Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/179c8234-edad-343d-b01d-60eb79d5b0f0.roa
File:                     179c8234-edad-343d-b01d-60eb79d5b0f0.roa (raw, json)
Hash identifier:          5rzyiX6ZsRl24gV5elf6YQE/1Xnuh2bDIRIeLl/eB90=
Subject key identifier:   E3:FB:DE:B5:31:17:DB:96:18:B0:2E:A2:3F:64:19:6A:D7:BE:25:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E4B11033AFA4288ECD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/179c8234-edad-343d-b01d-60eb79d5b0f0.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     397210
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e4:b1:10:33:af:a4:28:8e:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=9d0ad7de-9bf5-4bbe-9d76-d672a462b893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:3c:3f:65:be:e1:55:7a:87:20:b7:86:9a:
                    bd:21:81:6d:ed:25:9f:e3:60:6f:1c:3b:df:ae:07:
                    d9:76:f5:91:6e:40:a8:e5:1e:dc:ee:6a:97:55:7e:
                    2f:06:f6:c1:a3:17:01:0c:fa:69:c2:70:74:ba:6a:
                    9e:32:ac:94:b5:4c:cb:08:84:bc:d5:5d:39:9c:0d:
                    eb:ba:ed:62:f3:57:c9:f1:0d:59:3e:c2:9d:bc:2c:
                    ee:1b:82:f4:d9:6f:93:ef:e2:9f:1e:5d:32:58:c1:
                    b6:3e:54:65:cd:4d:5f:50:6f:c5:34:01:12:90:38:
                    5c:ea:e4:d8:23:af:7e:0d:ca:a2:52:67:bd:11:58:
                    9d:b6:88:0b:33:fb:33:09:f5:f5:d6:df:3e:a4:4a:
                    49:a8:2d:b3:cf:f5:26:30:a7:30:0f:b6:5f:e9:dc:
                    af:8b:dc:e8:f2:ed:29:9a:08:df:a8:1a:c7:df:0e:
                    3b:75:9d:fa:6f:8a:61:52:a0:8f:7d:51:92:54:60:
                    ac:53:7c:50:f1:be:f4:f1:92:2a:0d:bf:ae:79:78:
                    dc:fd:b2:7f:72:19:c5:f4:fa:7d:40:09:e8:2f:32:
                    c3:65:70:31:83:27:1b:70:d5:47:f4:ce:c6:91:0a:
                    98:53:6d:6e:e2:37:5a:03:17:4e:ed:a2:ef:80:b6:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:DE:B5:31:17:DB:96:18:B0:2E:A2:3F:64:19:6A:D7:BE:25:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/179c8234-edad-343d-b01d-60eb79d5b0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:18:09:21:a1:00:e3:e1:cb:78:9c:90:c0:79:55:26:3d:
         12:72:d8:fe:1a:97:2d:b2:69:1e:4b:c1:82:60:d1:83:6c:80:
         83:85:bd:f4:15:63:3e:3e:5c:6a:4c:85:9c:ed:19:43:75:ac:
         84:5c:79:a5:95:03:8f:e8:39:b4:b2:f2:a9:b1:1f:a1:58:97:
         b5:3e:e9:a6:b3:ff:bf:10:ea:b2:15:e6:52:05:20:96:e3:17:
         d9:d3:81:98:74:d4:ea:a3:e4:8c:a5:ec:d7:c5:e5:35:34:6b:
         87:46:df:03:78:e5:8a:30:57:d6:95:c9:03:3b:e3:11:62:85:
         37:2b:d8:c0:6c:ae:ab:94:cb:42:4b:54:84:05:78:55:d1:6e:
         2b:6f:59:61:c9:c5:a9:ee:94:9e:d4:0c:b4:2b:ea:c1:23:de:
         09:d3:1b:b5:ad:cf:70:fe:ae:94:2b:cd:31:21:60:db:33:ba:
         ba:84:b7:a5:20:50:5b:a1:4b:0c:17:75:3e:93:d0:a6:66:91:
         e5:90:c9:54:61:c0:d6:a7:51:9e:03:71:46:48:40:51:c6:ca:
         da:35:91:e8:e2:2d:af:64:11:6d:4a:6b:c0:a5:5f:55:3b:bd:
         49:7d:cf:5d:54:0b:e8:6b:d0:2f:b8:91:f5:d8:70:99:44:51:
         6a:05:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----