Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b61de4db-e0f8-3664-9c89-c57833bd9cea.roa
File:                     b61de4db-e0f8-3664-9c89-c57833bd9cea.roa (raw, json)
Hash identifier:          wRNK3GR4+ATy1K47lHHF2Anvz8zx7r4vJLnaj5eUINM=
Subject key identifier:   21:9A:25:F5:C1:84:03:E9:56:EF:B4:2D:48:5C:87:E8:42:E2:D0:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E4F331019A2718675C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b61de4db-e0f8-3664-9c89-c57833bd9cea.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396546
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e4:f3:31:01:9a:27:18:67:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=c1dbe28f-f8dc-48d1-a90d-b5a9d8cb11ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8a:50:17:b4:0b:c7:5c:fd:07:9a:1d:21:23:
                    d9:f6:8a:82:d7:11:d5:f9:64:2c:74:7e:e5:0c:0d:
                    a0:6c:a0:89:d2:55:e2:5d:de:36:b7:30:c9:97:26:
                    0d:07:67:4f:56:b6:32:a8:59:88:68:21:fb:25:82:
                    8e:e2:89:9e:e4:f7:1c:7d:30:7f:f4:4b:45:8a:30:
                    99:42:4d:fb:35:a4:13:17:ca:a9:18:29:46:38:bc:
                    ee:c9:11:8f:29:13:c6:b8:5b:7f:7e:fd:bb:a6:bd:
                    f7:64:a6:ac:ac:0a:bf:29:10:8a:4c:d3:53:49:38:
                    1f:d5:26:9b:b6:9c:1a:c6:53:e5:cf:ca:db:45:c0:
                    48:ba:49:3a:16:7e:06:b2:83:97:32:bf:85:4a:d9:
                    78:b8:8a:6e:35:f9:b5:15:88:ea:03:c1:fc:a5:d9:
                    e8:42:9f:4a:03:74:fe:4e:c4:57:17:ba:77:7e:58:
                    61:4c:8e:98:70:54:bf:8a:86:ce:e9:9a:c2:ed:08:
                    d2:a3:2d:c8:ce:8b:0f:98:79:f7:13:16:5b:2a:cb:
                    4b:dc:ae:12:db:ea:c8:22:56:0e:9b:e3:ba:9d:12:
                    ce:39:f2:84:89:3f:be:85:08:f0:a5:fd:87:23:b2:
                    2d:1a:fa:66:7c:9b:6b:8b:53:51:19:13:04:ef:06:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:9A:25:F5:C1:84:03:E9:56:EF:B4:2D:48:5C:87:E8:42:E2:D0:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b61de4db-e0f8-3664-9c89-c57833bd9cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:f4:9d:b5:4a:42:47:cc:ff:c9:7b:8e:c0:33:d9:2f:16:
         f8:ab:e2:5b:55:56:8a:34:01:a8:21:37:79:d7:88:ee:e8:c6:
         70:0f:10:66:b4:97:b9:12:d4:ab:82:6d:91:50:36:5f:ae:27:
         c9:97:24:b5:64:01:aa:a4:f3:e7:9d:99:3b:12:41:ba:6f:55:
         cc:3a:c3:ce:e3:e2:40:a6:13:aa:47:c8:50:b7:55:05:61:7a:
         cf:af:a7:d3:5c:a1:a5:fa:46:46:a1:75:41:cf:17:cd:18:5e:
         09:73:87:c4:4d:54:43:d4:4a:eb:05:eb:b1:94:4e:0b:47:7d:
         20:50:b7:c7:74:d1:42:14:c9:4a:f2:4a:b7:d9:bf:6a:a1:0b:
         fb:d9:e6:85:b2:14:a6:59:70:c4:f8:51:9f:55:05:3c:11:ff:
         7e:1c:e0:31:ab:d7:84:62:17:61:74:25:a4:87:d3:cd:df:3f:
         b6:8c:68:52:1f:06:5d:bc:17:20:79:f3:06:45:fc:97:bd:48:
         5f:b8:ba:eb:38:81:c8:84:21:e5:a6:36:30:3c:8a:4f:b4:e2:
         28:9a:af:3d:e1:b1:d8:6e:86:c3:a2:b8:87:3f:86:b4:5b:c1:
         14:3f:1f:34:9e:3c:f2:d6:ea:b4:7b:ff:0c:2a:40:14:3e:7e:
         e9:b7:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----