Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa
File:                     9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa (raw, json)
Hash identifier:          836P/3irqlwjIbiHXqs1Jl+ybXiDQv6uyueCoi8M1hk=
Subject key identifier:   03:8D:1B:3C:CF:4B:BD:68:B8:CA:D3:BE:E8:75:9F:D5:2B:EE:DE:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E8AE5E4D76D75D476340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     36627
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e8:ae:5e:4d:76:d7:5d:47:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=31686529-5791-4a68-a986-4d5d8d7e4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b2:cb:15:f2:c7:ec:0f:e1:7b:c9:52:8f:31:
                    a9:b3:e8:bc:af:eb:72:59:df:6b:dd:56:61:ea:4e:
                    0f:de:65:73:30:70:43:17:04:ed:da:e4:54:0c:81:
                    33:f6:2b:74:27:16:0c:18:03:89:67:a0:d1:07:dd:
                    56:eb:72:97:6c:b2:e2:2e:fa:ad:de:1c:0c:f9:e8:
                    62:f1:94:88:74:b3:4b:f2:7e:79:45:0e:7e:29:0b:
                    35:9d:3b:09:c9:38:ce:f0:d4:b6:bc:0a:a7:cd:73:
                    0d:c1:93:23:0f:0c:8f:78:1a:4f:5f:9d:08:c1:73:
                    6a:5f:f8:e4:6a:83:25:37:9f:b2:fd:c5:ed:47:52:
                    fa:7a:ef:0f:4e:4c:44:fc:89:21:7d:c1:c4:f3:c4:
                    f5:7b:8b:95:42:73:cd:8c:53:de:3e:13:c1:eb:cf:
                    3e:ac:5e:77:cf:14:e3:e7:13:83:44:4d:78:4c:61:
                    9a:03:c0:a2:ff:79:ad:a9:e4:b4:83:79:e2:23:4f:
                    0a:a9:96:f5:bf:1f:6f:d9:3a:80:fd:90:6e:ea:9b:
                    90:ff:4a:ba:9e:e0:b1:3a:ae:21:78:3d:4b:23:57:
                    ec:c4:09:2d:f6:70:23:42:1c:11:88:6b:48:be:c3:
                    5f:a4:3d:aa:92:56:b5:48:fc:cc:90:51:31:49:77:
                    1c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8D:1B:3C:CF:4B:BD:68:B8:CA:D3:BE:E8:75:9F:D5:2B:EE:DE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:5d:c9:ac:2c:d9:27:2c:b7:af:ff:89:e0:05:d8:bd:36:
         db:3a:82:97:21:a0:a7:db:c1:73:c0:e6:0d:fb:88:e5:aa:36:
         b8:09:fb:1f:26:d2:ba:58:d9:cd:16:d5:a4:2c:bf:a9:12:ea:
         8d:4f:00:64:73:67:b0:47:13:1f:f5:46:62:e2:35:b7:64:73:
         b9:0d:5f:90:41:35:45:18:90:20:eb:8a:f7:64:6c:8d:78:b3:
         02:db:1d:67:8e:8c:93:d0:1b:96:cd:42:b9:1f:c9:6c:cb:23:
         4c:78:8d:ec:22:c7:ab:b2:9b:d1:30:6e:b3:ee:32:4d:55:9d:
         44:b3:ea:e5:be:3c:1e:40:33:de:1f:96:4d:71:80:44:5f:f1:
         18:0e:12:3f:ea:ac:bd:e0:d0:70:90:ef:8b:80:1c:dd:16:28:
         c0:8b:a6:04:30:40:bc:2a:22:cb:e2:3d:6b:b9:d8:23:65:e9:
         25:e0:85:76:be:a2:77:87:60:d9:55:32:24:ff:9a:e7:ec:a3:
         2e:a5:4a:1b:b2:ed:18:ab:fa:24:15:fe:43:03:3b:ba:3e:e3:
         cf:f9:bf:3b:c5:29:4b:77:5a:44:14:e0:3d:a1:56:59:63:65:
         a2:80:78:80:0c:7a:d0:32:bd:37:66:8b:0c:3c:30:18:e3:c7:
         57:59:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----