Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6e9d8f-049e-363a-891a-f9a198b047ee.roa
File:                     dc6e9d8f-049e-363a-891a-f9a198b047ee.roa (raw, json)
Hash identifier:          5aURrYfu0FsL3rd4fF/Kbek8sE9K2SrrOFenUNC6YtA=
Subject key identifier:   16:B7:92:16:CA:F4:EB:50:5D:E3:94:94:F9:7E:16:3F:8C:63:AB:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858488DAB77A6C59B1A3CC60BB7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6e9d8f-049e-363a-891a-f9a198b047ee.roa
Signing time:             Wed 15 Jan 2025 14:00:51 +0000
ROA not before:           Wed 15 Jan 2025 14:00:51 +0000
ROA not after:            Tue 15 Apr 2025 13:00:51 +0000
asID:                     396597
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:ab:77:a6:c5:9b:1a:3c:c6:0b:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 15 14:00:51 2025 GMT
            Not After : Apr 15 13:00:51 2025 GMT
        Subject: CN=d60c8496-6c19-420a-8731-ba5a01fff0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:b1:86:f3:34:bf:8c:7c:4d:3f:7d:ef:42:
                    91:7e:ff:49:43:cf:12:95:fc:9a:27:0a:5d:c7:f3:
                    8c:56:5c:e3:e4:2e:6e:9d:43:e5:11:33:2e:76:d4:
                    32:19:0c:e7:76:e5:fc:6f:d5:62:2f:32:c6:09:c8:
                    44:bb:bf:af:3c:0b:32:5c:38:04:be:e7:57:1e:6d:
                    79:54:1a:52:e1:18:fa:f1:8a:41:87:5c:c4:79:04:
                    44:32:bd:21:e5:64:34:6d:78:c8:30:c9:fe:20:33:
                    a2:22:b0:9b:5b:07:a6:96:94:8f:94:c6:9f:81:47:
                    ce:8e:4d:c1:1a:1f:2a:7c:15:b1:20:22:42:10:0e:
                    fc:9b:61:a3:ee:96:fb:8d:75:9f:ce:d3:27:4e:5a:
                    70:e4:e5:0e:ac:b3:be:91:d2:46:25:63:01:d3:ff:
                    d2:57:3c:8b:96:31:94:10:70:37:4e:81:02:05:87:
                    19:d2:d7:41:8d:ae:86:89:fd:28:cb:6c:26:89:0e:
                    d5:3d:dc:09:5f:10:f2:5b:50:5d:1e:8c:38:96:b8:
                    ab:27:45:84:6c:92:77:3f:b4:65:9b:db:ac:9b:90:
                    8d:7e:6f:e2:3a:60:6f:4c:f5:de:72:0e:2f:f7:16:
                    cc:b0:c8:32:ab:13:c1:e3:b8:e8:e7:34:74:40:f2:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B7:92:16:CA:F4:EB:50:5D:E3:94:94:F9:7E:16:3F:8C:63:AB:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc6e9d8f-049e-363a-891a-f9a198b047ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:e0:6c:92:c4:36:e6:90:47:81:55:0b:bd:49:36:09:1f:af:
         85:d1:3f:c8:9e:67:da:05:5f:2f:54:f8:0e:49:e8:ab:dc:7b:
         ed:bd:70:cc:79:39:43:83:14:d2:85:32:2d:91:e1:7a:f9:c7:
         c1:91:0b:b1:67:de:67:9f:79:c0:ca:bd:11:5e:5f:25:04:31:
         aa:c0:01:8b:25:b2:2d:3f:78:58:a7:bd:66:2e:b1:0b:63:cf:
         20:1b:45:b0:d9:90:f0:a4:ba:5d:3f:3e:06:41:f8:51:e0:b9:
         0d:9b:82:63:61:57:52:ce:fe:83:4b:40:70:0a:e7:05:71:1d:
         96:82:be:cb:76:74:66:14:fa:c6:fd:d7:c0:6d:b8:ee:b5:72:
         21:5d:d1:d4:a1:20:77:cc:c7:aa:43:85:79:27:b8:77:73:6a:
         69:ad:e4:b1:65:21:27:dd:b0:03:77:d4:f1:a4:48:c5:13:af:
         88:90:d7:07:78:e2:58:9c:cc:f0:c9:ac:06:72:22:8d:68:64:
         75:79:ee:a5:b1:15:61:80:a0:b0:2f:08:b9:f9:81:9d:b6:79:
         b3:33:04:2f:8e:99:56:5a:1d:ca:0a:af:66:95:4f:06:84:3b:
         e9:9b:74:fd:0b:c8:6c:e6:24:f0:e4:3d:09:b4:74:14:fc:85:
         85:0a:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----