Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa
File:                     3a1da723-18c3-399f-9eab-e845b5b54a7d.roa (raw, json)
Hash identifier:          aZIGTqpRGTBAIHb3oPnr1xvnL+i82pmgrE6gpYDP6gM=
Subject key identifier:   E7:42:B7:72:5A:12:BF:ED:10:DE:5D:52:30:D6:8E:C2:05:88:97:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848CB08A1E1E5E35782C3CC0480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa
Signing time:             Thu 06 Feb 2025 13:33:23 +0000
ROA not before:           Thu 06 Feb 2025 13:33:23 +0000
ROA not after:            Wed 07 May 2025 12:33:23 +0000
asID:                     36627
IP address blocks:        192.58.128.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:08:a1:e1:e5:e3:57:82:c3:cc:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  6 13:33:23 2025 GMT
            Not After : May  7 12:33:23 2025 GMT
        Subject: CN=e676a784-fd7a-4312-90b8-ec6001abe120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:0f:9f:b2:26:51:44:d1:99:4c:22:74:85:
                    93:0b:d1:f0:7b:db:ce:e4:eb:06:89:5b:2e:10:03:
                    08:26:15:2c:23:6d:83:56:a1:5c:26:16:ca:09:62:
                    b4:dd:92:e8:7c:15:cf:06:54:11:4b:fd:77:d5:69:
                    da:5d:87:1e:65:b9:45:d3:e6:77:26:3e:40:ae:cb:
                    6a:37:06:d2:83:61:71:65:0a:28:a0:89:ae:e6:f6:
                    c2:46:55:e8:db:f3:83:1e:b0:a9:8d:b3:54:c0:7e:
                    7c:c8:21:b5:b5:ab:2e:c4:1f:03:6f:76:16:3e:95:
                    a5:cd:29:98:65:aa:95:79:a3:b0:e1:f9:7f:7e:0f:
                    5c:07:70:0b:a0:f9:d1:a3:b7:df:fb:f9:8d:88:32:
                    a6:fb:0d:f7:ed:49:0e:9a:d8:78:43:1e:49:df:9a:
                    95:0a:08:a1:85:43:35:ce:ba:d3:80:8d:1e:23:48:
                    5b:34:ee:5f:47:21:ab:9a:d9:70:49:a3:7d:07:c2:
                    36:ed:03:d8:04:60:57:e9:12:c9:41:73:6f:af:1e:
                    fa:df:c4:2c:a9:0c:ae:a7:62:6b:8d:16:7b:62:a2:
                    51:11:9e:4c:be:c2:0e:ee:5b:56:a7:5d:8a:c3:fe:
                    b1:d9:a4:49:cd:d2:56:25:60:1e:4a:0a:7f:62:22:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:42:B7:72:5A:12:BF:ED:10:DE:5D:52:30:D6:8E:C2:05:88:97:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:e2:18:93:26:aa:dd:3b:c3:90:b6:97:8e:f1:50:ed:36:52:
         0e:7f:97:75:1b:0e:54:65:bc:ab:ef:0f:21:f4:69:39:92:7b:
         5d:83:42:93:11:e1:95:7c:50:49:26:5e:77:2f:e5:4e:c4:20:
         54:bd:b2:b8:74:00:cc:e3:7c:78:45:ee:6f:80:1f:32:49:b7:
         ae:5c:3d:87:a5:ef:09:40:b9:54:de:c3:84:0a:13:76:1c:42:
         a5:8b:85:26:95:23:03:75:12:f5:86:19:a9:37:c9:f5:80:5d:
         f7:bc:0f:a8:60:20:f1:9a:de:b0:26:a2:b7:fd:b5:4c:1b:c9:
         5f:90:93:12:08:97:0d:39:c0:d3:1b:67:e6:98:bd:a5:dc:27:
         44:f6:aa:16:27:24:e2:26:76:71:d2:6c:6b:69:da:90:1c:2e:
         95:a6:e6:e0:3c:a2:34:31:b5:0a:a9:21:f4:2c:3d:00:48:74:
         7d:48:af:0a:00:f9:ba:a9:46:dc:ef:fc:ba:a9:40:a1:cb:8d:
         9e:22:b4:ef:e3:8f:90:69:e1:67:a2:44:4a:21:43:25:c1:67:
         a9:05:8a:e5:8c:fe:c7:22:70:7c:2b:9b:22:9d:85:55:90:e8:
         ae:6e:33:8f:7e:e6:2b:e2:c1:3f:04:e8:64:21:d0:b2:5e:57:
         97:e3:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----