Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39207963-b93c-3680-b73f-8219830e84fa.roa
File:                     39207963-b93c-3680-b73f-8219830e84fa.roa (raw, json)
Hash identifier:          nl3f/S96FZVRxq/2KnBvIAZcAM1ppoXnbotUqAvENPQ=
Subject key identifier:   A1:D1:FF:8D:53:99:92:45:21:05:51:CC:09:FB:D6:9A:58:AE:D9:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E2F9618459326F5094F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39207963-b93c-3680-b73f-8219830e84fa.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396581
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e2:f9:61:84:59:32:6f:50:94:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=6bc58024-1698-4dab-a010-4fe2b4322667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:04:f0:70:8d:cc:48:ae:7a:f7:29:f5:2d:53:
                    df:23:94:d6:68:5d:aa:92:56:96:6d:9a:d1:3c:da:
                    af:d3:ab:c9:55:52:c1:7d:4f:fc:24:57:fe:b3:53:
                    b8:d6:78:b6:e5:5b:1c:84:04:ce:8c:4c:a4:d1:84:
                    ea:55:6e:06:7e:32:7f:1a:ac:b1:f2:4d:c4:7e:3e:
                    c8:cf:2a:d4:f0:cb:ca:e4:39:c4:37:25:c5:af:0f:
                    b5:7d:01:02:1e:2e:2e:a6:7c:27:e2:92:46:65:a1:
                    15:ea:4e:90:11:6b:eb:c7:15:1f:1c:3b:fb:d3:21:
                    97:9d:20:c9:e2:96:83:53:cb:35:f8:8c:93:ba:35:
                    1b:4b:37:7f:40:1d:c6:0f:c9:76:ff:6c:4e:a4:88:
                    fe:6f:a0:ee:d9:d2:54:8f:fc:85:1a:a4:4e:82:c7:
                    db:94:7b:26:10:d0:02:ef:3e:97:00:61:70:f6:2c:
                    a0:52:0f:7d:15:17:8f:39:a5:c4:90:74:52:d9:51:
                    c2:5c:25:16:6c:e4:9a:ef:47:18:42:b2:1e:34:ef:
                    96:de:30:12:a1:1d:bd:0c:80:f8:87:95:f9:db:fd:
                    d1:1e:12:31:c9:a4:54:11:98:d8:02:e7:05:e7:2f:
                    e7:36:26:56:16:41:6f:1d:11:f1:d7:73:b3:0a:22:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:FF:8D:53:99:92:45:21:05:51:CC:09:FB:D6:9A:58:AE:D9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39207963-b93c-3680-b73f-8219830e84fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:37:dd:e6:8c:75:02:fa:d0:fd:9c:36:c8:16:3f:fb:42:4a:
         0b:6a:78:40:df:77:13:34:1b:2c:73:bd:30:90:9d:a2:0c:08:
         1a:ea:8d:06:5a:92:82:62:a1:5d:42:b1:53:24:30:98:90:a4:
         d9:b2:97:7d:8f:db:da:7b:36:f2:fd:e2:b8:1b:ba:3d:e2:66:
         da:85:ed:eb:7c:7e:9b:ab:32:e0:cb:a9:25:54:ca:c4:fb:15:
         d0:3d:fa:ec:d1:88:1c:4e:f0:4d:f8:06:a3:b5:f4:79:46:fb:
         ff:38:3f:32:85:4f:f9:00:4b:ea:8e:01:2a:b1:a3:05:59:15:
         b5:94:e4:5f:fe:f6:29:dc:50:b9:1f:cc:6d:74:de:ae:83:e0:
         e9:a9:a0:ec:91:1e:e5:93:b3:3b:f4:83:5d:ae:53:35:c1:57:
         7b:57:cb:05:2c:62:3f:94:9c:77:51:47:77:9b:e9:75:24:e1:
         41:b1:00:61:54:5d:c7:89:e6:8e:06:06:53:1a:33:0d:f8:ef:
         3c:f9:26:21:38:9e:78:a6:dc:33:90:0f:13:6f:a7:48:0d:73:
         76:5c:42:b2:66:f9:13:70:4d:82:a4:8e:d1:28:2b:2a:ac:03:
         6b:27:fc:91:27:ea:8f:da:92:c3:07:77:76:e5:ad:4d:bc:8a:
         2e:c3:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----