Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa
File:                     65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa (raw, json)
Hash identifier:          QXY7QX8lhcPFQDDhPsB1B97HG4zTY+IG/tlcMzfFTik=
Subject key identifier:   8A:00:75:DE:7E:50:E8:2F:FC:6A:A3:2C:99:36:DC:95:4D:0D:C7:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E22B677C0414AA25D180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     397199
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e2:2b:67:7c:04:14:aa:25:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=bfe90fff-bae6-4f4c-a817-6b0288dac2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d0:4f:40:76:23:5e:1b:a7:b6:02:b4:d4:96:
                    26:09:00:5a:3c:64:01:ad:f9:ef:54:85:2b:d0:e3:
                    bd:b2:93:d1:75:b6:f3:60:3e:a2:68:85:0a:2e:a0:
                    df:4d:a8:6b:54:46:22:34:fa:e1:df:a8:70:d5:09:
                    d5:59:f7:48:fc:92:c6:a4:99:31:5b:04:87:d7:98:
                    97:e7:88:74:14:04:19:a8:83:8b:0f:f1:6c:38:bb:
                    15:50:db:fd:d2:a8:5c:98:e3:da:08:89:b4:dc:9a:
                    19:eb:02:d9:0d:7d:f9:9b:6f:e7:57:dc:fb:95:5e:
                    09:e2:01:35:59:f8:fc:36:8f:42:bf:e8:01:98:9c:
                    24:ac:05:65:8d:23:b4:44:5b:ca:6e:e4:8c:a9:53:
                    6b:ca:df:29:ab:e4:26:80:60:d1:bf:a4:29:f6:f5:
                    8f:a2:77:8f:6b:fd:3b:86:6b:5e:62:8f:98:85:a3:
                    9e:8b:75:2b:c8:0c:6e:d4:aa:83:d8:b2:c9:d7:dd:
                    eb:83:eb:68:b7:38:88:ed:37:d6:52:0a:e1:44:c2:
                    58:2b:a2:72:ba:28:2f:18:ee:92:4b:a1:3d:93:c6:
                    d1:d8:b8:25:4e:3e:4b:11:51:dc:dd:e8:eb:50:97:
                    01:9b:bf:ac:a8:02:52:91:b3:70:7c:f9:e5:5a:af:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:00:75:DE:7E:50:E8:2F:FC:6A:A3:2C:99:36:DC:95:4D:0D:C7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65ac8dd5-02b6-35d2-b7e5-e6bccaf8d751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:85:c6:3b:ca:6a:c9:84:88:1e:eb:36:48:3e:bd:90:a2:4a:
         e0:ef:8a:16:9b:57:eb:d3:ea:c0:8f:09:4c:d4:dd:e9:28:08:
         67:d4:e9:11:d0:4f:ad:f0:db:84:b2:0d:9f:73:4c:36:91:aa:
         85:3e:49:06:9b:f9:b0:56:6d:72:9d:d7:2e:4b:54:56:6e:29:
         b7:1a:34:b2:6e:5c:92:bb:fe:15:56:e1:4f:34:b0:05:79:55:
         91:cf:3d:9b:7e:45:cc:25:38:f7:e2:85:d7:e5:3e:54:20:67:
         eb:55:68:a2:56:bf:68:d8:19:9e:68:d9:cd:59:2b:91:6a:dd:
         1a:1a:d1:6e:af:83:a3:db:58:4b:5d:32:8e:24:21:1b:06:af:
         eb:84:5a:5c:7c:6b:63:cf:82:d9:09:78:37:42:ec:31:7b:79:
         4d:85:e8:64:77:ce:49:32:4e:7f:cd:94:14:7a:6e:47:02:76:
         6a:0b:d2:bb:e3:43:ae:05:18:3a:a7:74:fd:31:a4:f8:0d:cc:
         0d:7b:53:ba:c7:05:01:59:b1:bc:0e:69:7c:41:c4:b9:03:7e:
         c6:49:3d:07:94:1c:5b:2b:44:f3:46:92:62:ea:92:8c:ba:aa:
         67:a8:07:61:ff:f2:10:6e:d8:10:a7:5f:56:cc:89:35:8d:10:
         f7:61:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----