Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa
File:                     23885c03-aace-3b48-a92a-a3768e582bdd.roa (raw, json)
Hash identifier:          ZFuppCwuL2RNN0XnzO7j8PrOF4vl2RuHM773QlJdpTQ=
Subject key identifier:   29:33:9D:23:97:49:41:31:53:83:66:42:89:E8:19:1F:E9:F5:6A:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F8F3099125273368AA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     36620
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f8:f3:09:91:25:27:33:68:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=538404c9-7018-4fbc-a53b-15a5fe5655a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ef:55:13:75:a9:5e:2a:60:d3:79:c6:71:46:
                    b1:53:fa:d6:5f:15:fe:9e:b3:15:d0:0e:76:aa:60:
                    37:80:49:e1:40:65:be:c7:86:9b:b8:cb:29:87:f1:
                    1a:0c:82:95:78:3a:9b:f0:b9:1e:cd:f8:fc:d5:cb:
                    23:55:5b:2b:6c:4a:55:a0:cb:dc:01:84:97:e8:0b:
                    32:bc:2c:28:22:24:65:10:29:75:0c:d4:24:4b:a6:
                    86:83:1f:a8:33:f8:61:12:5d:c1:d9:ec:f2:4f:59:
                    ae:5a:0d:86:52:60:57:2b:da:56:be:80:28:65:f9:
                    2c:05:44:2c:0b:30:bc:ae:c8:77:24:cc:50:2a:09:
                    92:06:a2:4e:65:a0:02:20:7c:ed:51:1d:57:77:84:
                    31:5c:f1:e7:81:c5:76:6e:eb:8a:9d:13:aa:e8:d7:
                    a4:21:a7:6c:b5:da:9a:36:49:13:49:a5:0d:3c:58:
                    64:da:d8:e7:9e:2e:d3:a8:ff:03:97:75:e9:c1:0a:
                    c9:01:6a:43:98:cc:60:c8:45:8f:45:09:65:c4:d3:
                    59:45:e1:b7:fc:10:d2:0e:ca:7f:4f:ac:c8:92:c5:
                    e5:fd:ad:c3:fe:75:64:2f:ff:64:52:be:e4:87:73:
                    81:ff:13:39:a9:38:74:7e:f2:83:c9:82:f8:64:7d:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:9D:23:97:49:41:31:53:83:66:42:89:E8:19:1F:E9:F5:6A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:62:3a:e5:49:5d:08:f9:08:85:02:b2:a0:e2:fe:24:de:1d:
         0b:7f:f1:93:ea:58:9e:3f:75:81:36:c9:51:e8:4b:3f:ab:65:
         19:eb:92:5f:05:15:84:b9:61:2f:2b:46:02:e5:6b:2d:f4:63:
         23:f1:50:f4:2a:1d:7c:54:0e:f8:a6:e3:ad:23:e4:82:59:cf:
         f8:88:d9:ad:06:57:34:f3:36:62:88:5f:5d:ce:52:08:36:77:
         7b:54:cc:99:83:87:03:d4:e7:30:d5:9b:6f:75:e6:4a:7e:33:
         3f:39:07:e8:69:aa:69:7b:92:29:7f:d6:3b:eb:0c:cb:3b:31:
         7d:72:30:01:a9:73:94:0b:cc:fb:52:36:68:cd:66:cb:c7:62:
         4e:08:82:9a:bf:5d:6b:b0:98:a1:44:ba:d3:a9:75:d4:33:c8:
         46:41:d2:a4:17:cc:b3:a7:be:ca:1b:77:13:16:e6:bb:3d:3f:
         40:c9:69:37:5d:22:e9:e6:3d:cc:50:68:65:7e:ed:3c:ea:c0:
         e4:68:15:e2:d2:a5:3f:98:ad:c8:1a:18:48:14:e5:a1:b3:01:
         1f:3c:43:20:56:61:e9:af:23:8f:b0:28:92:e9:c2:68:4f:21:
         7f:e4:a8:c2:d5:4a:c4:c8:7f:0e:58:91:5f:41:b1:78:f2:89:
         0d:03:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----