Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0cafc13-0912-3a27-b68e-013135719724.roa
File:                     c0cafc13-0912-3a27-b68e-013135719724.roa (raw, json)
Hash identifier:          V8bgb+V/PDjVAaocac9tgCqoblUM4Yt/WDa9BAs6wfs=
Subject key identifier:   18:DC:A2:84:89:75:EB:C4:BC:7C:2A:34:06:CF:12:3E:C4:8C:B1:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183EC5D2F3998F2BD626280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0cafc13-0912-3a27-b68e-013135719724.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396562
IP address blocks:        2001:500:125::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ec:5d:2f:39:98:f2:bd:62:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=ec9740e5-3422-437f-a136-016dd53fcab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:ae:08:b6:47:27:4a:6b:b7:e1:54:98:d1:
                    f5:51:16:a3:c9:47:ff:c7:06:2f:89:c8:2a:0c:1f:
                    52:d0:2f:73:68:6b:cc:fb:5c:fc:4b:e6:ea:d7:f0:
                    19:d7:e7:5f:a9:a0:f1:be:04:e4:ba:a2:42:14:08:
                    e3:fc:45:88:c3:87:95:f2:4e:f3:1e:b2:2a:da:c0:
                    b7:3c:2d:80:b2:b7:e5:64:54:f6:f4:9f:5c:bc:7a:
                    ba:1b:09:6e:9b:6e:e3:13:7c:77:c7:a5:1b:34:92:
                    f9:f6:48:60:7f:69:9f:b2:e0:15:46:35:2c:6c:88:
                    9f:28:a6:4f:44:a1:0f:b9:5a:32:ea:46:12:65:f1:
                    65:4d:d1:1b:93:15:e1:e9:b2:be:00:e6:18:1d:c7:
                    4d:b1:eb:2d:7f:6f:b3:94:16:34:ec:15:7d:55:81:
                    c5:de:a4:d5:8d:dc:02:69:03:55:4a:7c:92:24:04:
                    4a:06:03:b3:ad:f2:a0:8c:e4:be:b7:80:11:19:27:
                    23:0b:1c:98:bd:be:33:25:c3:4e:33:b0:d4:57:84:
                    b5:90:55:c9:28:df:f3:50:69:33:15:9f:4b:50:09:
                    b8:de:ad:e2:50:28:db:38:8a:ec:96:a7:4c:4f:a2:
                    65:0c:af:4a:7f:53:74:a2:6f:6c:14:6f:88:ba:d5:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:A2:84:89:75:EB:C4:BC:7C:2A:34:06:CF:12:3E:C4:8C:B1:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0cafc13-0912-3a27-b68e-013135719724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:4d:69:1f:b2:ae:2d:48:85:62:0e:24:cf:a1:53:a8:86:
         58:5f:91:f1:eb:58:92:43:bf:43:ab:57:2a:cc:c7:95:a8:2b:
         54:64:65:cf:88:b4:3e:b8:0c:24:97:a7:a7:76:40:c1:14:f3:
         ba:2d:84:7b:bc:c6:47:b3:48:68:90:42:7d:7a:66:44:5f:92:
         fb:f1:25:54:bc:53:45:86:b6:91:f0:68:ff:74:e7:d9:e6:56:
         17:80:71:d7:89:78:13:5c:27:cb:6e:f4:38:b8:55:84:8c:f2:
         66:a8:94:ce:8f:53:1e:23:da:2f:38:7b:3f:99:cc:56:41:fd:
         a5:3e:79:1b:70:8b:20:00:25:ae:8f:31:2d:6d:0c:5b:0e:dc:
         54:18:e6:4a:cb:10:bb:37:82:4e:28:59:b1:77:f9:d5:15:5e:
         f2:37:55:75:7c:e9:4a:9b:27:af:85:72:9e:5e:1a:32:26:a8:
         b2:ec:6f:d8:12:ca:9e:87:50:28:63:24:e0:3e:d1:01:42:ad:
         e6:da:19:88:01:6d:75:27:92:07:3c:42:c6:87:5f:81:16:fd:
         c4:60:cf:bc:a3:d9:b2:b9:1b:a6:ff:6d:05:ad:73:78:19:ed:
         21:42:c6:5e:db:d7:47:62:c1:74:4c:e3:ef:b4:97:8c:3e:07:
         b5:c4:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----