Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/523c54db-8a7a-33c7-8fca-ef5c9b0edeee.roa
File:                     523c54db-8a7a-33c7-8fca-ef5c9b0edeee.roa (raw, json)
Hash identifier:          iYCH03zDykYKsOr/UrBucbX/jyeU9RNFpmjqIpaqvZo=
Subject key identifier:   DE:3C:28:98:FD:A3:3D:CD:81:2D:47:5B:61:8D:FB:9B:65:B7:29:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF6F36F4A1D6CC8688780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/523c54db-8a7a-33c7-8fca-ef5c9b0edeee.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     36623
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f6:f3:6f:4a:1d:6c:c8:68:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=be049aee-c720-4f04-a809-7c418a82a4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:75:68:25:5e:44:39:26:37:82:84:35:a6:
                    a5:4c:ce:38:a8:20:a1:60:64:28:cf:87:7b:6e:a7:
                    e9:d0:a1:30:95:dc:be:53:58:9d:dd:89:bb:62:ff:
                    f0:92:fd:d2:3d:e0:0d:11:90:b7:89:ef:64:85:be:
                    73:23:f7:09:1e:46:d3:0b:57:76:d1:4d:08:d9:a9:
                    ea:d8:84:02:55:1b:58:b3:6a:c4:95:30:f9:bc:93:
                    a5:33:4b:d7:8d:73:cd:0d:70:71:78:4f:6e:a0:12:
                    53:78:f4:ff:95:13:a5:56:fc:8e:ab:ee:d0:10:56:
                    f0:ec:80:18:27:ff:7c:79:25:5b:68:96:ff:dc:2d:
                    7c:fe:d5:a8:47:61:ff:8e:10:be:48:cc:16:76:7c:
                    eb:f9:67:45:36:00:7e:77:55:4f:95:8b:6c:c0:5e:
                    09:a6:d2:a6:e5:71:27:ac:95:24:0a:f4:48:b3:0f:
                    f7:16:6a:c2:a5:a9:d3:9c:1f:8d:86:38:3c:06:95:
                    ee:75:87:02:c2:76:c4:60:e3:1a:1c:6c:b3:60:05:
                    6a:86:3f:42:2b:19:f2:d4:38:3a:ef:e3:0d:12:94:
                    d9:eb:47:0e:51:5d:ad:3f:5d:0c:3b:81:c5:1c:d5:
                    b4:8b:e8:d2:e4:22:21:a9:31:7a:f1:c7:d2:06:0d:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:28:98:FD:A3:3D:CD:81:2D:47:5B:61:8D:FB:9B:65:B7:29:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/523c54db-8a7a-33c7-8fca-ef5c9b0edeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:28:d8:b4:fe:06:d7:e9:6c:ae:6a:4d:da:73:94:0d:ca:
         0e:27:75:d3:1d:3f:82:f9:4f:f7:0d:23:28:84:f1:fe:ec:97:
         a0:13:5f:50:63:79:df:5c:3b:d3:5a:84:f9:88:79:15:38:52:
         88:ce:5f:4a:9c:7e:96:74:69:c9:c9:96:79:cc:6d:d0:da:a7:
         77:b5:42:ce:03:df:5e:40:5a:04:5e:a1:17:21:b8:e8:ba:f8:
         7f:03:9b:59:34:db:ac:b9:74:d0:69:77:2b:40:93:4f:78:25:
         30:18:14:fb:da:8f:fe:16:3e:e5:a8:3c:13:15:bf:84:5d:ed:
         7a:73:5b:28:63:69:12:db:06:ae:b5:e5:2b:de:76:40:f0:c0:
         b3:a6:f7:f7:52:37:8f:55:26:a6:3d:98:ef:c3:04:b1:d6:1a:
         af:1e:20:ff:37:31:22:ef:b1:55:3c:5e:f8:59:5c:e0:90:30:
         a1:64:bb:9a:35:d7:47:80:39:ab:03:68:41:9e:03:95:75:07:
         eb:0d:f3:dd:89:d0:f4:5b:b8:56:23:99:24:9c:5d:2b:33:f5:
         b5:7e:94:5b:39:27:fa:4f:1f:3c:a5:c8:d6:e3:9a:4c:11:68:
         46:b0:28:be:37:b0:84:d2:ef:63:ca:29:6b:8f:99:f3:9a:2d:
         73:de:f4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----