Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e987634-6d81-33e8-9d47-45b6021f99b5.roa
File:                     3e987634-6d81-33e8-9d47-45b6021f99b5.roa (raw, json)
Hash identifier:          70skuhDvgAL+fQ5nPfzrkne8i8Vbh4l3wAEnRspmaiY=
Subject key identifier:   3A:FA:E3:F6:41:0A:7F:A5:8C:AD:EF:10:7E:78:EB:AB:B3:A3:CC:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849797447D0D49FCC9B01157200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e987634-6d81-33e8-9d47-45b6021f99b5.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     397193
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:47:d0:d4:9f:cc:9b:01:15:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=5bdeef58-c5cf-44e5-81df-e25536d22b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7f:35:1f:83:7f:e4:71:9b:62:99:db:8b:ce:
                    de:1e:4f:70:d1:34:37:aa:15:71:3f:ca:b0:8e:8a:
                    f3:44:5a:55:ae:7e:6c:f5:da:4d:a8:12:2b:9d:74:
                    03:18:b6:af:fe:c1:fd:ac:23:8c:80:c4:08:d4:b0:
                    95:27:21:52:31:bc:d5:1f:8d:fa:8f:f8:9d:80:df:
                    22:1d:8b:e3:7a:4e:1b:e7:76:6a:39:ed:b4:aa:fa:
                    71:ef:2d:57:c1:fa:46:38:76:82:82:99:df:48:35:
                    20:8c:21:b5:96:90:9f:79:3e:17:ce:01:92:1a:4b:
                    71:ea:fa:1c:bd:78:16:c7:63:1d:eb:db:18:d8:c6:
                    53:a8:65:83:5f:ba:5f:1e:20:8f:5a:70:31:fc:99:
                    6e:2b:ba:20:db:4c:b3:30:c6:60:bd:43:d7:8a:b0:
                    0d:ed:db:e5:3d:b1:b5:cd:a4:73:d3:fe:22:c1:d0:
                    04:ab:5a:d1:f7:6d:ec:2c:fe:e5:79:fa:8d:10:ce:
                    bc:d5:48:de:c3:96:f7:42:71:d2:7f:b1:b4:c5:c2:
                    ce:7f:89:da:ac:af:39:75:c0:cb:ee:f0:d3:67:03:
                    f3:d9:8a:5a:2b:44:4f:6e:25:43:62:03:2f:c7:91:
                    8d:38:5b:76:eb:f0:de:82:5f:c0:c7:6d:7a:db:5f:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FA:E3:F6:41:0A:7F:A5:8C:AD:EF:10:7E:78:EB:AB:B3:A3:CC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e987634-6d81-33e8-9d47-45b6021f99b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:04:28:cb:1f:2d:19:22:91:65:74:4c:a1:68:70:ea:0a:4d:
         87:af:10:9b:13:6c:cc:8f:e3:50:23:2b:a5:83:95:4c:6c:e1:
         77:9a:f1:d6:35:aa:87:4f:2b:c8:03:4b:17:a4:83:57:44:42:
         c2:5b:17:0b:f5:a9:f5:f0:68:21:94:30:87:ad:dd:65:ec:07:
         c8:6d:f4:8b:c9:47:6e:fe:b5:1f:a8:f7:35:70:15:e8:19:18:
         16:f6:a6:e8:ff:28:90:98:47:26:18:f9:99:fe:3a:45:97:d4:
         97:bc:94:6c:35:5a:d4:21:fd:57:ff:0b:45:a8:c2:fe:3a:93:
         5e:64:46:be:e8:7d:40:50:8f:1b:07:62:a2:a6:dd:79:dd:11:
         68:8c:5d:5c:18:0b:07:06:55:da:d7:1e:69:d8:21:bb:91:b6:
         c3:24:eb:bd:36:74:b9:63:8c:2f:cb:2f:b3:0a:2b:6f:6e:90:
         63:bb:a5:ae:bf:86:90:0a:a2:4f:08:fb:d0:b1:b3:2e:4b:45:
         32:79:25:6d:6c:ec:50:2d:1c:c6:f3:30:51:87:3a:d3:86:c4:
         70:a5:ca:8e:ae:b2:78:cf:58:39:b3:b2:7e:11:c2:46:81:6e:
         2d:f0:c9:66:ec:a3:09:83:b8:01:21:06:cc:00:ad:ad:bc:11:
         5b:37:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----