Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa
File:                     0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa (raw, json)
Hash identifier:          1iWyp08oVoNJRmSpAASHeAI0ueCiQNLiez4cvEdP6SY=
Subject key identifier:   50:36:C8:B2:03:6A:86:80:34:68:01:05:19:85:3A:BA:7F:A9:DD:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E851A8B50BF418F0FB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396615
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e8:51:a8:b5:0b:f4:18:f0:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=47992df3-ee93-4bb4-8a45-1a07bfcc055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:a1:fb:c9:cb:8d:c9:07:9e:e5:68:07:13:
                    d3:38:04:cc:10:49:9c:dd:8f:90:93:be:38:1b:20:
                    27:16:dc:00:b1:28:47:67:0a:26:7f:6c:56:09:a5:
                    26:fd:0e:b6:7f:12:3c:89:e2:01:a1:10:4e:c4:19:
                    2e:75:7b:c3:e6:92:54:97:5b:20:05:e7:f3:9d:f2:
                    08:99:f0:e4:c4:be:4f:87:25:b5:c2:e7:7f:93:9c:
                    6c:3d:28:73:45:49:db:b9:af:97:1e:28:9e:3f:c1:
                    f8:b8:11:07:70:f4:69:fa:95:b7:79:7f:86:a3:bd:
                    94:c2:05:64:a7:db:ed:7e:82:26:94:72:f6:8f:fa:
                    04:e5:5b:33:fb:28:7b:56:9d:97:b7:87:9a:eb:70:
                    32:35:ef:48:be:4b:cb:f4:ed:93:2a:2b:4f:6d:da:
                    d4:84:50:78:14:3d:39:fc:94:a5:03:47:2c:f6:b6:
                    0d:fc:9a:57:1b:13:84:d6:bc:4d:a5:67:64:47:48:
                    1f:83:36:01:a3:44:b5:70:59:ec:30:2b:d4:c0:f5:
                    6a:44:1b:56:8d:e3:6b:a1:42:9d:63:b0:21:99:3a:
                    62:0a:3e:29:89:97:aa:70:fa:f2:92:05:26:f4:f8:
                    ab:dd:9c:88:4c:90:57:30:26:52:e8:e9:57:b7:ba:
                    10:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:36:C8:B2:03:6A:86:80:34:68:01:05:19:85:3A:BA:7F:A9:DD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:a9:f0:8e:cc:d9:d3:96:7f:30:d5:93:d8:a9:fb:2f:1d:
         93:b9:72:01:6c:07:27:47:ff:c4:4f:f7:0b:d1:93:94:3e:67:
         70:87:ea:9d:63:00:c8:70:dc:3a:09:e2:1e:25:bb:dd:9c:6f:
         07:1c:d8:eb:c7:c3:1f:50:71:1e:ca:9e:de:7c:63:78:d2:f3:
         4c:21:5f:ba:b2:76:f7:a8:0e:01:e1:00:3c:37:7b:4d:ec:26:
         73:a6:4f:ef:56:9f:52:71:85:4b:5a:3e:56:c2:7e:cc:d5:fb:
         e1:e3:bd:79:2a:d6:ff:ac:eb:a4:ec:bf:a4:a8:93:ea:7a:7a:
         c5:f1:38:a5:9c:f8:4b:d5:c3:36:db:ad:c3:95:ba:d1:37:e2:
         e5:a7:86:10:5d:09:99:80:9d:35:ab:c3:66:b3:3a:8b:45:98:
         d6:88:2c:55:23:83:1c:7a:4b:a7:29:7d:e9:dc:3c:f5:48:df:
         df:06:b3:d7:a9:48:1a:61:63:30:9a:c4:f8:36:af:5e:25:8a:
         96:22:70:90:71:97:1f:af:c0:c9:b0:a5:0a:a2:86:5e:37:92:
         c7:6c:e8:71:b0:c8:d0:d8:da:e1:da:cd:bb:19:b6:d6:4d:5d:
         7b:b7:4e:c8:2a:9d:76:5a:28:19:37:b3:94:b1:bf:8b:34:4a:
         a8:94:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----