Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f0bd5c0-38f6-3211-8c55-93fa90817e30.roa
File:                     4f0bd5c0-38f6-3211-8c55-93fa90817e30.roa (raw, json)
Hash identifier:          NjE5RhezF0MqNp4BBFS3QWtULQ9gUdwTG4RnC9S+KoU=
Subject key identifier:   85:2A:13:63:36:21:B5:3F:AD:59:7D:51:A9:A6:11:A7:F8:47:51:AA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF5DDDB80D0D955DE2B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f0bd5c0-38f6-3211-8c55-93fa90817e30.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396557
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f5:dd:db:80:d0:d9:55:de:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=22f4877c-21bc-488e-aa8f-290baabd8bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:93:47:bb:90:2a:e1:fd:c3:e7:5c:c9:41:
                    3d:85:ca:11:a4:ea:61:65:de:2c:1b:0e:62:57:8b:
                    f4:94:c9:04:14:51:99:4d:2e:f1:b4:07:25:f8:39:
                    34:c8:e4:c9:11:0a:d3:36:f2:81:68:57:e5:ac:b1:
                    77:c0:6b:75:61:9f:55:60:8b:c0:45:0e:fa:bb:53:
                    b6:6e:5c:d4:1d:0d:d5:f3:24:c7:a3:1a:85:1b:e1:
                    64:52:5d:48:7d:f8:f7:80:5b:ce:3f:97:02:e4:37:
                    8b:d4:c2:fc:a2:5c:76:25:68:d2:48:1f:a4:f0:ed:
                    73:63:71:ae:d5:39:de:26:28:84:a2:7e:58:64:a9:
                    2e:6b:7a:23:8c:5c:e8:ee:13:c5:1c:be:09:c7:24:
                    96:11:af:7a:48:18:22:1b:d4:f8:90:6c:7a:fc:4f:
                    f5:3a:37:84:41:1e:7d:27:f0:cd:6a:bd:f8:b4:c1:
                    3c:a1:0a:ad:e5:04:0a:e0:94:dc:54:fd:cf:93:c0:
                    ff:e0:a9:16:9c:ed:ef:c2:6a:1f:de:ef:c0:89:bd:
                    43:0a:03:74:03:22:ec:52:49:d1:3a:7a:26:ae:c1:
                    a6:bd:86:10:c6:57:6a:ea:0a:f3:d3:b2:79:74:39:
                    da:02:b2:b2:f8:37:58:48:22:e7:ed:48:e0:40:3a:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:2A:13:63:36:21:B5:3F:AD:59:7D:51:A9:A6:11:A7:F8:47:51:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f0bd5c0-38f6-3211-8c55-93fa90817e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:7b:87:4c:04:28:45:33:4b:4a:6d:82:bd:af:c4:43:b9:
         00:c8:8b:5a:ed:2d:ad:99:c6:38:79:6f:ad:c7:70:9c:ee:b3:
         0b:31:c1:77:91:57:43:19:96:02:f4:43:d3:16:56:2a:d5:78:
         6b:30:f5:51:b3:30:92:a6:f6:3c:74:f0:a7:ca:06:69:9e:5b:
         89:89:ed:eb:9a:41:20:cf:2b:f1:fd:5f:a2:4b:02:97:2d:55:
         bd:e0:eb:6e:31:75:c4:f6:46:ee:e3:51:17:03:c6:52:ba:02:
         dd:16:ad:06:4c:37:e4:5a:2f:9f:b8:80:48:43:fe:50:28:7e:
         fe:ef:6f:95:85:08:64:4d:7d:3d:54:f0:24:9a:2b:58:18:1d:
         93:0d:c9:2a:e2:79:69:a0:49:75:56:54:2b:82:52:cb:41:eb:
         b7:8e:43:b1:03:80:14:18:14:56:c4:6e:cf:43:1b:a6:16:28:
         34:54:15:13:64:32:c1:fa:d2:ac:10:5b:f4:76:8c:62:ce:1b:
         4b:93:06:47:27:47:d6:ca:8c:4a:87:79:82:06:1b:37:0f:f0:
         34:a6:cd:e3:bc:0a:b0:84:05:b1:24:30:fe:94:77:74:e6:98:
         8c:4a:00:f8:9c:8f:1f:92:e0:ee:2f:b2:a3:1d:e3:86:c4:eb:
         92:84:40:ea
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElz3vXd24DQ2VXeK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk
MjJmNDg3N2MtMjFiYy00ODhlLWFhOGYtMjkwYmFhYmQ4YmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKuTR7uQKuH9w+dcyUE9hcoRpOphZd4sGw5i
V4v0lMkEFFGZTS7xtAcl+Dk0yOTJEQrTNvKBaFflrLF3wGt1YZ9VYIvARQ76u1O2
blzUHQ3V8yTHoxqFG+FkUl1Iffj3gFvOP5cC5DeL1ML8olx2JWjSSB+k8O1zY3Gu
1TneJiiEon5YZKkua3ojjFzo7hPFHL4JxySWEa96SBgiG9T4kGx6/E/1OjeEQR59
J/DNar34tME8oQqt5QQK4JTcVP3Pk8D/4KkWnO3vwmof3u/Aib1DCgN0AyLsUknR
OnomrsGmvYYQxldq6grz07J5dDnaArKy+DdYSCLn7UjgQDplUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIUqE2M2IbU/rVl9UammEaf4R1GqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGYwYmQ1YzAtMzhmNi0z
MjExLThjNTUtOTNmYTkwODE3ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA2TnuHTAQoRTNLSm2Cva/EQ7kAyIta7S2tmcY4eW+tx3Cc7rMLMcF3
kVdDGZYC9EPTFlYq1XhrMPVRszCSpvY8dPCnygZpnluJie3rmkEgzyvx/V+iSwKX
LVW94OtuMXXE9kbu41EXA8ZSugLdFq0GTDfkWi+fuIBIQ/5QKH7+72+VhQhkTX09
VPAkmitYGB2TDckq4nlpoEl1VlQrglLLQeu3jkOxA4AUGBRWxG7PQxumFig0VBUT
ZDLB+tKsEFv0doxizhtLkwZHJ0fWyoxKh3mCBhs3D/A0ps3jvAqwhAWxJDD+lHd0
5piMSgD4nI8fkuDuL7KjHeOGxOuShEDq
-----END CERTIFICATE-----