Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb3065f8-1ec2-3da4-b372-22da53e557ab.roa
File:                     fb3065f8-1ec2-3da4-b372-22da53e557ab.roa (raw, json)
Hash identifier:          2j5C6ApFDvKvPGN928BFZNxXpC8yf20/RIOX0H0MbPg=
Subject key identifier:   13:8A:E4:9E:80:5D:15:F5:D3:31:E5:26:EA:7E:FA:83:69:17:E8:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183FABC6ACCC4C511F04940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb3065f8-1ec2-3da4-b372-22da53e557ab.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396577
IP address blocks:        2001:500:127::30/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:fa:bc:6a:cc:c4:c5:11:f0:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=211606d1-93f3-4f55-a5a4-a94d5ae35d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c1:af:28:73:7a:27:f8:6a:a2:a5:23:66:39:
                    c2:7f:ca:75:3e:27:ed:07:26:e9:c7:2d:00:7f:3b:
                    92:d5:6e:47:32:d5:16:e8:87:c5:f0:95:84:22:56:
                    67:78:36:e4:6f:cd:99:3d:e2:14:3d:f6:e3:54:72:
                    ae:fc:a0:fb:a6:c8:41:aa:33:c7:26:fa:35:6d:65:
                    9e:20:79:33:ce:d9:de:ba:12:bd:2a:5b:fc:05:92:
                    ce:e5:27:74:ab:0e:38:30:18:36:90:11:76:49:37:
                    d1:a9:ae:4c:c9:82:8c:fa:d9:c1:6c:96:db:fb:79:
                    f7:e1:75:f0:c9:58:6f:cd:11:eb:c3:0c:86:93:67:
                    e0:ae:49:e0:61:7f:d6:7c:17:59:48:0b:49:b0:a3:
                    70:71:6c:f2:d2:0e:76:48:1d:fd:dc:f5:84:26:dc:
                    73:68:da:4d:b3:cd:74:e8:7f:9a:06:51:02:9c:fb:
                    1d:66:b7:2a:b4:e6:74:35:36:56:86:41:ef:fc:70:
                    92:7d:65:95:6d:53:1c:1c:95:11:8e:2d:af:e9:6a:
                    da:a1:bc:28:05:13:c1:db:3b:49:05:29:8a:98:90:
                    ca:ce:d8:d5:6e:b6:bd:6e:88:83:1e:bb:77:3c:68:
                    3d:bd:f5:55:bf:48:2e:1d:be:50:95:d0:46:5d:d4:
                    9b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8A:E4:9E:80:5D:15:F5:D3:31:E5:26:EA:7E:FA:83:69:17:E8:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb3065f8-1ec2-3da4-b372-22da53e557ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7e:02:77:59:0f:db:d7:d5:fe:29:59:bd:da:cd:21:07:c7:
         25:76:47:72:82:8e:35:2b:e3:22:2a:c6:53:8d:fc:42:5e:a8:
         df:96:c9:8a:8d:92:47:b0:2a:70:2e:e7:77:7e:0a:59:d7:d4:
         ff:a4:0f:36:dc:ec:c9:40:ea:45:03:03:f7:72:6c:41:e3:93:
         37:e3:33:af:77:61:e7:98:69:c3:77:ff:52:5f:cd:52:fc:19:
         cc:e3:ce:98:71:dd:f5:7e:bc:1e:37:a2:bb:a3:2b:c7:b8:f7:
         06:7c:55:11:b4:4e:e2:b4:41:e2:c1:b6:e1:fa:0e:a1:62:dd:
         44:23:5a:17:c5:83:a7:df:d6:e2:ec:f1:9c:a7:68:d7:2b:73:
         60:61:8e:06:2f:3b:c0:18:c1:03:88:26:60:4d:6f:3f:f0:c5:
         74:98:a8:e2:fc:d9:33:7e:80:e6:3f:b1:7d:d6:2f:99:69:fb:
         47:27:25:2e:9d:b8:2b:27:16:1c:db:e6:f4:81:a3:95:73:3a:
         56:5e:db:e7:7e:fa:c1:42:6e:15:97:aa:c8:61:8b:7e:77:0f:
         66:3d:6d:80:a7:0b:bd:a4:a0:5b:c7:4a:6c:d8:54:95:2e:b0:
         9a:32:18:fb:ed:ec:3f:b2:53:2d:c7:e3:3a:45:72:ba:4f:ec:
         b6:0d:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----