Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08aa93f-f6a9-3391-98da-9afa6f68b477.roa
File:                     d08aa93f-f6a9-3391-98da-9afa6f68b477.roa (raw, json)
Hash identifier:          TN3RU1x/eJGo+VW1RCTDh9AO7dYQ3+RtN2a8zgD3djc=
Subject key identifier:   D7:EA:36:9B:5B:99:C1:13:92:B7:2D:FC:33:0F:05:1C:A8:F9:A4:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494039839914960822C9301D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08aa93f-f6a9-3391-98da-9afa6f68b477.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     36622
IP address blocks:        2001:501:8a29::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:83:99:14:96:08:22:c9:30:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=9427267f-b16b-448b-a297-9504bfb6f26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:50:ae:13:d5:03:ff:03:82:2d:17:07:80:
                    b2:40:a3:be:0a:2c:5b:bd:b1:9d:41:49:62:a8:22:
                    61:80:5d:70:40:37:63:6c:9c:00:12:14:23:cc:cc:
                    bc:4c:56:3e:01:73:26:63:b1:c1:c3:8f:c5:0f:39:
                    b2:0b:89:c7:d8:39:5f:0c:b1:7c:6e:31:0f:42:dd:
                    f7:86:f1:0d:26:c7:f9:6d:f7:e4:fb:47:10:ea:59:
                    10:7b:79:9d:5c:ae:a9:32:36:b9:b1:cd:74:b2:dd:
                    28:1b:fe:9b:aa:db:02:e5:f6:d9:a8:0f:a7:d2:e3:
                    7d:12:a5:c4:03:cb:21:39:d9:a6:2f:5a:d7:0a:6b:
                    0a:8f:a2:cb:c0:83:7d:b4:ff:27:a0:9d:08:1a:84:
                    e5:c1:44:d2:24:c0:94:50:ca:80:4c:d5:08:86:ec:
                    02:09:2d:d0:df:97:61:a2:ce:58:54:3c:1c:76:e2:
                    32:16:04:af:38:96:71:ec:2b:4a:29:02:1b:95:3c:
                    78:b9:0e:33:92:41:0c:df:6d:2f:0c:b0:1b:4b:9c:
                    3f:21:5d:5a:22:6f:c6:bd:b9:45:ac:c2:b8:83:58:
                    49:63:bf:c4:f6:34:3f:54:2b:8e:0e:a6:94:6e:10:
                    5d:9d:ad:a5:47:e7:6f:08:98:0f:80:07:71:43:3a:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:36:9B:5B:99:C1:13:92:B7:2D:FC:33:0F:05:1C:A8:F9:A4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d08aa93f-f6a9-3391-98da-9afa6f68b477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:96:f9:be:19:e3:b3:4f:aa:a3:86:93:2c:2d:85:50:3b:a8:
         27:bb:7f:43:ca:c5:ad:3d:2c:26:79:85:79:7d:85:45:38:ed:
         a8:0e:f6:d7:d8:2f:a6:a2:c9:18:38:89:6c:da:a2:af:99:81:
         69:ef:aa:71:9b:d3:2a:84:90:fb:20:2b:bb:14:1b:93:ce:92:
         19:30:ff:85:cd:1e:ec:ca:72:6f:52:6b:b2:f7:0e:64:15:52:
         4a:d4:ea:b6:5c:76:1c:26:7d:40:3b:93:eb:ca:89:dd:24:cb:
         64:7c:26:98:da:ca:b4:b5:9a:17:47:05:28:36:da:ba:11:44:
         43:4a:5a:01:76:b2:7c:62:00:67:23:e9:69:f8:f8:a4:9a:00:
         6d:ea:47:29:18:3a:6c:f6:a0:5f:1f:31:de:3f:69:d6:ec:28:
         06:c0:81:5c:b4:cd:48:e6:8d:dc:24:37:f4:bb:a8:07:12:ec:
         4f:dc:d3:22:bb:b3:0f:85:62:b9:85:21:5d:40:88:d7:8c:7a:
         9e:90:ad:24:e8:15:6d:1c:96:a9:7d:b2:7d:93:67:22:21:22:
         0c:9a:08:c5:cd:2d:03:1e:34:8a:6b:a3:fc:d6:42:58:6e:38:
         1a:90:b5:b8:cc:8f:ad:3e:50:b3:f5:92:2c:66:08:9f:d8:88:
         59:16:27:df
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWElAOYOZFJYIIskwHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk
OTQyNzI2N2YtYjE2Yi00NDhiLWEyOTctOTUwNGJmYjZmMjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UVQrhPVA/8Dgi0XB4CyQKO+CixbvbGdQUli
qCJhgF1wQDdjbJwAEhQjzMy8TFY+AXMmY7HBw4/FDzmyC4nH2DlfDLF8bjEPQt33
hvENJsf5bffk+0cQ6lkQe3mdXK6pMja5sc10st0oG/6bqtsC5fbZqA+n0uN9EqXE
A8shOdmmL1rXCmsKj6LLwIN9tP8noJ0IGoTlwUTSJMCUUMqATNUIhuwCCS3Q35dh
os5YVDwcduIyFgSvOJZx7CtKKQIblTx4uQ4zkkEM320vDLAbS5w/IV1aIm/GvblF
rMK4g1hJY7/E9jQ/VCuODqaUbhBdna2lR+dvCJgPgAdxQzpWsQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNfqNptbmcETkrct/DMPBRyo+aRNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDA4YWE5M2YtZjZhOS0z
MzkxLTk4ZGEtOWFmYTZmNjhiNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBIlvm+GeOzT6qjhpMsLYVQO6gnu39DysWtPSwm
eYV5fYVFOO2oDvbX2C+moskYOIls2qKvmYFp76pxm9MqhJD7ICu7FBuTzpIZMP+F
zR7synJvUmuy9w5kFVJK1Oq2XHYcJn1AO5PryondJMtkfCaY2sq0tZoXRwUoNtq6
EURDSloBdrJ8YgBnI+lp+PikmgBt6kcpGDps9qBfHzHeP2nW7CgGwIFctM1I5o3c
JDf0u6gHEuxP3NMiu7MPhWK5hSFdQIjXjHqekK0k6BVtHJapfbJ9k2ciISIMmgjF
zS0DHjSKa6P81kJYbjgakLW4zI+tPlCz9ZIsZgif2IhZFiff
-----END CERTIFICATE-----