Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
File:                     60db1c24-6a73-3330-bf67-63ba94c1beeb.roa (raw, json)
Hash identifier:          xTeiGnZrEdmwmjG01DN6TU4ikUFr5bfwZAksT8/tFJE=
Subject key identifier:   C4:1F:A2:61:95:87:C5:A9:33:34:D4:A9:C7:3C:48:20:A7:4F:44:79
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744B22496B585A4D98E230
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396600
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4b:22:49:6b:58:5a:4d:98:e2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=c96a19a4-ad71-4dc5-98e1-58ccb7219067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:50:80:6e:4e:eb:57:81:3e:72:78:31:81:
                    66:1f:f7:be:a3:43:f6:8d:0a:b2:7c:81:da:c0:45:
                    1f:f7:5a:a5:9f:e8:f8:a3:5a:b7:10:3a:f7:52:f3:
                    f9:e2:92:91:77:b3:b9:ab:46:c8:3f:0b:d9:83:2d:
                    e3:07:5d:e4:f5:f8:63:64:9f:e5:e3:1d:21:f3:c6:
                    f7:6c:ff:37:02:d0:92:58:87:54:4f:0c:1b:b8:f7:
                    c6:54:c2:28:f3:f4:41:d5:92:8c:7b:1e:26:c6:be:
                    70:c0:65:69:27:b4:92:7b:64:a7:47:3e:b0:a8:6b:
                    9a:27:0d:4a:2c:46:15:37:83:3e:3e:a0:70:2e:7c:
                    ba:21:c1:36:4b:35:e5:42:01:ed:48:15:35:44:85:
                    32:72:ac:63:ee:9b:5a:a6:2f:e4:81:98:55:5f:55:
                    aa:40:70:0d:b8:39:57:9b:ee:eb:e5:16:0c:d2:c0:
                    88:e7:77:ec:84:43:fb:2e:8b:66:9e:c3:4e:4d:c2:
                    02:72:f4:63:f3:3a:a2:90:06:18:36:c3:83:71:d7:
                    bd:6d:c7:2e:a4:cb:04:3c:cb:b1:44:84:fa:e7:09:
                    9a:2d:75:4f:39:6d:da:98:cc:c2:f6:c4:c5:c9:e5:
                    db:f7:a6:c6:a1:30:41:50:c3:25:8f:26:f2:d8:74:
                    55:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1F:A2:61:95:87:C5:A9:33:34:D4:A9:C7:3C:48:20:A7:4F:44:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60db1c24-6a73-3330-bf67-63ba94c1beeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e8:03:67:61:17:2a:a2:f6:95:33:dd:83:bf:4c:ea:a9:12:
         b2:72:b9:e3:95:be:e1:62:3e:3d:96:ed:fc:9d:b1:0e:90:7d:
         c1:e9:40:ee:55:b0:27:a0:24:f5:60:93:5b:d8:e1:2c:a3:cb:
         5d:4a:33:46:41:d8:ed:03:3c:15:97:01:49:8f:c8:cf:b7:ed:
         37:5b:98:9d:a4:5b:4a:e5:75:14:66:fa:c9:d8:3d:bd:b6:0c:
         b4:2d:ce:6a:f3:c8:4f:a3:42:5a:94:62:36:c5:b4:fa:ff:33:
         27:3e:d1:29:b1:7c:68:fa:23:a2:b0:66:21:8f:1b:a6:3f:81:
         8a:e2:98:fc:85:53:0e:2b:c1:43:af:aa:c9:00:1f:2c:a5:c8:
         a4:5f:46:d1:1d:0f:ce:78:3f:ea:9d:64:da:c3:53:12:0f:c8:
         34:4b:95:7d:4d:9d:6d:72:b2:de:d1:26:d3:16:85:50:ec:bd:
         d9:b0:87:ea:79:6a:38:5b:9e:d1:e9:14:f8:36:e8:b2:17:10:
         77:e3:f2:22:cd:cc:0b:27:a1:4a:6b:02:c2:fa:01:a5:1a:17:
         72:73:e5:92:72:79:14:1c:73:ce:b9:29:fc:62:49:71:7e:00:
         16:64:68:e4:6f:b5:83:35:62:fe:d1:91:3a:6e:5d:8d:e2:e7:
         2b:02:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----