Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
File:                     4af4d672-539e-3c35-a02b-55f7ff93290b.roa (raw, json)
Hash identifier:          jUx6DvAUDcgUPB3nhfvonQGKLL9s0fT6kot9IFQ4GlM=
Subject key identifier:   9B:A0:BB:BE:8E:AD:A9:F5:1E:98:F5:67:7B:C5:66:5D:82:39:BD:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA467BA6102B591BC306480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     396826
IP address blocks:        2001:503:39c1::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:67:ba:61:02:b5:91:bc:30:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=66acb491-41bc-4ac1-94e5-5569e71cfe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:80:53:4b:de:c2:da:3f:d4:41:2b:cc:4b:3d:
                    01:2d:e9:2e:45:c2:b6:b3:14:48:de:3e:1a:e5:91:
                    6e:fc:2c:91:da:cc:84:7b:85:cd:b3:7c:bd:5b:d2:
                    0d:72:7f:80:6e:1b:da:6d:27:b8:30:6a:36:7f:9d:
                    c3:1d:0d:d7:9c:c7:58:a7:0e:21:9e:90:61:67:40:
                    bf:d2:90:4e:9f:5f:66:d6:ec:cf:20:ac:cc:7b:59:
                    b1:80:ea:cb:20:0d:b9:41:4c:50:42:73:ba:94:1f:
                    16:46:6c:65:cb:8b:35:95:6a:39:84:58:f6:5b:fb:
                    f2:9e:c0:e7:dd:8f:9a:21:ed:8e:30:a7:01:25:6d:
                    d6:2d:51:08:99:ba:fe:23:60:84:93:0b:72:94:97:
                    94:0a:8a:16:b0:78:d0:d5:fb:83:ea:54:ac:17:90:
                    82:c5:ea:d7:86:cd:56:c5:66:62:78:7f:3b:01:c0:
                    3c:47:6f:b0:3b:3c:ab:2d:0b:9c:5d:c9:56:2f:59:
                    57:13:84:e0:20:8b:be:da:b4:0e:72:83:a4:e7:2c:
                    0c:d6:dc:57:72:ae:f1:61:d4:3a:5a:a0:73:33:48:
                    71:ce:dc:7f:1d:68:c7:f3:50:4a:e7:87:b6:15:f8:
                    2e:b3:86:cb:b9:14:a2:51:08:c8:72:75:80:be:59:
                    93:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:BB:BE:8E:AD:A9:F5:1E:98:F5:67:7B:C5:66:5D:82:39:BD:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4af4d672-539e-3c35-a02b-55f7ff93290b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:c9:46:a2:7c:ff:83:5c:f7:a6:55:62:a8:8f:f3:b4:64:
         00:98:97:85:7d:af:fd:1a:b8:c7:b0:d2:ba:b3:9f:40:a1:10:
         09:02:e4:62:ff:c9:da:d4:cd:f7:26:9d:09:b4:b7:40:dc:16:
         a5:ad:5f:85:7c:ab:a0:71:a4:b6:a6:96:79:7c:30:7e:42:a2:
         a1:33:af:0a:40:9f:cb:08:fd:91:13:50:4d:bc:be:0d:cf:f8:
         36:08:76:c3:b5:48:2d:f7:4f:63:05:eb:cb:9c:89:d8:a9:3c:
         00:7a:08:76:59:a3:13:47:f2:40:97:d5:f7:ed:bc:33:e4:35:
         f7:a0:7f:87:ab:88:19:2b:6a:65:02:f3:57:4c:21:0d:6e:f1:
         7a:0c:9c:5b:c7:01:73:5a:3e:36:3b:28:c6:5d:c8:95:aa:50:
         04:ee:f6:a6:10:38:01:7e:3b:37:40:91:c1:ea:f8:0b:9e:d0:
         bd:2e:4a:90:b9:06:b3:88:55:cc:a9:73:1b:95:53:5e:3a:15:
         23:f3:5d:43:c4:aa:bc:d5:61:a5:cf:14:13:56:1d:b4:27:26:
         4e:f1:bf:7f:e4:92:fc:7e:33:e9:97:83:37:2f:4c:01:8c:36:
         46:4f:d5:b1:15:9c:f3:3e:89:4b:9d:d5:dd:c3:8a:c3:98:27:
         2e:49:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----