Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f706211-25d0-3a87-a40f-ef8c0de4cd40.roa
File:                     6f706211-25d0-3a87-a40f-ef8c0de4cd40.roa (raw, json)
Hash identifier:          Jdfg8EaCK61o5YiHGNZj+lsDPTvny4NDvLSCbCR/KwU=
Subject key identifier:   7C:63:4E:69:E0:5C:C9:E9:EE:E3:78:21:67:9D:DA:B5:0B:30:66:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496484587331AB443613654FA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f706211-25d0-3a87-a40f-ef8c0de4cd40.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     21313
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:58:73:31:ab:44:36:13:65:4f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=87903288-6cb3-4350-bda7-65082d5c4408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:d0:82:48:fc:94:dc:31:eb:1a:48:76:05:
                    5f:90:6c:5d:2a:9c:d4:4a:10:73:16:16:c9:74:71:
                    4f:e9:59:20:dd:26:3c:0c:f1:27:a9:90:c5:9a:3a:
                    ae:5b:c1:d2:75:bb:07:bd:3d:51:ef:97:43:0d:f5:
                    32:ea:43:57:98:5f:a9:bd:0a:8d:72:36:46:26:cf:
                    58:89:63:c0:ac:30:60:43:73:44:2a:fc:02:11:55:
                    2b:29:d6:ad:f2:10:40:e7:92:d2:b6:16:d8:5d:81:
                    12:b8:d8:1d:57:01:65:cc:3d:10:c5:5e:8f:fd:fb:
                    99:b9:75:aa:0b:fd:0e:b0:9b:57:bb:9f:c9:53:42:
                    03:ec:8d:85:e4:5d:ae:0b:f4:a4:7d:8e:cb:6c:f1:
                    a3:5b:3d:43:99:e9:a0:19:17:f3:38:49:2d:52:29:
                    13:04:a0:5c:b3:45:43:f4:49:7e:56:db:ef:ce:e3:
                    fc:11:a4:5f:2c:5c:24:86:4a:c9:b9:f8:b0:c6:aa:
                    f8:f7:a5:df:17:65:91:4a:e7:67:84:74:4d:0c:b9:
                    9d:88:bc:9f:a4:b2:a3:7b:e4:ba:7f:bf:e7:5d:12:
                    b1:0c:3b:b9:96:b4:22:99:09:fa:95:d4:de:ae:99:
                    07:0b:c3:1e:bf:f7:38:ec:2a:cd:78:9b:80:b3:fa:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:63:4E:69:E0:5C:C9:E9:EE:E3:78:21:67:9D:DA:B5:0B:30:66:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f706211-25d0-3a87-a40f-ef8c0de4cd40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:29:7f:f7:83:e2:68:0e:a1:98:85:7e:6d:f7:87:f7:d1:93:
         39:b8:ea:10:7e:e2:36:54:39:2a:dd:d4:60:d1:d7:aa:20:18:
         1e:d9:36:c1:b6:77:3c:f8:a8:51:c4:c3:50:26:41:be:3e:1c:
         59:00:65:0d:7d:a2:ee:22:95:14:fd:14:67:95:08:40:ee:d6:
         09:d5:df:86:d0:d2:24:9b:5f:20:82:87:9d:d8:b1:b5:67:60:
         55:57:7a:40:bd:d6:6c:23:d3:a7:55:ab:2e:63:f3:95:de:98:
         34:ed:c2:9c:cb:8f:d8:08:49:fa:b2:e3:ca:a9:17:72:17:c0:
         65:fb:c4:cf:ef:50:1d:f1:08:bf:86:3f:bd:ca:8e:25:66:8c:
         c3:8b:4a:f8:ce:97:9d:84:e4:0e:d5:f4:80:6c:7b:3a:62:8c:
         a7:1b:e6:0e:21:6e:7b:45:b0:9d:10:3b:51:cb:98:15:01:a2:
         30:22:20:7e:38:08:fa:1e:c3:de:c1:2c:08:27:3d:1b:eb:fa:
         fc:ad:70:e2:aa:4d:81:48:cd:b2:71:8c:72:f6:8b:3f:1e:8a:
         58:56:38:2a:8d:d1:45:51:c6:55:dd:4e:fc:b2:1b:c3:0f:fd:
         d7:3f:e7:7a:1e:2c:65:37:94:31:39:57:58:75:6d:c6:f7:67:
         78:fa:f7:1a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElkhFhzMatENhNlT6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
ODc5MDMyODgtNmNiMy00MzUwLWJkYTctNjUwODJkNWM0NDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVHQgkj8lNwx6xpIdgVfkGxdKpzUShBzFhbJ
dHFP6Vkg3SY8DPEnqZDFmjquW8HSdbsHvT1R75dDDfUy6kNXmF+pvQqNcjZGJs9Y
iWPArDBgQ3NEKvwCEVUrKdat8hBA55LSthbYXYESuNgdVwFlzD0QxV6P/fuZuXWq
C/0OsJtXu5/JU0ID7I2F5F2uC/SkfY7LbPGjWz1DmemgGRfzOEktUikTBKBcs0VD
9El+VtvvzuP8EaRfLFwkhkrJufiwxqr496XfF2WRSudnhHRNDLmdiLyfpLKje+S6
f7/nXRKxDDu5lrQimQn6ldTerpkHC8Mev/c47CrNeJuAs/pdsQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHxjTmngXMnp7uN4IWed2rULMGZ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmY3MDYyMTEtMjVkMC0z
YTg3LWE0MGYtZWY4YzBkZTRjZDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCiKX/3g+JoDqGYhX5t94f30ZM5uOoQfuI2VDkq3dRg0deqIBge2TbB
tnc8+KhRxMNQJkG+PhxZAGUNfaLuIpUU/RRnlQhA7tYJ1d+G0NIkm18ggoed2LG1
Z2BVV3pAvdZsI9OnVasuY/OV3pg07cKcy4/YCEn6suPKqRdyF8Bl+8TP71Ad8Qi/
hj+9yo4lZozDi0r4zpedhOQO1fSAbHs6YoynG+YOIW57RbCdEDtRy5gVAaIwIiB+
OAj6HsPewSwIJz0b6/r8rXDiqk2BSM2ycYxy9os/HopYVjgqjdFFUcZV3U78shvD
D/3XP+d6HixlN5QxOVdYdW3G92d4+vca
-----END CERTIFICATE-----