Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
File:                     0f45d07f-7df4-315d-9785-ca26ab59efe3.roa (raw, json)
Hash identifier:          mglVjuP9gt6lTxn2SKTCTT3mkcxf5kN6h8IebgOZMs4=
Subject key identifier:   D0:D7:CD:02:D6:A0:92:DC:01:A5:CD:02:9D:71:6A:57:32:33:65:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C8135F63A24FEC59A9180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396586
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:81:35:f6:3a:24:fe:c5:9a:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=b347513d-cbf5-47a5-980e-4ae1e7589410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:2f:bb:84:83:53:bf:53:ae:e9:49:9d:51:
                    6a:6f:9e:44:b3:13:bb:94:31:c3:ae:ec:37:b6:77:
                    29:cf:d0:e8:64:cb:b5:08:83:b4:4a:dc:4c:40:7c:
                    27:33:f6:21:84:c8:36:1e:bf:6c:88:ba:8b:31:cb:
                    59:f4:53:08:54:36:7d:cf:45:91:fe:1f:7c:1e:f0:
                    ae:8f:90:6c:4f:99:29:33:fd:81:7f:d4:ad:a7:ea:
                    3e:db:83:0d:8a:40:e0:90:92:66:ac:60:1a:61:ae:
                    ed:b0:37:9c:6d:d7:3f:40:3d:a3:32:9f:8b:fd:b4:
                    ba:5b:0a:58:28:a0:a5:0f:10:05:2f:25:6c:d7:08:
                    b7:48:d3:b5:b4:9c:4f:cf:72:aa:b4:f9:6d:0c:a1:
                    15:65:cb:d4:0d:8d:7c:9d:e2:5a:03:51:ee:45:26:
                    ea:36:28:2d:60:b7:5c:39:d0:9e:27:3c:c3:bb:83:
                    e9:fc:3d:b7:e8:a6:be:2a:e4:2d:41:2c:36:9e:3b:
                    0c:41:18:96:86:90:72:ca:2c:f3:cd:31:a8:4b:0e:
                    c8:c9:8b:a1:18:5d:1c:29:af:a9:42:c3:5d:3f:35:
                    a0:c2:ef:c0:0e:dd:b1:33:21:1a:a8:54:cc:90:5d:
                    d4:cd:3f:75:ce:a3:15:3d:75:88:7f:0b:7c:51:fb:
                    a1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:CD:02:D6:A0:92:DC:01:A5:CD:02:9D:71:6A:57:32:33:65:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f45d07f-7df4-315d-9785-ca26ab59efe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cc:04:76:a0:b5:a3:4d:93:f1:59:e8:5e:34:d2:82:db:5f:
         ee:36:49:1d:4e:bc:f2:9c:39:ca:e1:6d:8b:5e:06:67:55:85:
         6b:e5:fc:cb:1e:ec:94:e0:ae:a5:17:54:ea:5a:44:60:2e:5d:
         46:9f:56:87:04:02:66:d8:bf:9d:e5:19:d8:b6:1f:ce:4d:dc:
         93:67:e5:91:7c:55:43:e7:ee:aa:cf:64:53:e1:9b:f8:ea:fd:
         33:4d:87:6c:89:f3:31:c5:ce:c5:62:f3:91:5f:b0:0e:d6:1a:
         19:f6:9a:b5:b1:c7:32:41:19:8b:af:bf:3c:48:88:5f:56:49:
         9a:36:50:1d:bf:81:c6:f1:01:95:40:d7:66:a2:e3:d6:13:78:
         3b:c7:68:a8:38:12:56:fc:51:b3:a5:8f:61:a9:0b:79:6d:29:
         01:53:b8:fc:95:53:7f:20:bf:39:0b:d1:69:3c:6b:38:41:10:
         31:15:43:d9:d0:48:b3:14:72:df:8e:a1:59:37:2a:a7:93:58:
         c2:78:4e:3b:8c:2e:ea:18:64:21:47:5a:ad:39:e9:6f:db:bb:
         4c:25:0a:82:b9:3e:7b:08:46:1b:41:3a:37:64:16:0b:1e:0e:
         2d:ec:56:bc:98:15:7d:20:73:99:29:3c:95:22:0f:9c:35:8c:
         e5:08:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----