Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/772460e4-b696-3b1d-a162-4819f58ba7b8.roa
File:                     772460e4-b696-3b1d-a162-4819f58ba7b8.roa (raw, json)
Hash identifier:          yk1P39/upEmT0hYBWfsCb+sPhpSpKAHllCtdyYwzhCQ=
Subject key identifier:   E4:9E:01:88:E1:77:23:AA:0C:D5:44:28:7C:71:7E:2A:26:2F:97:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494039809A84D54ED82F58ECA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/772460e4-b696-3b1d-a162-4819f58ba7b8.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     396617
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:80:9a:84:d5:4e:d8:2f:58:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=0d35e787-46d8-4fcc-8154-906e4ea5ca29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:1e:92:2a:33:a4:dc:bd:60:10:3c:2b:24:
                    09:d8:d4:ad:cc:7b:23:d2:63:90:b9:48:00:97:50:
                    d7:d4:6b:25:0f:7e:5e:06:ce:7f:bd:b8:50:07:73:
                    3f:3b:7a:04:b9:ad:2f:97:31:36:d2:b7:1e:b9:0f:
                    00:0b:f8:7e:5f:c6:61:e0:f6:89:d4:6f:a7:b7:10:
                    02:58:3a:3e:fe:b0:2a:78:de:e3:cb:06:57:5b:ec:
                    30:12:7a:95:14:88:0e:ed:4f:84:81:d2:94:c7:ef:
                    9f:90:c1:f3:02:de:8e:be:7e:66:e3:a2:ac:98:74:
                    c8:34:c8:90:4e:bd:ba:38:26:61:46:75:cd:43:9d:
                    ac:d6:26:91:70:4c:47:bb:f0:54:9a:0c:40:92:41:
                    55:26:b3:38:cf:f3:84:f1:dc:d0:44:d9:4b:6e:98:
                    31:a1:4f:7b:30:42:53:a5:cb:b5:05:77:57:70:f6:
                    11:3a:81:9b:3a:18:0f:1b:22:05:51:59:9e:2a:99:
                    c6:80:47:67:07:72:81:d4:1c:f3:cc:bd:63:77:57:
                    a3:62:ee:58:55:e1:18:71:0c:8d:b1:87:ac:75:6d:
                    28:3c:ad:d2:7e:8b:87:d2:d8:1c:48:88:dd:b8:6e:
                    8d:19:9f:8e:a6:b8:0f:4f:ff:0b:bb:37:e3:6c:2f:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9E:01:88:E1:77:23:AA:0C:D5:44:28:7C:71:7E:2A:26:2F:97:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/772460e4-b696-3b1d-a162-4819f58ba7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:83:b7:17:90:4c:ac:35:0b:1e:57:57:42:1f:c1:82:4f:
         70:54:c5:25:fc:cc:68:5c:66:1b:31:71:78:1d:61:e6:a5:a1:
         06:8d:6f:3d:66:68:24:ad:67:4c:f1:61:03:9a:c6:dc:ff:3b:
         17:5e:d7:bb:9a:c6:2e:8f:e9:6f:c3:9f:6d:98:3f:1c:d1:e1:
         42:31:89:ce:97:bc:9b:ff:1f:31:80:45:52:74:1b:da:8e:f5:
         88:19:c4:63:d7:36:fe:5b:40:fd:8e:e6:e2:97:1b:23:27:b3:
         cd:e1:a7:b8:ee:a4:42:a1:84:1d:63:ae:e8:04:30:c0:8f:38:
         15:bb:7b:e7:5f:55:5a:e9:fd:07:99:63:a3:8b:b7:c3:7b:2f:
         a4:ab:94:1e:2c:06:53:0d:97:ff:9d:a5:f8:26:7b:62:0f:4d:
         90:55:d2:7a:ce:28:d9:0d:6e:1f:21:b8:e5:82:19:cf:20:f4:
         70:b9:1c:65:76:86:16:ff:e4:7b:24:67:fa:ef:71:ad:03:96:
         8c:88:07:bd:46:a2:20:8a:e3:9a:d3:e2:e8:f9:87:f3:58:53:
         c3:b3:5c:58:bf:b6:51:fc:13:bd:33:71:c2:52:bd:a1:a2:97:
         99:56:56:0c:e7:62:fe:fb:d4:c2:90:51:a2:38:75:ba:d2:80:
         3f:51:e7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----