Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa
File:                     f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa (raw, json)
Hash identifier:          BGq4thnvZP5HVr0w58cG4hKt1mLhp5TgZD+FKcMIdRI=
Subject key identifier:   97:A5:F8:73:85:DB:E5:71:AA:84:6A:10:0D:70:5B:19:47:63:55:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEF8CDABBDB85F1F07CC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     19836
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:f8:cd:ab:bd:b8:5f:1f:07:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=eff7ce1f-ae10-4afa-8c16-d8031772be74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:6c:5d:f5:f8:71:6f:8d:8e:29:70:26:c4:
                    d7:1a:86:1d:a3:17:f3:2b:e6:17:c5:23:75:88:80:
                    2c:eb:a8:ca:9b:e7:10:85:4e:be:cc:4e:57:bd:15:
                    69:d8:04:da:5d:f1:7d:28:0e:69:08:fa:32:e0:da:
                    49:bc:e2:6b:53:d2:54:57:46:6a:9a:66:3f:bd:95:
                    50:c8:25:36:47:82:a8:8a:7e:20:30:2e:d4:ae:64:
                    92:ba:1c:c3:d2:2e:07:75:72:da:4c:c4:ba:a8:c8:
                    86:e9:ac:05:67:da:69:a9:1a:c1:6c:4f:0f:2a:f5:
                    43:8f:10:eb:17:40:13:92:5b:c8:c5:08:e5:07:42:
                    47:d0:57:57:92:4f:0b:47:53:15:35:67:79:a9:ed:
                    bb:9e:7f:f5:15:35:f3:f5:10:08:ae:d9:27:28:19:
                    0b:c0:e3:03:7b:4e:ff:7b:a0:6d:9b:57:62:15:f5:
                    29:0f:73:59:8b:55:01:f6:02:6f:6d:20:16:db:d6:
                    2f:46:86:92:78:3a:ba:a4:c5:d2:13:fb:e6:79:4d:
                    3a:44:00:d3:5b:78:a1:59:16:93:d6:5f:07:1e:79:
                    9a:ec:a1:d8:87:a2:d9:1e:7c:1c:5a:cf:da:57:b1:
                    9a:6a:1d:7b:9a:db:7d:3a:4e:d6:38:2a:51:48:21:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:F8:73:85:DB:E5:71:AA:84:6A:10:0D:70:5B:19:47:63:55:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f178653e-2429-3dfe-ae09-4d2e9a5215f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:5b:50:ec:e3:45:f4:2f:41:22:97:ab:80:2c:3f:bb:f7:
         5b:45:a0:7d:2b:1c:eb:a4:51:0f:20:fd:c6:e4:70:e0:fc:c6:
         b0:52:0f:71:34:a1:ec:50:d8:90:4d:3e:65:26:c2:66:a0:52:
         da:33:4c:9c:94:c8:3f:2e:7d:08:a8:2c:b6:ce:91:1d:c8:5a:
         c7:fa:82:47:8d:ed:c7:c7:b1:62:d9:f5:7b:1b:06:8c:be:cc:
         7a:4a:4d:10:ef:bd:20:45:05:82:5d:82:fa:05:cf:42:6e:d7:
         d0:dd:33:eb:92:51:a5:21:71:53:f9:32:16:bb:6f:b3:e7:d7:
         6f:85:7a:05:30:a5:6f:5b:cb:8f:67:b8:c4:79:4a:b9:09:d5:
         25:9e:be:7a:f2:4e:35:2a:14:9d:53:ad:35:99:b4:79:11:33:
         fb:14:f8:22:d0:77:28:fb:3a:1d:b0:71:da:36:42:b9:18:2a:
         8f:c8:38:4c:97:e8:8b:9b:e6:b6:2c:87:c8:68:34:e1:b5:41:
         33:a2:71:66:ad:ca:9c:1b:f9:b1:6c:6a:4e:00:dd:45:01:63:
         fb:4f:66:b1:b4:4a:18:17:b8:0c:34:f9:ea:04:99:68:9e:b0:
         e1:7a:8e:69:4c:17:6e:ab:dc:9f:df:67:de:0f:da:e7:8a:7f:
         2b:34:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----