Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa
File:                     3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa (raw, json)
Hash identifier:          mf+reN9pmboWLpYtFYFRVeFsKEBv8GEvlUs7RZvC3A4=
Subject key identifier:   D1:98:E2:C4:DE:EF:0C:FE:CD:35:7E:94:31:3A:09:1D:87:ED:76:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493243EF979DC6C86D29A30E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     396616
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:ef:97:9d:c6:c8:6d:29:a3:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=90ef1635-489a-487b-89e1-9a4c53b60fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:8e:2f:dd:c0:df:2a:8f:27:7a:4c:21:47:
                    43:be:e2:e2:f7:a5:ef:c8:97:c5:fa:3d:30:98:f4:
                    51:ec:d2:ce:da:8d:6d:ea:d7:b7:f1:d3:5c:ff:5f:
                    2c:f1:64:af:1f:4b:62:b0:56:ba:48:81:cb:a4:8c:
                    b2:44:bb:b0:94:a7:48:e2:e9:f3:44:1f:39:c6:87:
                    32:6c:9d:f4:59:d0:67:72:9d:b5:a3:b5:e4:00:12:
                    75:70:05:f7:3e:2b:54:d2:da:bf:ba:95:2a:f1:63:
                    34:13:e0:ce:6c:5a:dc:18:a6:1a:8b:a1:81:f6:1b:
                    d2:7b:0f:7f:4a:48:8c:55:67:77:28:c7:d0:ac:e7:
                    1e:f6:2b:8b:02:17:12:a6:3a:50:61:01:88:47:3f:
                    b0:fe:01:0f:4a:ef:c3:1e:79:61:bf:0a:20:5c:8f:
                    5a:bd:bc:a4:c0:1d:7c:3b:be:49:58:82:b5:14:28:
                    1a:37:ef:ef:8d:fb:70:4d:c8:4a:02:a7:12:8e:86:
                    bf:49:d4:63:07:72:ce:70:5f:a8:6f:d4:bb:41:a4:
                    d3:a1:6b:5c:1b:36:c4:6e:89:a8:08:5c:c1:5b:12:
                    0f:1a:eb:c4:c8:ae:ab:18:30:1b:be:f3:82:13:de:
                    42:3c:67:c0:b5:bf:d3:8e:6b:58:18:89:fd:e0:1e:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:98:E2:C4:DE:EF:0C:FE:CD:35:7E:94:31:3A:09:1D:87:ED:76:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e6042c0-2e89-3f76-8cea-b7b6fa53683e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:59:eb:0b:a1:56:4b:70:b5:14:0b:a7:db:27:ef:9a:87:68:
         32:15:0f:9d:50:0d:86:ac:24:1f:2f:a0:af:f1:ba:f4:7a:32:
         b4:48:3a:3f:a0:5b:b5:df:54:15:33:8f:0b:ef:b8:91:c4:c2:
         46:f6:1f:39:ef:12:d9:cd:d4:4e:e4:5c:5c:30:99:44:32:a5:
         eb:ae:42:c3:12:dd:f3:79:31:38:1c:7e:db:37:2b:92:37:4b:
         b7:12:bf:d9:28:e2:90:43:2c:11:42:58:cc:60:58:56:45:89:
         38:17:f8:9d:09:74:56:d3:52:fb:a7:b0:d1:9a:36:83:68:a4:
         12:0a:c2:46:4b:1c:d7:3f:83:54:e3:59:24:55:c3:e0:e4:28:
         fe:81:78:0b:a1:19:59:8b:8c:81:19:8a:e7:c5:ef:f9:e3:20:
         1a:39:65:d8:7f:59:f5:f4:20:ce:d1:68:01:c6:79:93:04:ae:
         0c:da:8a:20:47:cc:97:6e:81:37:e3:70:c4:1f:07:c0:62:ce:
         d9:04:91:ab:d1:44:71:af:ba:23:59:b5:74:fe:e7:c7:84:d2:
         3f:57:e9:69:ad:81:5b:7c:6f:92:d8:16:6d:95:40:f5:ce:7c:
         7d:64:1a:38:6e:7c:e9:14:51:98:3b:3d:32:68:bc:af:cd:7e:
         ca:65:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----