Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa
File:                     d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa (raw, json)
Hash identifier:          Cd4KePhDVGZ6UojXIs1JFhvIxSln5ePv56Y3Zz8c3ik=
Subject key identifier:   BB:DD:12:70:F2:1C:C1:C0:98:5B:34:B1:E8:67:60:94:F2:5C:00:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE47BD5E0DB6499DED66580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     36616
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:7b:d5:e0:db:64:99:de:d6:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=453a6981-d17d-4a41-ac29-087905a3d566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:59:40:1d:7a:5d:f6:a8:c6:d2:05:ac:4c:
                    54:18:6b:26:03:51:bf:75:c0:45:56:2b:51:ff:82:
                    1d:d4:b1:a3:ad:cc:3f:79:6d:87:bb:83:6a:60:a1:
                    c4:a2:9f:c6:df:07:a1:3e:cf:6f:04:e8:54:33:5d:
                    fc:4e:f9:5a:ff:20:a2:04:36:25:c7:7e:b4:59:10:
                    9d:bd:ad:b2:d4:21:7b:f4:4d:8b:1f:bf:00:aa:57:
                    40:d6:4d:46:cb:ff:d1:a5:c3:f4:6c:f2:00:3d:71:
                    35:65:52:ab:e4:60:25:e7:84:46:74:61:be:66:12:
                    f8:f9:44:e6:ea:27:43:e4:93:30:81:38:e3:81:e0:
                    1f:92:28:3a:25:ac:23:63:f7:a1:76:54:79:e4:9c:
                    13:1e:39:64:5d:40:52:ae:42:01:bf:99:21:66:c9:
                    55:60:8d:94:97:92:25:a1:b3:1b:d1:c8:1d:96:5b:
                    60:53:c8:d8:cb:2f:75:8e:ac:b0:3f:5d:2d:51:a6:
                    51:4f:5f:82:52:92:1e:f6:5c:0a:29:5a:53:77:5d:
                    ae:b2:b0:f5:ad:5f:64:af:13:46:0c:31:1c:ea:2e:
                    f7:36:b3:88:cc:cb:56:3a:76:f5:07:29:00:e8:c6:
                    04:01:b3:d5:84:29:3f:16:d9:7d:7c:32:df:37:ab:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:12:70:F2:1C:C1:C0:98:5B:34:B1:E8:67:60:94:F2:5C:00:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d403863d-f5b5-3aa4-ba7f-7152f7d233ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:6e:3c:9a:bf:2a:9f:dd:0b:43:64:54:c6:61:08:0a:b7:20:
         46:21:57:d3:05:ab:50:1d:a7:7b:93:9b:2f:a1:de:24:49:fb:
         f6:b0:41:fd:49:95:2e:65:72:ab:f8:79:43:f9:10:a4:72:da:
         86:9d:7e:da:54:d1:e9:61:40:23:d0:f7:06:0f:53:02:6d:1c:
         13:a5:8e:5d:09:45:49:47:5f:77:2f:2a:4e:e5:c0:74:71:7d:
         d3:ca:fd:17:89:b0:b2:95:fe:58:2b:ec:c4:55:ac:35:e7:1c:
         5d:0a:17:24:bf:d2:a0:28:67:39:7f:9c:d6:31:74:17:60:52:
         c9:f0:3a:28:c3:84:1f:e6:33:8f:c1:e5:94:f9:d4:43:2e:0c:
         45:2c:fb:1a:c6:66:d8:5d:d1:d8:87:0a:bb:a8:48:0b:be:e1:
         ba:5e:fd:57:a7:4d:d7:4c:ee:2b:33:3b:80:c1:1a:14:79:14:
         bb:2b:f3:57:6b:c4:07:ba:a4:ec:d8:c9:e3:bb:cd:3f:01:cc:
         ca:b7:0c:fd:fb:2d:78:31:62:98:70:a9:f4:65:69:ea:ca:81:
         f3:30:8b:5d:02:a4:af:31:2a:8b:d6:73:b1:9c:f9:4d:c9:b8:
         f7:dc:70:e2:2b:1c:76:85:75:64:8f:25:fe:0e:dc:59:a2:8d:
         b0:44:0d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----