Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa
File:                     670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa (raw, json)
Hash identifier:          69BYtJqJEAfqILdzdF5wefHqnJCf7ap6M8PkLmKMIgs=
Subject key identifier:   BF:FC:1E:AC:78:B0:E5:91:0C:CE:49:AF:2E:FB:E6:5B:0A:D9:53:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E32805AAC7BE92A64000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396574
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e3:28:05:aa:c7:be:92:a6:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=3191274a-8c6f-47d2-900c-ccd701195306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ff:0d:41:ef:4f:27:38:6d:86:da:c0:49:a1:
                    dc:2a:b5:75:88:85:50:e2:73:60:78:c7:97:c8:bf:
                    39:45:8b:36:bf:c4:f5:42:db:53:63:48:f0:e0:8a:
                    bf:90:ea:02:6b:c8:9d:7f:2f:d8:c8:38:c0:7d:31:
                    07:90:c2:1e:b6:d2:fe:ea:87:19:51:27:ff:9f:d3:
                    74:67:69:5a:77:8f:ff:30:04:ce:bc:71:bd:03:4d:
                    ec:71:f2:1a:d8:1b:2b:8b:b7:7f:cd:9d:5e:32:93:
                    2a:d0:b9:21:73:49:a6:e8:96:11:65:a8:54:e2:98:
                    a8:19:b8:48:ec:0c:7f:56:a4:db:a6:ef:c8:58:61:
                    f9:41:a7:e9:69:0e:e5:c9:7d:8f:08:f5:90:19:93:
                    de:ff:90:77:7b:d6:2c:a2:36:02:2b:b6:aa:13:f5:
                    bc:39:9b:12:01:a5:bc:1c:74:97:4e:04:96:a6:38:
                    28:99:7d:8b:1d:29:0b:7b:d3:b4:9a:f7:54:15:28:
                    8e:10:1e:f0:a8:f4:6e:e3:52:55:2e:a1:1b:cd:cc:
                    04:1f:b8:54:87:b5:da:e1:da:aa:51:a7:aa:f0:83:
                    88:5b:1f:a0:eb:c8:6b:4c:d2:88:58:a2:65:e4:c9:
                    93:7a:b1:e3:0a:f0:ea:2e:3d:3d:54:5f:d1:dd:8f:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:1E:AC:78:B0:E5:91:0C:CE:49:AF:2E:FB:E6:5B:0A:D9:53:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/670e7ac4-fd2e-302b-bed6-1ca5bbf7de4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:24:3b:48:b7:38:f5:fd:c9:08:ef:a5:a0:b2:a7:1a:dc:
         36:3b:d3:09:44:7a:9c:b2:53:26:52:bf:68:55:79:a9:6f:d6:
         4d:71:0c:12:91:0c:2e:be:bb:5f:6b:04:18:d1:06:6f:51:f4:
         56:75:2c:6e:79:2b:fb:54:d5:75:c7:6a:53:3c:54:a7:12:eb:
         9f:54:a9:28:04:51:19:91:61:79:94:f0:3c:68:0b:a5:5f:e4:
         38:c7:1d:6b:f9:c3:20:8a:d4:04:ce:32:e7:3e:c5:bb:9b:ff:
         a7:86:fb:fc:8c:c5:94:3d:ec:04:87:4f:23:c7:c4:12:d5:42:
         04:81:a2:a6:87:59:95:b9:07:55:92:c3:df:31:be:7d:7a:ef:
         89:ca:d5:6e:7a:e2:71:39:07:8e:9f:3e:f8:87:1d:a6:64:fc:
         94:45:76:8a:c3:36:dc:6c:04:ef:f3:50:69:9d:dc:15:34:d6:
         5e:71:64:0d:f4:af:20:11:16:07:f0:ce:e2:b5:df:e3:bf:e1:
         c0:ed:51:af:8c:d7:b4:41:e8:fa:b1:67:d0:5a:d5:59:1a:a3:
         b9:b4:76:d3:ad:d2:71:37:36:f3:08:f6:10:ee:74:e5:e4:06:
         fd:13:21:7f:26:40:03:f2:32:04:5c:4f:d4:6e:70:43:77:d4:
         d3:97:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----