Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa
File:                     4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa (raw, json)
Hash identifier:          d1gBUvFYWN64kdGitEl4HoQC9Tm9Z5AVeakOY/Y3Wbw=
Subject key identifier:   D7:16:ED:1B:47:B9:32:E3:9A:71:B8:27:EA:CA:15:ED:F1:1B:2A:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E9980453B6B2D9A6DA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     36632
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e9:98:04:53:b6:b2:d9:a6:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=1c3d4cf1-fc8c-4571-9a8e-65e3327c2c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:b4:76:1d:08:67:79:d2:64:dc:ff:ee:57:
                    e9:86:f6:ae:1e:32:9e:3e:ba:71:db:d5:0f:fc:b0:
                    54:0f:16:6e:de:67:e3:1b:78:31:97:13:18:32:cc:
                    5b:96:c0:aa:a6:04:0f:ac:1f:cf:55:36:89:aa:82:
                    c7:6b:15:40:3c:f2:13:07:19:3a:42:74:a8:67:37:
                    e1:56:6b:da:a2:25:bf:9c:71:ae:48:07:d5:8a:14:
                    90:32:44:3b:86:68:e5:aa:65:f5:85:f7:08:62:87:
                    52:1c:e2:41:ea:e2:28:93:ad:12:62:3b:1a:fa:eb:
                    94:1b:b5:c9:23:b7:1c:0f:47:4c:c8:29:03:ba:c6:
                    48:ae:40:00:dc:88:8b:a6:a3:62:59:c8:ee:4d:46:
                    6c:ea:13:4f:e5:aa:a2:44:a4:31:0d:9b:2d:16:93:
                    d0:f1:4b:14:bd:6a:01:e5:7d:1e:32:65:87:aa:69:
                    5e:8a:b1:6c:d6:e0:da:b5:3a:f7:09:51:48:fd:dd:
                    bc:3f:ed:42:d4:9a:63:97:7c:31:34:19:e6:44:52:
                    19:46:38:12:f3:36:07:44:53:fa:f6:19:f0:15:89:
                    70:93:aa:aa:ed:23:85:e4:b3:e8:dc:66:9e:c5:b7:
                    11:c9:58:62:ad:25:bd:c5:cf:84:8d:ed:10:8f:65:
                    5a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:16:ED:1B:47:B9:32:E3:9A:71:B8:27:EA:CA:15:ED:F1:1B:2A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4dbb3d0e-a0bd-3869-9537-a114ec6667a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:58:f4:ae:79:1b:54:32:0d:00:f9:a9:72:04:6e:14:9b:0b:
         d0:a9:d5:36:71:57:89:91:44:cd:66:81:ac:15:ec:e8:db:a0:
         a8:74:2f:9c:f4:5a:03:e4:5d:25:9b:e9:12:b3:80:e3:f0:2e:
         c9:c6:37:43:dc:ba:d2:19:0d:c8:5e:d2:e5:de:b9:c3:6a:d1:
         78:2a:d9:57:bb:bd:fa:6c:39:b3:9c:16:f1:60:5a:27:2c:f4:
         cf:8e:40:2a:ad:82:66:bd:ee:32:94:b7:d4:69:cd:b4:89:49:
         e6:ab:e9:fd:bb:af:05:8e:77:60:c3:bc:9d:e4:da:e0:65:8d:
         5f:e3:f0:b4:5d:58:5c:0b:15:50:b4:22:2f:c4:06:06:be:5f:
         92:b2:0a:f0:0c:2c:5c:b0:13:38:dc:db:c9:6b:50:db:6d:fd:
         a3:c8:fc:e7:b4:6d:41:59:b2:d0:4f:57:bc:ca:99:be:46:49:
         e5:d3:5b:33:41:50:50:d1:00:cb:f5:60:86:63:45:47:70:19:
         89:c5:c0:7f:99:34:5e:ea:c1:72:f0:5c:5c:23:29:58:50:ae:
         db:74:58:d6:a4:28:28:3d:6e:37:3a:0b:e7:11:88:ef:b0:bb:
         a1:e5:01:35:f4:ba:94:b9:d2:0c:77:f2:d9:d6:5a:12:df:54:
         06:45:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----