Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa
File:                     6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa (raw, json)
Hash identifier:          0bqtgYLB6jWI/vK5pJZMro7ULpFt5WpmlYAAMW4u+fM=
Subject key identifier:   33:10:32:5F:6B:F3:C7:16:9C:A7:CB:18:98:A1:89:31:90:7B:F6:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497974482F2E7608F96D4DA800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396583
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:48:2f:2e:76:08:f9:6d:4d:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=d583dca2-36b4-42e2-b40f-215ece01edec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d5:98:73:fe:ae:2e:d1:64:1c:0a:fe:98:bf:
                    0a:08:29:c6:92:46:dd:e1:aa:c0:10:78:0e:de:b6:
                    73:cd:09:41:86:dc:34:1d:4b:0f:4d:93:d5:a5:62:
                    f7:42:b7:66:d6:f0:51:aa:27:4f:ce:f8:c1:0f:22:
                    8d:7b:8b:e1:c7:cb:33:f5:94:ad:02:ee:9b:70:60:
                    50:f1:33:7c:de:0c:18:95:02:ed:7d:6a:28:a0:fc:
                    3a:ba:19:c2:a4:2b:8b:bf:2a:c7:12:fa:2a:6f:57:
                    e3:db:27:2c:fd:1b:fe:b3:2d:f5:03:0b:28:a9:64:
                    35:ec:a3:b7:b1:75:0e:8d:2e:5a:ba:3e:6d:46:ab:
                    da:9a:1c:64:46:b3:98:73:cd:2f:1b:11:40:84:8d:
                    28:dc:12:c5:76:e9:90:fa:42:77:98:e6:a1:89:aa:
                    1a:f5:e2:47:d7:6d:3e:2c:40:8a:57:c2:89:a0:f7:
                    82:a3:36:cd:b4:77:cd:8e:49:59:96:b9:73:63:fc:
                    c5:84:4f:69:65:78:f5:4b:1e:63:e7:a0:22:2a:f6:
                    97:b9:06:67:ba:33:2a:71:b9:da:c6:af:8a:8d:34:
                    4e:94:37:b0:af:52:67:07:89:84:9f:79:e6:b3:e9:
                    26:8a:b5:c2:9b:f0:59:b9:6b:db:69:66:ff:11:91:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:32:5F:6B:F3:C7:16:9C:A7:CB:18:98:A1:89:31:90:7B:F6:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e1d795b-722c-3c57-a4a2-c2e8f7f07d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:59:c8:2d:52:10:5c:de:fa:ff:a3:e5:d6:d1:fb:09:7e:23:
         18:d4:2c:88:a3:9d:ba:c3:04:ec:68:33:c0:28:81:13:34:7e:
         cc:26:4e:be:61:ad:f5:6a:d0:96:0c:11:e1:09:a7:a8:e4:f1:
         4c:cf:80:fe:1d:2c:80:00:ea:b0:d0:03:3c:3f:38:d8:bf:b5:
         a2:ca:b1:ab:d5:9a:3d:07:23:a9:c5:b0:a3:b0:4b:fc:da:f2:
         6d:9e:03:5d:0c:57:36:2c:3d:90:3f:c8:18:da:4c:a5:51:45:
         a6:24:96:3c:45:d6:de:90:fc:43:b2:01:b1:e4:f3:c4:55:76:
         3c:f3:c4:d9:fc:f3:77:6a:54:14:f8:05:ef:ad:d7:3b:80:24:
         40:cd:f2:86:1c:11:91:bb:20:db:af:1c:88:a8:73:9a:77:08:
         39:63:4f:74:b0:6c:97:03:df:70:10:60:65:27:c3:2a:39:d4:
         98:e1:75:5d:bd:39:6c:f3:05:42:69:95:09:2b:46:43:5e:50:
         f4:56:52:0d:85:f3:d1:d6:c8:e7:a4:8b:ae:5c:93:dc:43:84:
         81:29:74:b7:74:b3:d8:57:73:7f:b4:00:d7:a8:48:8b:7d:50:
         39:71:bb:64:56:f2:41:b6:f7:a9:6d:f9:b5:91:83:cb:09:be:
         34:9a:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----