Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9acf3482-561c-3d5f-942c-2cdf97af1a2f.roa
File:                     9acf3482-561c-3d5f-942c-2cdf97af1a2f.roa (raw, json)
Hash identifier:          SSXWszZ+ChvEw/1wGEd2XMcgGSl9hfuE9byYn3LF+kk=
Subject key identifier:   CA:20:81:0F:3F:F8:94:ED:E6:E2:70:B5:02:D8:63:9E:45:66:F1:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183CD612594A5A7DA37A2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9acf3482-561c-3d5f-942c-2cdf97af1a2f.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     36616
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:cd:61:25:94:a5:a7:da:37:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=5fb5f50d-c3e8-4458-b49b-e28e53df96b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:cd:74:71:78:83:ea:17:71:e6:8c:42:68:
                    b1:85:48:5a:9f:2d:f7:1b:c1:57:6f:ac:83:c4:65:
                    d6:11:95:64:86:32:01:e3:71:a8:52:37:a6:5a:6c:
                    75:19:92:8b:f6:9f:f5:6a:d0:54:c7:42:e8:fa:09:
                    a9:be:10:84:6c:89:70:f4:26:ea:3f:82:f1:c0:39:
                    69:f8:d4:62:0b:57:16:d0:49:ad:3a:9b:24:2d:3e:
                    56:08:37:ed:22:e3:e7:d2:88:ef:5c:42:b9:f9:4e:
                    1c:b6:a7:16:09:59:e9:b2:88:66:9a:dc:4d:ab:03:
                    68:1d:97:95:13:1a:1b:ff:b9:85:ad:23:ac:45:56:
                    2f:b5:cf:25:92:b5:93:6d:a8:15:93:b9:fc:24:1a:
                    8c:18:fb:72:82:1a:dc:62:a5:ba:eb:4f:c3:01:87:
                    89:79:65:30:ad:d3:08:98:d6:35:ee:0d:e0:ed:d4:
                    ae:5b:32:10:72:4e:27:cb:cc:79:8f:0e:a8:45:e4:
                    d0:5c:bc:5d:c1:8d:04:32:ad:2c:a5:26:61:b3:01:
                    52:74:03:63:0e:88:19:d9:9d:b2:a0:2c:44:e7:34:
                    ef:b2:25:34:a6:53:c5:79:ee:14:92:82:a7:c7:08:
                    cb:cf:88:08:9b:27:ed:3e:9d:41:d2:50:dc:91:b8:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:20:81:0F:3F:F8:94:ED:E6:E2:70:B5:02:D8:63:9E:45:66:F1:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9acf3482-561c-3d5f-942c-2cdf97af1a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ce:38:75:23:6a:b5:38:52:df:4e:90:7a:8b:74:8b:c1:d2:
         3d:3c:94:e1:36:43:87:fa:d6:17:7e:e4:3a:fe:e9:74:b8:79:
         44:f4:ea:88:aa:84:fc:61:aa:0f:0f:98:7c:d2:27:c2:30:f4:
         e2:4f:2b:f1:a5:e4:fb:2b:be:6b:8e:8b:7f:b2:e8:59:cf:3d:
         7e:00:4b:f8:e7:7f:44:a8:45:8f:ea:3e:81:73:24:9b:00:e7:
         b8:c5:74:33:5c:78:30:cf:d3:d2:f9:19:53:45:a3:2e:01:6f:
         a5:78:30:6d:e8:06:23:d3:c3:82:45:60:ad:41:a9:27:43:7b:
         66:5a:f5:3e:0e:05:b0:d1:b0:39:1d:9a:f5:d3:4f:7f:79:2f:
         3e:ca:0c:8b:38:1f:db:be:5b:b5:86:5e:28:25:69:12:48:05:
         3c:63:5f:68:1b:58:da:09:63:9e:ff:fc:cb:ee:2d:6c:25:b9:
         64:f1:fa:e3:80:a9:6b:7b:e9:0f:2f:b5:48:8e:84:6a:2a:9a:
         8e:71:cf:70:6f:1f:be:b7:d3:52:0e:6f:b1:35:c3:39:a6:ba:
         43:00:5e:43:08:1e:fb:de:8e:c5:a2:71:ca:ee:9e:57:2a:d1:
         41:09:d5:f8:ab:d4:9b:2e:c4:9f:90:da:a3:ae:e7:08:55:b4:
         20:5f:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----