Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa
File:                     db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa (raw, json)
Hash identifier:          El9wXh8KhMnCjbt07GyoOUEfBDbs4UHhMxTrwO0OlEk=
Subject key identifier:   0E:A0:D6:C9:2A:6D:E2:85:E2:15:C7:76:52:12:E4:AD:2E:53:0D:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849393E910EA449C8D88770FC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     36627
IP address blocks:        2001:500:120::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:91:0e:a4:49:c8:d8:87:70:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=b872e524-428d-4f47-9bac-ee1e8ebffdef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:d1:79:ec:64:e0:a2:1b:29:86:c7:27:b0:
                    65:0e:f5:52:25:67:11:d1:80:29:2a:cc:41:62:aa:
                    84:ec:2c:b1:15:1e:04:b8:fe:49:4a:b1:f4:19:20:
                    94:d2:ef:f2:19:e8:06:42:68:03:3f:32:3e:4b:9e:
                    a8:ca:71:67:b2:0f:d1:51:56:f6:a0:a7:3b:fb:0a:
                    c8:34:26:62:50:b4:b7:39:ea:23:d3:91:dd:83:ea:
                    60:b6:01:40:fe:2f:8c:2a:f5:8a:fe:02:fd:b1:29:
                    82:a9:fb:d8:1b:fe:9b:bf:e4:72:a5:ea:57:f0:52:
                    60:25:af:f7:ff:ab:fd:33:ba:d0:c0:84:fc:7b:ef:
                    6b:87:d3:46:0e:21:aa:6d:e3:99:29:36:c0:eb:bd:
                    e4:2e:f6:c2:b4:a1:9f:86:ad:a2:6f:48:b3:1d:99:
                    3f:52:00:66:11:2a:84:e8:8b:cb:9c:c4:02:0a:97:
                    d8:f5:f6:0c:9a:de:38:ac:78:96:56:98:0e:9a:6f:
                    ec:cd:be:c1:ad:7b:54:ff:19:fb:0b:38:74:7a:96:
                    5e:e7:0d:2d:48:18:82:78:d6:d4:e5:54:93:8f:90:
                    ac:d2:ac:1f:eb:9b:d8:75:43:95:61:87:a2:7c:8f:
                    1c:6c:8f:c2:8a:aa:a5:1c:21:13:c3:9c:9b:ce:96:
                    06:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:D6:C9:2A:6D:E2:85:E2:15:C7:76:52:12:E4:AD:2E:53:0D:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db461ebe-6ff5-3f9c-b596-5f5fcbbf08e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:04:e0:56:d3:56:0b:bb:88:0f:63:e5:6b:6b:33:f6:f4:0e:
         53:3f:c8:63:b0:9f:fa:e2:59:82:25:2e:0f:de:78:88:ec:ba:
         60:6b:ff:53:43:97:68:5a:b0:af:d5:4a:f6:51:46:c6:bb:74:
         5d:38:85:3b:a2:c6:6b:63:b0:0e:2d:c0:fc:d6:5b:fd:8a:e7:
         50:24:be:2d:64:ac:97:1e:01:15:4a:7d:fe:cf:db:e8:c3:ed:
         15:87:3f:2d:87:2c:88:63:90:f3:3a:08:21:a6:57:b6:00:1c:
         73:93:f4:ae:be:f1:2d:e5:70:0c:1d:77:96:52:2d:9f:3b:95:
         0e:f6:82:82:25:3c:b8:0f:eb:a5:f8:60:e8:6a:d5:ee:79:af:
         11:10:22:c9:a7:0d:1c:09:8d:bd:ef:66:7b:7b:fa:57:ed:91:
         a5:f1:61:ad:0d:0f:78:88:27:d9:83:39:9f:6e:8b:8a:0c:d8:
         67:23:84:2e:89:3b:80:27:aa:dd:c5:2d:40:86:30:45:c6:e1:
         19:40:f5:49:0c:34:ee:71:db:66:44:fd:fe:c4:88:34:f4:78:
         b7:7f:d6:bc:27:b8:93:ca:a6:58:3f:90:64:f5:28:76:3e:4c:
         24:ee:89:fa:0e:df:74:6b:8d:f1:d4:8e:61:47:e9:07:a5:c9:
         36:1e:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----