Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa
File:                     f25258cd-4993-32b9-98e9-af41e0a3f994.roa (raw, json)
Hash identifier:          7Ne5ywv9suXQV6F37gFIG0dICXghi+naGsMxcyRlLmc=
Subject key identifier:   45:98:81:1B:73:A3:2E:89:3D:34:37:73:15:38:5E:9D:DA:DA:17:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496CE48190C4D3ABC9AF34B1C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     396569
IP address blocks:        2001:500:7967::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:81:90:c4:d3:ab:c9:af:34:b1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=43cb6d9e-4aa9-477c-b463-d8a04244aedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:33:28:12:26:55:15:60:29:12:4c:66:48:
                    b9:49:b1:d9:f4:40:a7:43:be:72:3f:1e:ff:9e:8d:
                    53:84:55:23:46:d9:b1:d8:f1:0b:10:1b:aa:15:4c:
                    c4:a7:f2:e6:77:90:7b:f5:3e:c8:c8:db:62:89:11:
                    00:85:67:ae:24:bb:54:8c:1a:df:cd:fe:c5:82:90:
                    a7:75:97:06:2c:20:95:93:97:98:a2:5b:7a:17:9c:
                    7a:8a:ce:c6:b1:fd:0d:38:59:89:0a:26:ab:bd:84:
                    8c:56:8b:8b:c4:c9:8c:87:eb:bd:de:e6:6f:16:b5:
                    d6:97:79:04:82:b9:0d:38:a2:69:a2:ff:a4:3c:be:
                    86:08:72:d9:e5:c8:cb:50:d5:1c:6f:c8:6f:8d:e0:
                    e1:28:d8:3e:51:11:f0:61:fc:60:49:c2:d5:5c:06:
                    c6:21:c7:ce:4f:c5:c2:b4:f9:51:d3:a4:2a:66:ce:
                    dc:99:eb:f4:0f:f5:4f:23:9b:ab:a8:63:f2:85:b5:
                    bc:ad:77:b0:60:8c:37:51:70:17:18:54:e4:58:b4:
                    2c:ef:a4:84:81:08:e7:d1:30:12:a5:e4:7d:d8:4e:
                    a9:27:0c:2d:05:64:a3:1f:cb:23:4c:4f:5c:c3:cf:
                    1e:f8:b4:3e:ad:73:0f:fd:88:34:66:2a:30:2d:4a:
                    c9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:98:81:1B:73:A3:2E:89:3D:34:37:73:15:38:5E:9D:DA:DA:17:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25258cd-4993-32b9-98e9-af41e0a3f994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3f:d8:4e:76:d9:58:b7:d6:a4:29:c6:b3:1b:9d:33:f6:f6:
         04:46:03:ea:11:18:06:a5:8e:65:2c:94:ec:99:26:d4:df:b8:
         fc:11:94:c2:4a:f9:18:04:6a:ac:c6:e4:28:25:ee:54:84:c1:
         70:80:50:07:cb:20:04:9c:27:a2:5e:ed:f8:a0:50:2d:21:fe:
         d9:c5:44:01:b6:a7:b8:1f:d8:db:b9:f8:79:3f:22:dd:cb:36:
         e4:18:c6:b5:06:bf:e7:9a:ae:d0:52:ec:21:01:d0:68:52:31:
         50:50:28:e5:aa:c0:03:91:9c:18:30:9c:a6:84:05:15:e2:e3:
         6c:ff:51:b4:26:9f:88:c2:b6:df:1c:5e:80:d9:21:3d:c3:f7:
         a1:08:15:77:fa:f0:9e:80:d1:d1:05:82:e0:6f:9a:c1:f3:00:
         79:c5:54:e4:cf:7b:b6:89:5c:0f:cd:bb:85:90:0d:7f:52:e4:
         e5:4b:f2:d6:84:c8:2a:16:21:cc:0e:78:fd:97:82:67:ee:95:
         b7:34:3a:cf:28:c5:8e:f3:4c:df:8c:64:da:b1:80:23:49:79:
         9a:18:70:15:03:42:fe:5d:00:cc:01:ec:31:8c:f4:6a:db:e6:
         44:ea:76:23:92:08:16:b5:68:08:3c:e7:2c:20:22:9c:79:45:
         28:16:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----