29 Nov 2024 13:58:29 +0000
ROA not before:           Fri 29 Nov 2024 13:58:29 +0000
ROA not after:            Thu 27 Feb 2025 13:58:29 +0000
asID:                     396574
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e5:5d:ba:f9:c2:34:7e:fd:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:29 2024 GMT
            Not After : Feb 27 13:58:29 2025 GMT
        Subject: CN=5baceec9-72a0-4150-ab9d-7d313fe7655a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:1a:62:60:1d:14:08:4d:db:29:05:de:e6:
                    1b:df:39:e7:34:8b:5f:2f:89:c7:3e:8c:be:e5:cd:
                    01:71:84:ea:24:54:f9:3e:04:59:16:a2:35:39:b3:
                    ce:6e:cc:b3:77:4d:bb:3a:80:aa:6d:94:5f:26:ac:
                    8f:7e:ba:53:67:f9:53:09:60:97:81:b7:46:4d:8e:
                    79:d8:94:8a:95:4f:fa:94:f0:19:5b:43:c1:07:c2:
                    7d:2c:77:45:b6:15:84:4c:77:d9:5d:13:e9:23:cf:
                    0a:50:4b:6a:e8:7d:de:8e:79:e3:72:ba:4b:d8:7d:
                    82:4a:a4:27:25:31:69:59:a1:98:cf:8e:b6:52:62:
                    49:13:d6:14:3c:ef:f4:95:bb:5f:1a:73:1f:5b:9d:
                    ef:19:2b:40:7f:d5:9e:cb:16:27:d6:95:4b:a4:db:
                    15:40:b8:12:42:b7:10:c8:bb:97:ea:80:49:ea:cb:
                    d0:b2:f7:b2:1e:16:07:85:75:59:6c:a0:72:10:bd:
                    62:e7:70:f1:c5:f3:f5:9a:ea:6d:7d:df:66:ff:c7:
                    ce:1d:23:3e:79:81:71:5e:bc:8c:f1:2d:dd:bd:c3:
                    4c:f2:3e:82:3c:1e:be:ea:48:df:5c:42:b9:bb:31:
                    33:fe:f2:f6:0d:45:53:68:5d:91:a5:33:ec:89:bf:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:16:B4:A6:E1:9C:E4:C1:AE:59:16:B5:9A:2D:17:C8:00:64:F5:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86739160-c52b-363c-b2cb-cc78423272d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:db:71:39:4b:52:14:7c:1b:48:af:c6:5a:6d:d2:db:d5:
         ba:de:97:59:2c:ff:6c:33:fe:52:33:96:b1:ff:4b:5e:a5:74:
         e9:e4:a6:da:1c:08:c7:17:49:77:d7:b1:d1:76:45:30:ab:28:
         ca:c7:a4:98:9c:9c:64:7a:e0:0f:77:64:36:2a:44:eb:72:23:
         6e:62:00:f2:ad:1f:89:1c:5d:62:9e:79:3a:0e:7e:13:91:fa:
         68:c8:6b:41:4e:63:45:e0:32:8c:ae:23:dc:34:3f:7b:a2:ad:
         06:b7:32:dd:b4:de:c4:3d:e1:08:af:b7:58:bc:7e:9b:1b:be:
         8d:fb:b9:61:4e:ec:4b:28:29:1d:05:9b:af:e9:c0:aa:60:e8:
         e4:e3:e1:86:16:86:6f:b8:2b:2f:3c:a9:73:0e:f9:a7:b8:76:
         94:52:77:d3:8e:13:f1:18:36:53:2a:e1:fa:ba:d5:2a:a2:59:
         b9:b4:04:3d:d3:b5:e9:a1:04:64:5e:03:5c:58:36:8e:8e:d4:
         c4:08:25:44:54:03:36:bc:cc:fa:de:b6:67:26:6c:a7:89:8f:
         9d:04:24:e6:4a:e0:b6:93:e3:c5:5e:94:3d:63:df:db:96:6b:
         81:eb:6e:63:9f:eb:dd:80:28:b6:83:fd:e5:d5:07:e5:a7:f0:
         25:6b:a0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----