Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/076852fe-c413-349d-b30a-133bc2e66090.roa
File:                     076852fe-c413-349d-b30a-133bc2e66090.roa (raw, json)
Hash identifier:          a8KQi4lC1t3dz3dkZY1OFK4hktRfWAJwi4QYaCznWJk=
Subject key identifier:   95:35:19:26:37:45:AE:0E:3B:5C:B0:28:3C:0C:59:F8:95:F0:C2:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B78448E112D8153B59E40120
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/076852fe-c413-349d-b30a-133bc2e66090.roa
Signing time:             Thu 30 Jan 2025 13:46:21 +0000
ROA not before:           Thu 30 Jan 2025 13:46:21 +0000
ROA not after:            Wed 30 Apr 2025 12:46:21 +0000
asID:                     396599
IP address blocks:        192.55.83.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:48:e1:12:d8:15:3b:59:e4:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:21 2025 GMT
            Not After : Apr 30 12:46:21 2025 GMT
        Subject: CN=7d66298b-62ba-40d3-b6b8-69c3d71c2cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:61:6f:ed:a8:f2:24:f5:48:18:47:78:f6:
                    27:2e:03:33:ff:d8:fc:31:20:08:ab:5c:bf:10:ca:
                    12:46:c1:c7:a9:fd:aa:7b:96:6d:2f:0c:b1:c9:33:
                    07:78:45:17:85:55:75:70:6c:79:8a:08:59:fa:f0:
                    59:b3:16:f7:7f:25:e4:f8:0f:64:f7:54:24:82:e8:
                    f7:88:1a:58:39:e0:f7:37:18:37:4c:2d:86:83:a6:
                    39:c7:db:7a:f9:c5:67:33:62:66:bd:fc:41:43:73:
                    b1:a2:b5:fa:b5:bb:aa:fe:91:90:c8:07:57:cb:4d:
                    ec:a8:51:be:14:9e:9c:54:af:86:51:d3:a0:63:dc:
                    ad:d0:c0:e3:d7:2d:e3:07:57:2c:92:3a:0c:72:8a:
                    43:ab:bd:0d:e1:3f:cd:38:0c:e1:d4:69:4c:d2:71:
                    a6:49:e5:f0:a6:ae:83:cf:d1:d3:49:ef:f3:2b:df:
                    71:f6:69:b9:a8:6b:9d:70:ca:fe:6a:66:3c:32:26:
                    0c:09:70:6f:3e:b9:a8:29:76:3b:e2:ae:9d:73:34:
                    6a:8c:a2:10:ec:c5:e5:28:13:0e:99:02:5f:2a:64:
                    3d:b2:b3:0b:c9:0e:ac:67:82:ee:d8:29:60:4f:f4:
                    f6:7d:78:36:3d:f4:13:61:08:a9:80:74:14:13:79:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:35:19:26:37:45:AE:0E:3B:5C:B0:28:3C:0C:59:F8:95:F0:C2:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/076852fe-c413-349d-b30a-133bc2e66090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e9:07:e5:ec:46:a1:13:b5:1f:6b:f3:30:f5:75:87:1f:1e:
         36:6b:9a:e6:4f:1c:b9:86:6a:61:48:b6:e1:45:fb:2f:b4:90:
         e5:c4:d7:a6:02:b2:a3:73:fa:6e:02:27:9b:8d:b6:7b:67:ae:
         d0:8e:46:a6:53:27:ca:5c:81:98:9e:93:87:e9:6b:3b:b2:fa:
         70:0d:4a:89:41:60:98:7f:a1:95:dc:77:8a:90:28:e7:10:a2:
         31:5a:ff:bd:97:a1:57:89:5f:71:32:84:c5:3e:13:c0:f0:cb:
         bf:b6:b6:c8:46:50:86:8a:c5:f9:11:c0:7b:e7:30:bd:89:8e:
         3b:18:55:cb:35:1d:f5:be:65:bc:a1:aa:2c:47:9a:f3:2f:15:
         3d:a3:82:64:e8:68:2b:00:29:c5:e5:ff:dd:80:0c:aa:ca:73:
         04:66:be:b8:70:4b:c2:e4:94:94:fa:8a:0b:15:47:dc:6d:e2:
         09:1a:a1:93:19:e5:a7:c8:da:d6:14:b9:1c:73:10:cf:f9:8a:
         99:b0:c4:63:75:8f:39:ca:4a:70:db:be:ea:24:a7:6e:bd:a7:
         e8:1d:2c:dc:d4:c0:d9:20:4a:f8:52:6a:54:aa:c3:58:1e:5a:
         05:b6:a0:cb:3b:c9:67:3b:d7:f9:be:a7:c8:b2:94:36:01:a1:
         9f:34:bb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----