Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c4cfbe6-3282-3631-b61f-a9101c3b50c0.roa
File:                     4c4cfbe6-3282-3631-b61f-a9101c3b50c0.roa (raw, json)
Hash identifier:          GW0NdhMp8HKmj+hP3naR9C8USYxBuKz/DCPAMpCyFjk=
Subject key identifier:   08:C1:7B:3D:8F:92:8C:D2:77:A5:31:64:6C:DA:1A:0C:9B:D0:93:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339EB432A09A0AC92879E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c4cfbe6-3282-3631-b61f-a9101c3b50c0.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396551
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:eb:43:2a:09:a0:ac:92:87:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=2656a018-0462-4f71-af8f-36424a6d34a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:a2:60:0c:58:a0:e2:d0:e2:ec:8c:bd:83:
                    c0:06:97:9a:df:54:a5:5c:ad:c5:0b:fc:4f:02:8b:
                    8b:21:e1:dc:58:d4:37:14:72:be:db:1a:aa:28:0b:
                    28:eb:94:a8:20:d0:51:64:ff:5b:2c:f3:6f:39:8e:
                    01:2a:7e:2e:96:23:e6:7a:1b:62:b9:17:35:f9:38:
                    de:94:9f:cf:71:56:85:60:ce:87:96:bc:ba:e5:ba:
                    c6:68:de:3e:d1:42:5a:55:be:72:47:86:2c:cb:30:
                    ac:79:a1:23:ea:3a:f9:72:52:80:c9:08:5d:92:a2:
                    0f:7c:4b:18:89:3c:56:1e:30:66:bf:2a:34:f5:48:
                    dd:a6:ab:53:1f:88:86:24:6e:42:ec:38:8d:2c:77:
                    24:d3:4b:22:81:1d:68:08:21:b4:fa:45:3f:a7:1d:
                    af:bc:08:6f:9f:33:75:27:ab:4d:4d:82:30:d6:12:
                    94:c9:73:1f:fb:6b:44:ee:c9:e2:0e:fc:e3:8a:61:
                    00:7c:3b:a7:51:65:ec:a8:8d:d4:fa:07:58:a8:f8:
                    8a:36:13:c4:89:98:4e:8d:ee:6e:5c:9b:e8:c7:00:
                    71:9c:07:9f:ad:d8:b3:2a:91:26:74:b4:97:71:22:
                    fc:67:68:f1:74:62:55:2f:db:47:cc:f5:0f:f0:c6:
                    a3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C1:7B:3D:8F:92:8C:D2:77:A5:31:64:6C:DA:1A:0C:9B:D0:93:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c4cfbe6-3282-3631-b61f-a9101c3b50c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:af:7e:75:0e:34:e0:88:27:a8:5f:70:1d:16:7f:da:27:f4:
         c7:7a:42:b1:a4:1e:35:e7:a4:74:8f:44:98:6c:84:a9:7e:a6:
         a5:8a:19:41:15:ff:9c:a1:31:5f:c8:7e:c3:1c:16:02:6f:01:
         a3:15:d7:53:26:65:35:39:e7:7b:b3:aa:60:3e:42:4b:95:17:
         0c:86:ae:6e:c7:d4:73:a9:6e:ab:80:2e:b1:85:60:ed:9f:85:
         8a:b1:f1:0f:ee:8f:4d:7f:88:e3:9e:e5:41:9d:53:12:b7:72:
         f3:99:c2:e9:72:42:bb:3d:27:36:67:82:8a:a5:09:b8:50:48:
         46:d3:12:c8:e4:d0:b0:88:eb:ef:a4:06:99:cd:9a:b0:55:fd:
         d4:52:db:d0:7a:6b:91:99:cf:c6:47:14:ff:2a:cf:1d:91:fe:
         35:6f:57:55:49:15:23:9e:47:f5:9e:bd:68:8c:8c:a6:33:74:
         47:c8:e0:04:22:3a:94:2f:1a:90:d2:f9:e0:a2:85:a3:18:4d:
         44:5d:d7:aa:fc:e3:13:81:2b:2a:b6:66:fa:4b:b0:94:cd:93:
         2f:2e:cc:48:9a:07:2f:14:e5:98:06:6a:0a:cf:6d:39:46:10:
         59:7e:0e:a9:1f:af:ce:1b:92:4d:51:84:ee:b0:2e:0a:af:5a:
         63:61:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----