Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ea69969-60ed-3833-ab9e-db4977312925.roa
File:                     0ea69969-60ed-3833-ab9e-db4977312925.roa (raw, json)
Hash identifier:          NdpSu8AWrdhEislMGmnj/ZidP9KeSFlFSz/EmAp4EyY=
Subject key identifier:   CB:12:9F:6D:7B:9C:D9:C7:49:7A:C0:8A:A3:34:92:13:B6:0B:21:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E1FF80C8473B8A4FAB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ea69969-60ed-3833-ab9e-db4977312925.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396570
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e1:ff:80:c8:47:3b:8a:4f:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=996abade-ed25-4f1c-8d4f-3cbbec170e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:85:11:bf:b2:99:d4:fc:22:08:29:d7:99:
                    c0:3a:d5:5e:18:72:77:6e:ef:84:11:d2:c0:62:62:
                    80:f3:31:e6:37:a6:56:df:49:35:34:ff:df:b8:40:
                    b4:79:89:97:49:a5:2b:60:70:07:e3:ea:46:cd:16:
                    36:7e:3f:c7:21:d9:3f:dc:d1:87:16:6c:28:46:40:
                    af:92:f6:0b:7a:da:95:7d:0b:16:92:13:e6:59:9d:
                    b1:3b:e5:e9:ca:44:ab:7f:57:94:18:12:07:5c:ac:
                    7a:96:2e:17:19:35:a3:08:3d:48:57:f0:77:61:cc:
                    d5:34:14:05:06:45:15:bb:8e:54:6c:df:cd:00:a0:
                    80:f6:9e:a4:a3:85:f7:39:e2:5e:75:ea:00:ca:05:
                    e9:13:6a:24:5e:f4:6c:e6:9c:fc:13:12:6f:c9:1d:
                    9c:9b:5d:ba:a8:e8:0d:e6:07:7a:3c:31:46:73:5b:
                    76:21:8d:e0:28:cf:36:5a:b1:9e:81:26:97:bf:01:
                    31:3f:81:a4:bc:a1:f1:4e:5c:78:5b:e8:4a:80:83:
                    f4:4a:44:60:d0:70:a1:f4:da:ed:0d:65:45:3d:25:
                    30:e4:b6:81:91:b3:a8:f5:b4:11:5a:60:dc:cd:49:
                    e0:48:f1:bc:68:31:75:0b:b0:99:15:30:6a:e3:c3:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:12:9F:6D:7B:9C:D9:C7:49:7A:C0:8A:A3:34:92:13:B6:0B:21:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ea69969-60ed-3833-ab9e-db4977312925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e4:20:11:6f:5d:f7:2f:a1:9b:d0:aa:ec:49:38:5e:b0:04:
         0d:dd:68:27:18:47:25:a2:10:de:44:cc:6f:fb:59:58:7a:dd:
         79:0b:0c:10:46:9b:1a:ca:45:12:de:a2:7a:8d:cf:bc:df:f7:
         6d:f8:e4:36:15:5a:4f:5f:86:0e:83:92:9d:f0:9f:98:9e:b2:
         1b:ca:e8:38:c2:e5:78:6a:3d:9f:fd:4c:25:ad:66:b7:5c:9c:
         bd:30:89:19:8d:f8:fb:92:40:c1:fb:c5:a3:b1:36:50:85:8a:
         45:1d:27:7f:7d:da:86:33:1b:65:1a:38:7a:8e:90:f8:f1:41:
         6e:b4:fa:25:05:08:66:aa:da:e1:36:ce:5f:5e:fe:4c:cf:4d:
         f9:a6:24:b3:13:1c:58:b6:6b:69:0b:17:64:4e:b5:55:f7:0d:
         42:c4:a3:23:3e:9d:fa:35:b6:5f:55:9c:a8:19:ff:ef:4a:aa:
         69:cf:eb:f9:86:82:ff:ce:20:2c:2b:43:6b:d5:d3:95:f5:cc:
         71:00:99:1e:17:77:fe:23:93:6e:69:4a:ec:bb:ae:07:da:f9:
         f5:15:99:ce:85:e8:ba:74:78:1e:eb:6d:2c:8f:5d:eb:4f:cb:
         5d:1d:69:6c:39:72:e6:98:ee:46:20:67:4b:f6:9c:67:34:30:
         92:fb:7c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----