Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa
File:                     ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa (raw, json)
Hash identifier:          /MAMFewKHY2JLZh7gLMFnrbLuMrSmAsiPOSQBcnE7Iw=
Subject key identifier:   EF:40:36:6B:29:F1:1A:6B:54:86:D3:A9:92:DE:71:AD:6D:B6:B3:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE4816D87E33B4693517168
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     397194
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:81:6d:87:e3:3b:46:93:51:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=c04b5b2f-1ac9-4445-810d-51ddd2e4d3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:76:89:c9:ee:12:5b:c6:d3:5b:57:89:d3:
                    ac:c6:b6:2f:1b:d9:db:c9:3a:c2:9b:06:80:2e:e8:
                    cc:e6:db:e5:a8:b4:67:61:38:e2:15:78:43:5f:94:
                    b3:c1:8c:06:43:19:bc:ce:c4:b6:9d:c1:07:0a:76:
                    78:fd:83:0b:f7:72:e1:0f:ab:22:12:e7:91:a8:b0:
                    41:73:6e:9e:da:da:29:6e:84:cc:88:7a:98:7e:51:
                    e9:39:f9:45:11:76:64:de:2c:9e:5b:14:cd:86:5d:
                    0a:fa:54:4c:83:da:c0:58:a4:29:ba:2c:53:3e:89:
                    26:42:73:9b:1d:58:10:91:1d:1e:3a:af:15:87:ff:
                    7e:e8:07:77:d9:8d:63:c8:49:13:6e:c5:3b:0b:61:
                    69:74:b9:ef:0f:d1:fb:40:bd:f5:ec:a2:13:ea:fd:
                    ca:f2:60:4d:02:32:30:29:92:4d:0d:fa:7c:31:19:
                    d4:7e:52:99:cc:a3:14:d8:e9:ba:ef:18:be:9a:2c:
                    47:d3:74:c2:27:36:0c:7f:11:67:76:89:74:f5:61:
                    c5:77:8f:09:85:02:23:49:a4:74:4f:80:fc:65:07:
                    e9:6b:55:c5:ed:99:71:ba:bf:22:28:9b:cc:98:e4:
                    8c:06:09:25:c7:a7:8b:3f:9b:57:00:68:06:0c:b0:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:36:6B:29:F1:1A:6B:54:86:D3:A9:92:DE:71:AD:6D:B6:B3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1c5c96-b60d-3e24-bde5-dfb7727f78df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:57:58:54:6f:b1:01:71:d3:2e:20:4f:9c:9f:d6:cd:95:2a:
         9f:f3:73:a0:3a:ed:11:ae:87:17:19:d1:66:bb:4c:93:3d:d9:
         e4:4a:f0:69:72:4d:41:cc:ab:77:6f:fd:ea:fd:74:f7:c9:77:
         a1:fd:13:1e:e5:c1:d3:de:dd:c2:23:86:53:84:bd:0d:ad:b6:
         cb:4f:36:1a:18:fa:96:8c:66:13:ee:f1:42:eb:ac:b0:fa:46:
         3c:b3:d3:76:5d:47:52:24:4d:6d:d9:71:51:fe:0b:84:71:66:
         48:62:ca:54:78:a5:c3:4b:ef:f5:67:38:cf:ee:26:d7:25:bc:
         19:80:7d:56:23:f5:2a:56:4b:07:be:47:dd:10:0d:73:b8:9e:
         78:d1:da:2e:a3:49:25:45:dd:e9:0e:e6:13:84:b9:43:e3:28:
         99:ad:60:b4:8b:d8:ae:ab:2a:b5:89:3f:c2:3b:66:9c:54:d2:
         f1:f1:a0:c6:a0:4d:49:7b:7f:40:61:e7:cf:a6:e8:db:52:15:
         91:54:4d:3d:91:84:8d:6a:d5:7b:a6:b9:d6:26:7b:13:00:96:
         dc:ef:8d:b0:c9:7a:45:f4:3c:ba:57:d3:69:1e:76:73:3f:5e:
         ec:3c:31:c5:ca:58:07:ad:07:33:2d:e0:25:04:e5:b9:11:42:
         0c:2f:69:7f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEls5IFth+M7RpNRcWgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
YzA0YjViMmYtMWFjOS00NDQ1LTgxMGQtNTFkZGQyZTRkM2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+92icnuElvG01tXidOsxrYvG9nbyTrCmwaA
LujM5tvlqLRnYTjiFXhDX5SzwYwGQxm8zsS2ncEHCnZ4/YML93LhD6siEueRqLBB
c26e2topboTMiHqYflHpOflFEXZk3iyeWxTNhl0K+lRMg9rAWKQpuixTPokmQnOb
HVgQkR0eOq8Vh/9+6Ad32Y1jyEkTbsU7C2FpdLnvD9H7QL317KIT6v3K8mBNAjIw
KZJNDfp8MRnUflKZzKMU2Om67xi+mixH03TCJzYMfxFndol09WHFd48JhQIjSaR0
T4D8ZQfpa1XF7Zlxur8iKJvMmOSMBgklx6eLP5tXAGgGDLCK/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO9ANmsp8RprVIbTqZLeca1ttrOHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWUxYzVjOTYtYjYwZC0z
ZTI0LWJkZTUtZGZiNzcyN2Y3OGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB8V1hUb7EBcdMuIE+cn9bNlSqf83OgOu0RrocX
GdFmu0yTPdnkSvBpck1BzKt3b/3q/XT3yXeh/RMe5cHT3t3CI4ZThL0NrbbLTzYa
GPqWjGYT7vFC66yw+kY8s9N2XUdSJE1t2XFR/guEcWZIYspUeKXDS+/1ZzjP7ibX
JbwZgH1WI/UqVksHvkfdEA1zuJ540douo0klRd3pDuYThLlD4yiZrWC0i9iuqyq1
iT/CO2acVNLx8aDGoE1Je39AYefPpujbUhWRVE09kYSNatV7prnWJnsTAJbc742w
yXpF9Dy6V9NpHnZzP17sPDHFylgHrQczLeAlBOW5EUIML2l/
-----END CERTIFICATE-----