Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eebdf829-9c4c-3963-b265-113e425661a9.roa
File:                     eebdf829-9c4c-3963-b265-113e425661a9.roa (raw, json)
Hash identifier:          nJewfEKkV/yGt7WLHaZcWuj5IC2Fc7AMpMs6gI9Fb1A=
Subject key identifier:   7F:68:14:A9:C2:FA:04:CD:DD:BD:EA:9C:F5:26:E1:D0:9E:1D:27:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848AC60CD7E10ADF0EABDE5D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eebdf829-9c4c-3963-b265-113e425661a9.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     396580
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:cd:7e:10:ad:f0:ea:bd:e5:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=af52a456-93e1-49bf-b889-0c0f686f2e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:1e:ad:fb:07:eb:dc:3a:a1:72:78:94:95:
                    8e:93:93:34:3f:43:dd:d4:4d:d5:21:61:fc:b0:60:
                    6d:73:3f:13:e8:b2:6e:13:7b:90:f4:9e:cf:68:21:
                    5b:80:60:ac:3c:c8:89:db:98:2b:ae:08:36:3f:0c:
                    b7:d1:8a:02:73:7e:1b:0f:d7:7a:02:ca:fc:1d:be:
                    0c:23:3c:63:38:1b:30:54:4a:be:97:e1:4b:4d:4f:
                    9f:36:fe:4e:a1:1e:36:e5:b0:3a:ba:0f:dc:13:4a:
                    05:c0:a7:4d:c6:0e:ad:b6:ab:b7:62:1c:06:0e:8d:
                    f2:73:01:dc:55:7f:fe:03:c2:eb:1b:b6:aa:c4:07:
                    cb:09:6d:33:17:ca:c1:f8:27:fa:96:0b:59:c2:49:
                    88:de:7e:f1:39:ed:ed:78:18:81:a1:d8:14:84:1a:
                    a9:1f:f7:ae:c0:db:bb:ba:5d:b9:ae:b0:d5:8d:10:
                    a5:ce:c4:68:0e:42:50:0d:80:b2:c3:fc:2e:09:f5:
                    54:d3:55:da:3b:63:b0:b7:47:76:29:5d:86:0b:0b:
                    23:e5:43:38:91:0d:3f:74:7d:51:73:47:de:b4:d3:
                    81:f5:e6:16:75:eb:ab:b4:e1:53:d4:d6:2f:18:80:
                    6d:ca:a8:eb:e4:3e:15:c0:07:ee:2e:9e:e3:03:22:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:14:A9:C2:FA:04:CD:DD:BD:EA:9C:F5:26:E1:D0:9E:1D:27:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eebdf829-9c4c-3963-b265-113e425661a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:f6:a2:fe:89:54:41:6c:04:4d:06:44:0f:6b:d2:f5:ae:
         e6:3d:19:aa:37:b7:46:8d:93:62:1f:08:5f:4a:e0:b0:50:c8:
         27:5e:7d:fe:46:1a:d3:ed:d9:95:ef:a1:f6:89:a8:37:2d:59:
         dc:0b:07:09:8f:95:c5:c5:be:c1:4b:29:66:0d:22:e2:ea:11:
         fd:35:b5:cb:b8:c4:d6:77:a6:bc:1f:3a:c1:c5:11:5c:f2:0e:
         f3:53:bc:6a:b6:5a:a6:d4:d0:6c:4f:8f:99:12:b7:31:10:65:
         ba:ec:71:9f:2d:53:a5:89:c7:10:2e:76:af:b4:14:6b:a4:4b:
         2e:34:38:72:06:52:7e:14:fd:4e:c8:ac:a8:df:c1:62:84:2e:
         16:66:81:4a:8e:67:d5:21:59:82:13:0c:4f:fa:ca:b2:58:5c:
         27:a6:3e:dc:79:b4:e3:55:f7:5a:19:eb:ca:e4:10:76:73:99:
         56:07:d8:a7:db:32:72:90:b6:a8:1c:64:19:2b:87:2e:9d:ee:
         43:d6:fe:69:21:32:15:fb:68:17:fb:16:4f:59:09:08:0f:ee:
         62:be:07:00:a7:24:c0:c7:a9:a0:01:1e:52:3b:b6:9a:64:cc:
         82:eb:bb:09:fd:27:02:0c:8e:bb:e3:48:93:c4:3e:88:fa:1d:
         af:c2:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----