Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1839b13d-461a-3f46-b91d-1f667e73f083.roa
File:                     1839b13d-461a-3f46-b91d-1f667e73f083.roa (raw, json)
Hash identifier:          hLhyLFcPtMGFld602gAS0nrbXlBuzkdCvvjdgVeMNPE=
Subject key identifier:   E6:20:86:19:FE:ED:29:FE:06:94:69:F9:D8:20:55:50:1E:34:D9:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744E8CB5B5FE35D7505440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1839b13d-461a-3f46-b91d-1f667e73f083.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     397194
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4e:8c:b5:b5:fe:35:d7:50:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=6a6af2a7-69bc-489a-9a75-d24f0330e5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:12:7b:7e:13:25:73:a0:91:d2:fc:91:c3:
                    95:bd:af:39:1d:75:b6:5d:45:f4:3d:3b:6a:97:bc:
                    5f:3c:c4:69:36:19:20:17:9a:4a:20:05:67:5c:bd:
                    aa:bc:a1:44:6e:44:b4:aa:6c:6f:ed:37:97:02:d5:
                    00:7a:aa:7f:a3:12:ca:41:83:ad:96:01:a5:9b:eb:
                    0f:9f:c8:05:b1:32:76:c7:1e:2e:1e:8f:7e:56:4c:
                    47:42:6e:cf:37:10:7d:1e:27:bc:98:f8:e7:25:1d:
                    7f:26:da:48:a4:54:d7:1b:9e:b6:ea:8e:0b:8d:12:
                    40:f1:7b:be:c3:d5:4c:47:fe:f6:a5:68:8e:33:fc:
                    9c:60:05:68:36:20:88:5a:dc:19:0f:e9:89:1e:e7:
                    35:de:91:62:61:ad:a5:03:a3:49:52:8a:15:91:c2:
                    c7:e7:ab:90:48:fc:f6:69:c8:bc:59:b7:20:0e:8a:
                    ac:bb:a9:87:a1:8a:c2:b1:b7:96:7b:78:c7:75:c4:
                    63:bb:a6:f1:ac:1f:8b:a7:d6:67:a7:8c:af:26:26:
                    2a:ba:a8:2a:a7:e5:5e:f3:24:00:fd:c5:4f:63:6d:
                    3b:06:58:48:8d:17:cf:9d:8e:a2:05:13:ca:13:f2:
                    dc:a7:3c:81:66:b8:4c:a1:8b:d9:0f:ee:22:bb:22:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:86:19:FE:ED:29:FE:06:94:69:F9:D8:20:55:50:1E:34:D9:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1839b13d-461a-3f46-b91d-1f667e73f083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2d:a6:9d:d2:f7:99:1c:13:ec:a8:78:b2:a6:d8:c4:7c:24:
         3e:2d:ba:40:2e:88:ff:73:0f:5c:c2:4c:e2:d4:bc:3f:06:4e:
         4d:46:29:e9:17:d1:1f:4d:f6:e9:34:3e:5f:da:9b:7e:10:c2:
         99:bc:02:bf:b8:bc:30:a6:b6:d5:72:c9:43:13:e9:54:f3:45:
         07:50:75:f1:f0:c2:4c:e2:a7:62:7f:18:16:b0:4d:09:d3:06:
         40:5b:f4:93:2a:47:e1:90:e8:18:0e:64:d2:af:d9:f3:f7:c7:
         0f:d7:a1:e1:e7:7c:80:0a:e0:a4:cc:d4:2e:7e:bc:8d:b1:b2:
         f8:3d:d2:40:ea:04:30:c2:76:09:6b:de:bf:5d:3e:4d:c6:80:
         8f:7d:33:2e:63:6d:28:31:50:a3:5b:ac:1c:4f:69:82:67:aa:
         6f:1c:55:3a:26:63:3a:bc:c1:0a:c6:de:2a:b3:e1:75:1e:4d:
         e2:2a:a5:cf:fb:57:b8:e6:54:c1:c8:86:89:9f:63:73:2a:5c:
         e7:70:6a:ba:af:d8:9e:65:66:8c:ed:b0:5a:f6:b6:83:2d:f3:
         c1:1d:a8:ca:c7:32:09:88:ad:d5:36:d5:f1:41:72:cc:b8:01:
         3a:70:e3:4a:10:0f:61:6d:2d:51:ff:84:5a:1a:b4:04:c1:d8:
         ca:8e:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----