Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1b8d119-41e0-3402-a37f-d19572c80b33.roa
File:                     d1b8d119-41e0-3402-a37f-d19572c80b33.roa (raw, json)
Hash identifier:          1slp0czX2nR/ayq2tWgJtHlsGSGdZrxyYJE+h5ogLyM=
Subject key identifier:   21:D0:49:61:E7:80:FA:1E:14:38:6C:C4:EF:C9:BC:B1:89:99:DC:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEFD95B9627390B0EF0B20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1b8d119-41e0-3402-a37f-d19572c80b33.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396613
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:fd:95:b9:62:73:90:b0:ef:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=e6f7bace-521b-4525-b152-132a371e3925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:2e:cb:9a:12:29:32:57:bb:ed:6a:f0:1e:
                    09:8e:ae:c5:83:fb:f5:22:97:16:87:d8:62:b4:ce:
                    03:92:e1:fd:61:ba:9d:4e:cf:5c:99:99:5a:29:99:
                    46:29:62:c1:49:a3:37:ff:b4:66:31:b6:e4:3e:d0:
                    eb:bf:4c:92:a9:1e:0d:34:d7:08:c5:c9:77:b8:ea:
                    de:b1:59:1a:ac:59:82:24:01:52:cb:1c:35:42:73:
                    73:81:71:fd:86:80:42:d7:e0:eb:70:d9:e4:e8:ba:
                    67:52:69:94:04:a4:11:66:35:2c:64:7f:95:be:45:
                    6d:d9:25:07:7c:bc:bb:c7:66:d8:72:e5:e7:e6:2c:
                    b4:63:17:69:6a:e6:02:23:c3:49:33:8b:64:24:c4:
                    0d:7c:67:bd:6e:5e:b0:08:29:d0:07:a6:41:0d:a0:
                    6e:ce:6a:f5:02:db:f0:e3:43:13:4f:e1:3e:e5:e7:
                    d8:5b:0d:c9:70:21:65:49:f4:3b:03:b5:c4:ca:2d:
                    26:d0:bc:ea:3a:00:fc:a4:43:11:b3:87:46:58:74:
                    09:f7:d2:95:34:3b:4f:40:c8:68:3e:ff:1f:3f:e7:
                    a2:0a:0b:f6:28:8d:df:55:dc:ff:30:40:c2:a8:6d:
                    56:1c:55:fe:9e:90:79:36:85:eb:f2:28:90:25:7a:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D0:49:61:E7:80:FA:1E:14:38:6C:C4:EF:C9:BC:B1:89:99:DC:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1b8d119-41e0-3402-a37f-d19572c80b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:12:9f:fb:ed:74:5e:be:d6:4e:65:90:57:02:81:7e:11:d7:
         9f:49:46:d7:d2:4f:a2:1c:ed:ea:12:bc:f3:1b:5a:7d:c2:ac:
         c6:7d:92:7e:2d:81:7a:2b:1f:d0:ec:dd:77:00:e7:24:6b:aa:
         30:5d:a4:0f:3a:97:d7:5d:de:f2:77:80:fc:5f:77:0a:33:22:
         96:cd:1d:1a:75:42:ae:b5:69:20:28:c2:7f:8d:0e:a6:48:d8:
         50:eb:26:27:b9:85:6c:e7:02:32:5b:9c:09:ad:89:aa:21:19:
         04:aa:3f:e3:61:3d:33:82:13:a7:51:63:c1:7b:97:25:a0:0a:
         44:42:43:d5:2b:97:e3:eb:6f:b3:c9:16:d2:2f:f0:16:ab:52:
         ab:d8:80:9e:f5:82:17:f9:39:ff:63:af:f6:e9:f1:3b:9a:22:
         8b:04:95:50:38:0f:63:9d:cf:c5:a3:c1:e8:7a:65:59:0f:01:
         d8:82:30:2a:bb:d2:30:da:e7:f4:79:51:bd:1b:39:e0:c4:e4:
         64:1c:4f:e2:71:30:1d:dd:4f:2c:14:45:51:f7:59:a5:f6:aa:
         b9:1f:15:13:33:45:1a:6a:15:17:0c:0a:0e:6f:b7:9b:29:44:
         18:0f:cb:4f:82:5a:57:86:60:cf:e3:2d:af:a9:ae:3e:b1:d0:
         c9:0b:e4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----