Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa
File:                     0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa (raw, json)
Hash identifier:          XGHGXuc8rZkxgiSLsHu27tUW2QQJBI7W0h0CGvbw1kQ=
Subject key identifier:   89:EC:34:DD:76:79:5D:C2:9B:30:2F:5D:D5:DC:F1:E1:DD:B0:73:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744F2ECBC02CAE62C0C380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396609
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4f:2e:cb:c0:2c:ae:62:c0:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=d91cc7ec-d6d4-4e10-b87e-a66b016a3dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:43:87:a8:8e:2a:2b:47:17:cf:53:d1:1a:
                    31:7d:8a:c6:ff:ef:84:0b:0f:cd:85:2f:06:56:55:
                    d9:c9:ac:a5:1c:1d:22:49:ac:ba:f7:69:5d:b5:9a:
                    de:27:5d:6d:77:15:fb:53:84:03:54:d6:61:e9:03:
                    1a:77:c4:ca:c4:74:40:ba:62:ec:8a:10:4d:19:04:
                    6c:31:35:c1:21:fc:c1:18:63:a3:72:c9:1c:22:a8:
                    b7:9d:b6:cb:cf:e8:bc:d9:3e:0f:9d:1b:ef:20:3a:
                    3b:08:01:a7:57:15:23:bf:e8:93:ae:a4:df:08:ba:
                    ea:67:e9:76:39:c7:1a:ef:b5:8f:bc:88:78:b9:6f:
                    6d:84:4e:7c:78:05:35:b1:13:2f:a2:80:75:c7:87:
                    da:11:64:8f:ac:4c:c5:0e:4c:c8:44:a0:d9:43:c6:
                    f0:78:91:93:6b:02:57:70:ae:b4:d1:71:bc:5b:c7:
                    11:f1:9e:3a:05:fb:1d:23:3d:65:01:cc:a6:89:07:
                    8c:bf:95:34:1f:da:89:13:5c:7b:a1:45:cd:76:a3:
                    c8:7a:4b:10:a0:7e:b8:4b:d4:d7:e1:d2:fc:f6:30:
                    9b:0c:4c:ee:c8:ee:3b:24:82:02:00:06:4a:b3:4b:
                    82:e2:3d:07:ea:96:68:72:a3:75:09:b8:bd:b4:5c:
                    98:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EC:34:DD:76:79:5D:C2:9B:30:2F:5D:D5:DC:F1:E1:DD:B0:73:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e9f7415-1a93-3973-a8bb-79a15b8ec469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:00:a0:08:53:c7:d9:28:e1:66:67:09:dd:5c:bf:c4:f5:fd:
         28:69:da:d0:12:03:bd:7b:87:df:c3:18:1b:0e:7c:2a:f7:0b:
         19:d3:5b:34:8c:ea:ea:6a:6d:39:14:ff:df:c7:d0:9f:bd:fc:
         47:63:38:3c:ea:be:b5:c4:92:99:15:74:62:0f:fd:a9:81:7a:
         8f:dc:97:92:31:62:5a:65:d4:68:7a:a7:f9:00:1c:3f:c8:27:
         10:22:d5:7f:8c:28:26:57:78:3c:e9:ca:4b:ae:3f:df:d8:40:
         19:68:47:89:62:9e:61:7f:76:82:b7:6e:66:8f:cc:e8:dd:ca:
         82:ec:c4:ff:6d:dd:b2:38:d7:80:12:71:e1:84:c3:2c:d4:06:
         39:83:4f:0d:ca:17:92:2c:3d:eb:f7:aa:1a:7b:92:f0:15:b2:
         b8:e3:52:5c:03:ab:b7:14:8f:b5:33:f1:e3:f8:8b:bc:59:a2:
         a5:69:a0:8c:30:40:79:65:9b:12:88:d2:30:7f:a8:79:2a:d6:
         ca:b2:ae:55:5b:24:b5:a6:52:db:0f:a4:2c:48:a2:f1:34:0f:
         4e:aa:d8:7d:58:4a:49:a0:f7:01:3b:af:2d:d3:26:0a:75:7f:
         98:68:65:54:8f:45:9c:3f:a1:10:64:c9:86:9c:ff:ea:6b:ac:
         21:47:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----