Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dced0e0-5bca-35f5-b7ea-f1282f1eaf22.roa
File:                     6dced0e0-5bca-35f5-b7ea-f1282f1eaf22.roa (raw, json)
Hash identifier:          no5xtZSL2aDgDAmbTXD8APq4tChxA+bsU5hV/zXcdkQ=
Subject key identifier:   59:E0:BB:73:A8:43:9E:3D:38:CE:73:AE:E6:5F:3B:10:D1:7F:83:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DCDB6376CD6CE8AAA380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dced0e0-5bca-35f5-b7ea-f1282f1eaf22.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396827
IP address blocks:        192.42.178.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:dc:db:63:76:cd:6c:e8:aa:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=7abd4454-a001-4037-a229-b5298b833976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:a2:68:a7:57:75:13:3c:3f:69:72:a3:a9:
                    b6:31:f8:94:51:c4:8b:ce:38:34:0d:a2:a4:45:8f:
                    52:db:e3:36:37:e0:89:86:48:c2:36:f0:f3:1b:3e:
                    13:09:b6:e5:50:f2:c6:0d:2f:70:cd:14:c5:9f:e2:
                    3a:ce:04:75:89:67:ad:37:7b:a4:09:f0:ea:29:34:
                    99:5a:b3:da:2a:a9:5c:a9:e8:37:bf:3c:67:0e:f0:
                    b8:ed:ea:48:dc:db:6f:c5:64:5e:e7:64:1f:1c:00:
                    91:8d:64:ca:b0:6f:c7:c1:cd:e9:ae:fe:0b:93:97:
                    b0:e1:3b:0f:7f:fe:66:c1:f4:2e:2d:e3:50:ee:54:
                    a9:b0:10:05:21:c9:9b:ff:0a:2f:2b:b3:c0:bf:f0:
                    be:5b:ae:15:3b:51:87:18:d3:dd:30:06:31:10:9e:
                    dd:8e:f7:41:01:57:92:c1:87:30:7d:9e:c9:8f:d8:
                    3c:55:6d:b3:ff:ea:a9:8e:5a:6f:24:76:2c:01:e5:
                    8a:46:bd:83:51:89:40:18:dd:48:75:60:8a:ae:07:
                    01:02:53:ef:b0:69:67:60:76:c8:77:18:f4:74:da:
                    03:5c:d1:9c:21:19:fb:8b:47:ad:6b:29:3b:71:54:
                    c8:24:07:93:0f:ef:df:30:4c:7c:f4:6f:dd:c7:ba:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E0:BB:73:A8:43:9E:3D:38:CE:73:AE:E6:5F:3B:10:D1:7F:83:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dced0e0-5bca-35f5-b7ea-f1282f1eaf22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:3f:57:fb:81:dc:4a:c1:fe:56:7d:c0:98:83:a0:e1:d0:
         66:db:17:b7:fa:a0:b5:3c:19:2e:b0:1f:c5:07:18:a7:18:42:
         42:ec:9c:fd:07:92:09:a8:1f:c4:38:37:ac:85:d5:a4:12:fb:
         75:ab:c1:d2:5a:ba:0b:31:7c:80:73:35:e5:2a:b0:0b:72:19:
         69:b9:f9:6f:fa:26:d7:52:7b:87:91:4b:6b:e5:71:43:a6:76:
         77:8d:ab:92:d0:fc:4e:ec:58:5a:f1:5d:9f:e8:90:a6:c9:1b:
         cd:68:9c:82:f5:c2:37:58:e4:04:79:46:75:25:f3:49:f4:12:
         d3:2f:b6:50:4a:2d:d9:0a:34:9f:06:9a:d1:b9:3b:e4:37:52:
         59:92:e0:db:69:db:b9:17:75:a7:59:63:b6:3a:4e:1f:cb:0d:
         d0:69:a8:33:17:b5:3a:3f:0f:ed:3f:3c:df:9a:d6:3f:2c:a9:
         3b:1b:86:10:d8:d5:9f:ed:a9:ca:01:7f:26:95:2a:43:18:99:
         62:82:7c:dc:57:f8:e0:3d:22:e7:a0:4b:61:68:21:67:29:e1:
         e1:64:93:0e:b4:2c:29:03:99:26:44:1a:82:61:e1:92:a5:cd:
         7a:af:b5:33:b1:ec:a4:39:8d:20:9d:8e:56:9c:2b:fd:14:9c:
         c5:c0:3f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----