Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/386fc557-5fdc-3211-973f-99911f9c77ad.roa
File:                     386fc557-5fdc-3211-973f-99911f9c77ad.roa (raw, json)
Hash identifier:          f35sdV9geIKjdtIectBCJ/7apyxCkk7OEjzo7OqnrrM=
Subject key identifier:   A8:23:17:D7:1E:E1:83:F3:27:13:1F:CA:5B:61:03:06:24:8C:2C:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E12957546ABAA1AB8628
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/386fc557-5fdc-3211-973f-99911f9c77ad.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     36623
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e1:29:57:54:6a:ba:a1:ab:86:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=fca223c5-030a-4a61-8612-084cfc9ca91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2b:1f:76:e7:98:da:25:b3:18:10:ae:65:6e:
                    6c:ec:f6:2b:ef:15:d0:71:50:ae:c6:17:c9:c5:c1:
                    6a:39:67:8b:3a:17:79:e3:05:f3:55:0c:49:ef:64:
                    e5:a5:b9:95:53:af:80:79:e5:0c:94:09:dd:40:12:
                    87:ac:b3:24:1c:55:70:f3:66:df:c2:ff:35:12:18:
                    45:c5:79:36:03:2a:a2:8f:03:4c:db:c5:d8:fa:66:
                    61:4f:22:ab:45:f5:8b:a5:c3:68:ea:22:77:e6:8c:
                    b6:db:f5:0a:4e:2f:e1:ed:18:51:07:c1:b6:93:1b:
                    06:e8:e2:75:6f:12:4f:13:73:e3:4d:70:2a:2c:fb:
                    38:f9:b7:7d:69:5d:f4:00:f4:7d:18:fc:94:95:1f:
                    0f:d1:a0:d5:03:d9:25:63:a0:2b:d0:f3:6d:7e:3c:
                    9f:87:36:a3:4a:99:2d:a6:f9:d1:ae:c2:49:dc:ca:
                    92:28:3f:fa:dc:e6:f9:ff:c9:e1:97:39:50:a3:51:
                    3b:e4:de:21:3c:26:53:4c:a8:96:ab:f9:89:0e:ce:
                    d5:26:41:e7:e1:65:8e:ab:0e:d4:95:47:ad:f9:66:
                    37:db:30:37:e0:33:3d:5a:c9:5c:64:87:93:c1:be:
                    b5:ea:8b:ec:d5:a4:03:b3:9f:e1:92:a9:7a:fc:63:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:17:D7:1E:E1:83:F3:27:13:1F:CA:5B:61:03:06:24:8C:2C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/386fc557-5fdc-3211-973f-99911f9c77ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:02:20:7d:df:82:40:26:1d:95:f7:7d:12:f5:49:cf:ee:a6:
         fd:a7:9b:44:b7:e3:e4:0e:1e:37:4e:e7:fa:19:d5:2e:b1:3a:
         d3:3e:c9:08:5e:b4:63:f9:8b:3c:80:da:32:2e:e3:6e:cc:26:
         fc:ae:be:13:80:e8:42:ee:6e:7e:4c:4a:81:c1:7a:8a:23:8d:
         6a:de:a1:e5:3c:08:60:9f:45:35:44:65:77:f0:96:c9:44:f0:
         ef:1c:71:52:d3:5d:55:7d:30:ed:24:8c:77:0a:bf:28:00:8f:
         bd:0c:c0:93:d4:90:4d:18:e1:c3:47:90:66:e1:94:13:c3:b1:
         c0:f3:85:2e:a3:69:7c:5a:6a:6e:2c:2f:b2:20:0b:11:be:24:
         26:97:7d:49:de:df:33:c2:89:53:38:a3:74:74:4c:e6:43:0d:
         a7:57:25:f2:02:9e:db:52:6e:48:f6:9a:23:97:d4:51:ec:9d:
         3b:f1:91:2e:8d:40:2f:c0:70:be:eb:47:3d:de:6b:b0:a9:a7:
         78:1e:9c:1e:fb:1b:1d:36:e8:10:02:84:3d:61:86:45:2f:f0:
         e2:db:f1:26:85:5a:f7:62:63:64:03:ad:b5:a9:65:99:a8:86:
         29:7e:2e:44:96:0e:70:91:53:07:a2:e0:f1:4c:7f:51:e2:be:
         80:20:2a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----