Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa
File:                     b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa (raw, json)
Hash identifier:          C91aV+HnN1DM+TdBv1a1gklwxnrI71ldinhzjQznXmM=
Subject key identifier:   07:52:64:02:6B:64:6D:10:B8:FD:3A:FD:37:0D:75:7E:8A:44:D3:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C5733411EC463742AB75A3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa
Signing time:             Tue 04 Feb 2025 13:33:15 +0000
ROA not before:           Tue 04 Feb 2025 13:33:15 +0000
ROA not after:            Mon 05 May 2025 12:33:15 +0000
asID:                     396570
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:34:11:ec:46:37:42:ab:75:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:15 2025 GMT
            Not After : May  5 12:33:15 2025 GMT
        Subject: CN=f581c989-163c-4713-b41f-87c3875724fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:04:30:94:41:0b:09:bb:00:48:4d:9d:93:
                    9d:7c:c5:12:f0:49:13:cc:c9:00:02:0a:51:58:90:
                    16:0b:65:04:62:c8:77:7e:c9:c3:ca:f0:de:4d:a4:
                    15:66:15:33:61:c0:37:8e:e2:6d:a7:35:fa:20:9c:
                    c9:40:f5:58:ac:a6:6a:6a:4a:e6:43:47:db:13:f6:
                    cf:59:86:5e:df:98:4b:eb:74:92:3c:bb:69:37:59:
                    e2:4a:22:d7:c3:62:2f:e9:ac:07:74:0c:4d:9c:17:
                    72:83:c0:2e:fa:b6:97:77:68:48:f7:b3:93:b8:a9:
                    64:70:fd:1e:b0:59:0b:ce:31:b6:8e:c2:2a:d8:7e:
                    5d:7c:37:8e:78:c0:c7:e8:21:95:05:29:68:6a:7f:
                    f8:fb:08:d8:97:fe:f5:a8:4b:63:8f:35:65:b2:02:
                    da:75:a6:7b:0a:bb:28:31:0c:4a:5c:23:bb:cf:13:
                    f7:02:5f:45:98:b9:67:f2:e4:05:1f:8c:89:d0:b7:
                    50:52:6c:0c:38:cf:8f:e9:e0:2d:73:5a:19:38:52:
                    0b:ab:0f:96:c3:da:6f:1b:fd:38:2d:9d:96:c8:55:
                    2c:2c:d3:9a:85:bb:55:0e:1e:f5:5a:b0:98:cf:94:
                    8c:8e:7c:76:90:f7:38:ee:8a:63:fd:8f:aa:38:8f:
                    a9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:52:64:02:6B:64:6D:10:B8:FD:3A:FD:37:0D:75:7E:8A:44:D3:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b1f28ae1-2c1d-3af4-897d-69fe52b7e2ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:04:11:7c:96:20:73:4f:17:e2:c9:9b:dd:9a:2c:54:a4:
         f6:6b:d3:1e:86:84:6e:ce:97:1d:39:f4:89:ba:16:cb:8a:0c:
         48:76:0a:b3:d2:29:c5:27:a0:c9:c2:57:dc:16:6c:8c:fc:de:
         69:8b:20:5a:a0:50:b4:62:50:27:90:cf:8e:41:c4:1c:39:60:
         bc:34:d8:b9:5b:3f:99:8f:09:c5:5d:3a:cb:3b:15:3d:9a:54:
         22:58:2e:3e:ea:df:5b:9a:4b:86:f5:f0:91:63:3b:26:fa:1d:
         87:bf:b2:df:2e:f9:db:89:62:85:9e:73:94:ab:77:9d:92:3f:
         a1:ba:65:72:c1:96:05:9a:63:f9:ae:e4:de:8b:53:a4:9c:af:
         37:a3:62:85:51:7c:83:5a:ab:30:1c:b8:f9:64:fc:12:c7:8b:
         7a:96:95:c3:e2:fc:21:a6:7e:b4:61:10:4d:00:d9:cf:74:88:
         a6:ef:02:ea:cc:08:31:c3:87:d3:04:a7:71:34:ae:8e:82:88:
         45:0d:fe:65:ea:9a:4e:eb:8e:cd:8e:1b:51:5b:cb:a0:64:8e:
         73:15:d7:5e:0b:e1:63:e6:cc:53:22:66:c6:7b:18:69:aa:9b:
         62:1d:60:9b:d7:69:18:7b:be:30:68:7e:5c:ac:55:e4:ce:b9:
         6f:54:17:dd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEjFczQR7EY3Qqt1o8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDIwNDEzMzMxNVoXDTI1MDUwNTEyMzMxNVowLzEtMCsGA1UEAxMk
ZjU4MWM5ODktMTYzYy00NzEzLWI0MWYtODdjMzg3NTcyNGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqEEMJRBCwm7AEhNnZOdfMUS8EkTzMkAAgpR
WJAWC2UEYsh3fsnDyvDeTaQVZhUzYcA3juJtpzX6IJzJQPVYrKZqakrmQ0fbE/bP
WYZe35hL63SSPLtpN1niSiLXw2Iv6awHdAxNnBdyg8Au+raXd2hI97OTuKlkcP0e
sFkLzjG2jsIq2H5dfDeOeMDH6CGVBSloan/4+wjYl/71qEtjjzVlsgLadaZ7Crso
MQxKXCO7zxP3Al9FmLln8uQFH4yJ0LdQUmwMOM+P6eAtc1oZOFILqw+Ww9pvG/04
LZ2WyFUsLNOahbtVDh71WrCYz5SMjnx2kPc47opj/Y+qOI+pGwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAdSZAJrZG0QuP06/TcNdX6KRNNaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjFmMjhhZTEtMmMxZC0z
YWY0LTg5N2QtNjlmZTUyYjdlMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCcJwQRfJYgc08X4smb3ZosVKT2a9MehoRuzpcd
OfSJuhbLigxIdgqz0inFJ6DJwlfcFmyM/N5piyBaoFC0YlAnkM+OQcQcOWC8NNi5
Wz+ZjwnFXTrLOxU9mlQiWC4+6t9bmkuG9fCRYzsm+h2Hv7LfLvnbiWKFnnOUq3ed
kj+humVywZYFmmP5ruTei1OknK83o2KFUXyDWqswHLj5ZPwSx4t6lpXD4vwhpn60
YRBNANnPdIim7wLqzAgxw4fTBKdxNK6OgohFDf5l6ppO647NjhtRW8ugZI5zFdde
C+Fj5sxTImbGexhpqptiHWCb12kYe74waH5crFXkzrlvVBfd
-----END CERTIFICATE-----