Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a8ebc43-9f15-3e21-8b6a-1982348ec986.roa
File:                     7a8ebc43-9f15-3e21-8b6a-1982348ec986.roa (raw, json)
Hash identifier:          KHgHZc3GFHxoaPLusHZUvpurpG6R9cDHOUNdnMDhB2U=
Subject key identifier:   97:3A:E4:23:94:B8:A9:92:D0:03:A5:AA:C1:29:0C:0F:F4:1A:4B:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849403986AA96653B91CA970180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a8ebc43-9f15-3e21-8b6a-1982348ec986.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     36617
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:86:aa:96:65:3b:91:ca:97:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=80505ab9-b0a7-4c27-8f20-944f2f377e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:33:f2:4f:a2:e4:66:74:fd:d0:5c:c0:b5:00:
                    ad:fb:08:a3:b1:0a:ad:5c:dc:56:65:b8:c4:da:a3:
                    54:2f:ca:2e:c7:1d:59:38:20:e3:ba:da:7c:87:ab:
                    71:49:c2:e7:5c:8a:33:6c:a2:a8:30:26:fa:41:85:
                    59:a3:ed:97:22:c6:45:1f:94:99:5b:3a:8a:fb:f4:
                    17:e1:ae:2d:bd:ed:a6:07:57:be:83:1f:a3:97:2f:
                    9e:29:fa:f7:24:a9:3a:f7:a1:7d:7c:f6:4a:79:26:
                    5f:03:4a:f0:4d:98:06:ad:bd:5e:c4:6e:e4:39:bc:
                    85:0e:36:77:df:68:04:64:d6:71:95:26:c5:e2:4b:
                    25:c2:1f:d2:40:16:ec:87:4d:a4:94:50:bd:81:0a:
                    76:35:18:09:eb:f3:99:44:25:35:3d:9e:fb:2c:99:
                    ee:47:f4:80:7c:5d:78:67:b3:0d:0a:57:81:f4:6b:
                    ff:7c:59:94:40:68:c0:d3:f8:38:6e:d7:96:3b:d8:
                    a8:06:87:52:92:32:5d:03:24:5e:1d:6c:50:71:39:
                    fa:39:a7:a7:03:3a:09:39:15:c6:1d:46:0c:c0:19:
                    fd:a4:fb:05:7e:e8:47:f7:b0:22:dd:95:4b:9d:45:
                    f3:ee:1f:2a:9c:7e:b1:0e:9c:9c:23:52:7a:6f:13:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3A:E4:23:94:B8:A9:92:D0:03:A5:AA:C1:29:0C:0F:F4:1A:4B:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a8ebc43-9f15-3e21-8b6a-1982348ec986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:38:d2:42:76:00:08:da:36:d1:4d:9a:db:93:2b:8e:95:84:
         ab:17:56:b8:d8:0e:c0:ff:9d:71:36:a2:53:a0:0a:1b:6c:b3:
         c3:8b:23:f7:9f:57:e5:dd:81:03:c7:d6:2b:2a:51:fd:63:e0:
         b5:e9:ed:60:ee:02:08:81:3b:bb:03:ed:4e:37:b7:9b:17:ae:
         8a:dd:aa:da:18:ab:7f:72:f9:1c:2d:ca:a7:69:af:2b:e7:13:
         72:c7:40:e7:00:dc:46:5f:cd:58:78:b9:0c:9a:2e:c3:2d:ed:
         b3:75:1e:82:60:ac:7d:69:e7:c8:22:f5:9a:bb:71:57:ef:bc:
         2b:a2:b6:ec:c1:90:3a:bf:34:e3:7a:63:26:69:c5:71:b7:ff:
         8e:a6:f0:77:15:f8:5f:fb:55:2c:62:4c:8e:2c:4a:5e:db:75:
         68:f6:ef:60:54:ea:35:19:4d:e1:bd:7f:6e:fa:ce:a4:d1:37:
         9b:12:05:00:14:a9:eb:c1:87:d0:6f:63:4a:a9:89:d8:49:32:
         b7:ec:56:eb:db:34:a2:2e:ef:35:0c:a1:cd:80:d5:cb:c5:57:
         b2:a5:59:f7:1b:1c:5c:dd:74:ba:d6:dc:8c:25:ee:14:38:2d:
         8e:a0:65:ae:47:05:12:53:5a:23:b3:54:bf:28:fd:d1:c3:8d:
         8a:41:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----