Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa
File:                     21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa (raw, json)
Hash identifier:          W2OMzqU9z/rPBI61D/QYrvjceA9DrfNFA2dkAcaWOcI=
Subject key identifier:   26:47:93:31:8B:53:FD:6D:AA:00:1F:C4:49:E0:05:2E:A1:4A:75:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339ECD11740551E25F2DE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     20172
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ec:d1:17:40:55:1e:25:f2:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=aa545e3f-1df5-4e16-9ec5-9eb0dbdabdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:b0:3e:4b:76:5d:16:8a:da:24:7b:c0:a3:
                    be:19:1d:0a:0d:98:b9:bf:51:56:b2:7c:60:a0:00:
                    08:3d:ad:39:42:1d:f3:3b:18:8f:bd:1e:73:1d:c1:
                    eb:cf:63:ff:f7:57:48:3f:d9:a8:cd:a6:c6:5a:c4:
                    77:56:6c:2c:b1:dc:68:0e:6b:4e:ed:25:93:ec:6a:
                    99:5d:03:20:38:6f:1b:b2:4c:ea:dd:41:c0:d8:19:
                    d6:b5:c3:94:96:29:6c:5a:f7:cf:0b:25:fd:8c:7c:
                    18:41:21:8b:c8:f7:20:3e:ed:86:4f:23:91:98:0e:
                    d9:be:2c:3b:e9:a0:c9:b8:8b:40:f2:e0:dd:78:c5:
                    65:d8:c1:33:ca:45:f4:35:db:06:72:87:5a:a7:4c:
                    56:8b:3f:35:91:6e:11:74:16:76:7d:3f:a1:a1:88:
                    b4:36:19:b8:ce:b0:8d:da:d1:22:28:ee:fd:cf:d3:
                    3c:51:f1:33:9f:aa:5e:20:19:f7:0c:fe:15:dd:bb:
                    2e:de:dd:f9:2a:6e:c9:6e:25:ff:66:21:96:43:97:
                    72:9f:42:95:01:75:5a:b0:2e:c0:ea:8c:30:5a:c6:
                    91:43:e9:b3:66:a4:44:3f:98:c1:36:f1:29:32:57:
                    2e:d5:72:33:f8:d5:86:4b:57:7e:f1:4b:ef:d9:cf:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:47:93:31:8B:53:FD:6D:AA:00:1F:C4:49:E0:05:2E:A1:4A:75:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21c462cd-aa4e-35de-ba92-b564b3ac44ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:ac:78:dd:b8:8d:a9:d1:9b:90:06:7c:99:60:20:1a:30:
         11:fd:9f:5a:5e:35:f7:7d:74:1e:cb:49:c0:5d:c4:83:fd:ee:
         6a:a6:03:57:16:9d:8b:a2:ff:cc:cf:bf:30:0b:68:4d:eb:03:
         0b:2b:2c:96:8e:fc:da:86:68:78:c7:c7:73:2c:5b:54:cc:c9:
         f1:dc:ef:d0:7d:4b:2e:f3:35:7a:b6:6b:73:dd:25:ba:31:bc:
         5c:e2:44:03:94:aa:82:e7:45:fa:d0:69:f5:45:d4:15:6f:1f:
         de:17:22:4d:fd:31:00:bc:21:41:84:fc:da:7a:aa:34:7e:10:
         a7:6d:d4:b8:9b:b5:53:3d:66:45:60:30:e9:11:16:1e:52:a1:
         6b:38:81:3a:fc:6a:21:68:2d:ad:df:64:e5:ae:a5:58:c8:b2:
         cf:a4:b9:d6:d7:94:61:b2:ca:01:b8:a0:9e:5f:30:58:45:12:
         15:57:ee:fe:eb:21:14:72:ea:9a:00:1f:ab:c5:7e:08:d2:5b:
         b5:92:a4:a0:aa:e5:3c:98:5d:a5:28:16:33:e4:ee:4b:98:15:
         69:9d:c1:62:2c:dc:5e:32:e4:c6:9a:16:a7:7c:46:03:9e:df:
         6a:a6:ec:56:f1:ca:a2:1f:2e:3e:a9:91:36:f0:b6:ee:91:c2:
         83:29:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----