Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ae8f7b-f5a6-3766-874c-85138b8e214c.roa
File:                     c8ae8f7b-f5a6-3766-874c-85138b8e214c.roa (raw, json)
Hash identifier:          znjlwd4fP/YPsxhy6TyQBLx3QbrmFcJ7Q5rgpRcrDqE=
Subject key identifier:   F9:8E:4E:AA:DC:86:63:46:50:1A:41:8D:64:1B:AA:28:C8:3F:E1:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489E5E419D8349B920B8B2AE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ae8f7b-f5a6-3766-874c-85138b8e214c.roa
Signing time:             Tue 21 Jan 2025 13:34:31 +0000
ROA not before:           Tue 21 Jan 2025 13:34:31 +0000
ROA not after:            Mon 21 Apr 2025 12:34:31 +0000
asID:                     396585
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:5e:41:9d:83:49:b9:20:b8:b2:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 21 13:34:31 2025 GMT
            Not After : Apr 21 12:34:31 2025 GMT
        Subject: CN=eb611eea-946e-4e1f-9097-65a95c784ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:55:87:c3:24:84:a0:58:1f:49:75:a8:c3:
                    90:db:b4:0a:68:cc:ba:16:43:c9:bc:4c:73:d8:ca:
                    94:e7:09:27:f1:98:68:91:0f:17:5d:50:1c:3b:b6:
                    2b:97:4e:51:df:7f:0c:d4:59:d5:db:1c:d3:26:13:
                    19:f5:7a:4b:35:4b:b0:bd:58:2e:b6:8a:cd:b9:97:
                    89:74:d5:71:90:3a:51:b5:0c:8e:db:eb:e0:7a:49:
                    a6:73:a6:73:a6:f7:ef:91:d2:57:1f:5e:59:9a:1d:
                    fe:67:ad:2a:15:a7:b0:ad:65:3c:c8:6b:7f:96:7e:
                    12:59:fb:36:f9:89:33:0d:81:89:e1:72:7b:94:87:
                    d7:49:58:45:cb:de:3d:eb:f0:67:0e:66:c2:bd:30:
                    96:74:28:90:57:0b:d4:06:bd:6f:c3:b4:a9:37:5a:
                    94:04:e2:34:54:0b:ec:da:f0:f6:84:ba:94:ce:00:
                    4c:cf:fe:42:44:88:8f:fb:a6:06:be:af:09:8d:50:
                    61:b4:dc:57:31:6d:a9:da:8c:01:67:44:29:d4:d9:
                    27:bb:f4:ea:30:80:00:70:b6:3d:fc:03:85:40:62:
                    63:6b:d1:d1:42:d7:4b:00:d8:d5:12:63:41:1f:85:
                    51:2c:46:32:32:66:1c:f7:be:d5:28:39:07:9e:b3:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:4E:AA:DC:86:63:46:50:1A:41:8D:64:1B:AA:28:C8:3F:E1:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ae8f7b-f5a6-3766-874c-85138b8e214c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:5d:36:59:52:42:5f:d7:2b:e2:18:88:a3:3d:21:5b:22:5d:
         3f:72:6d:3e:40:c2:cd:25:d1:67:26:ce:0b:1e:e9:b2:6d:02:
         6f:9e:fa:42:82:3e:6b:3e:41:72:81:11:e1:c4:03:b9:fd:84:
         23:d7:4f:cc:c6:ae:c1:7c:59:20:18:a6:0e:a4:fd:48:d2:24:
         bd:b2:cf:41:ba:4b:37:2a:96:b9:f3:41:a7:96:70:10:96:cb:
         2b:14:c5:f8:b1:40:a3:9e:55:dc:e6:4d:96:82:d6:a8:d5:d5:
         cd:76:52:4a:6a:8f:f3:89:69:06:b9:fd:f7:3b:6d:4b:87:d3:
         bc:86:9a:ec:ff:de:4f:93:50:13:1f:55:07:f1:2a:74:7a:06:
         db:e6:28:ee:e9:73:8a:da:32:3b:16:eb:fb:e1:5d:dc:93:4f:
         4f:99:87:db:c5:ff:03:92:6b:54:02:73:81:ad:61:16:c5:cf:
         94:72:63:7a:6a:6d:da:68:5e:c5:b2:97:04:cd:5f:6d:a1:d1:
         46:bb:5c:e2:8f:a4:43:58:47:88:2c:32:ea:a3:e1:1c:8f:32:
         16:be:af:b3:ae:55:08:44:36:c1:c3:f7:e3:36:51:4b:07:05:
         51:43:aa:44:1a:78:45:9e:86:2b:3c:73:c3:0d:a6:f8:46:7a:
         5a:40:76:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----