Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76e9c214-eafc-304c-b09d-85ccaa96f4fc.roa
File:                     76e9c214-eafc-304c-b09d-85ccaa96f4fc.roa (raw, json)
Hash identifier:          VpMRicDPKe5hLMTrQ/xu686VsY4t5OxdbIojBG4us9k=
Subject key identifier:   E9:C3:55:2E:B2:CF:16:A8:8B:1C:A0:21:72:62:01:4D:66:AF:3A:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E4D21D17140D32F089C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76e9c214-eafc-304c-b09d-85ccaa96f4fc.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     397193
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e4:d2:1d:17:14:0d:32:f0:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b907cbc0-b2be-4ac9-a211-6407123bf472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:38:9a:11:a5:e9:68:1e:3c:fc:d8:d7:72:
                    01:82:55:03:84:3e:fb:17:be:24:cb:63:38:86:16:
                    03:7a:01:68:9f:58:de:f4:a5:84:59:c4:39:4e:a7:
                    46:be:33:f1:63:64:87:75:a2:01:c9:5c:c7:12:91:
                    49:38:9f:fc:15:ed:30:21:7f:86:82:59:73:26:2e:
                    40:f6:48:17:b5:f4:52:e3:85:95:15:73:93:0c:16:
                    e3:af:bf:5e:14:59:21:ec:78:a3:58:65:fd:2e:d3:
                    01:8a:83:bb:0c:58:79:4e:20:16:c0:04:fd:fc:d4:
                    8e:6f:c0:44:84:a6:73:1b:31:44:7c:11:24:bd:b3:
                    08:a6:e2:cb:97:12:a5:ac:37:49:95:94:32:a8:9d:
                    c1:e1:44:84:12:05:8b:0d:ad:23:5b:51:9c:fb:9b:
                    78:84:0d:9f:31:30:66:89:02:3c:12:94:24:19:e5:
                    3b:0d:a5:7d:62:ef:4e:12:be:f8:b4:f4:00:f8:49:
                    c7:de:8f:d0:ad:5b:7e:4e:27:61:14:2f:ae:e1:85:
                    ba:ef:99:2d:8d:d1:bf:90:34:34:0f:24:30:3b:5f:
                    31:69:dd:e9:59:c7:9c:21:88:d3:35:dd:a1:ab:7c:
                    ce:55:bf:b5:a7:e4:94:85:3c:33:85:0f:09:96:0b:
                    79:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C3:55:2E:B2:CF:16:A8:8B:1C:A0:21:72:62:01:4D:66:AF:3A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/76e9c214-eafc-304c-b09d-85ccaa96f4fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:51:6f:b5:ba:a6:5d:7d:b2:ee:88:a7:90:f4:aa:36:e1:b6:
         88:a7:f9:7e:d1:8c:d3:fc:04:bd:c5:43:98:d5:b0:a4:8e:d1:
         80:0d:13:85:3e:6f:ad:a9:d9:68:21:75:c5:8f:09:ec:c4:ec:
         c7:35:94:75:6a:39:3d:52:c0:c4:11:5f:9a:e3:f3:ec:81:d7:
         f9:88:85:78:6b:a4:58:25:f0:f8:88:c4:b7:63:db:e9:27:7b:
         1e:03:e5:0b:66:b7:92:e5:f8:be:43:d4:e9:8e:0f:4b:ed:15:
         07:fc:d7:4b:f3:31:0e:54:d4:8f:09:04:64:7c:9f:e2:10:b9:
         29:75:b0:4f:3f:40:bb:1d:d7:d4:5e:01:84:ad:5a:f9:c2:65:
         a0:84:ae:fa:20:ec:fa:8b:47:46:60:26:12:00:78:57:b9:cd:
         45:fc:3a:a9:f6:64:c9:db:d0:5d:9e:64:3c:e9:d4:2f:03:3d:
         48:fa:d9:76:20:b0:df:03:fc:4b:df:a5:7b:b8:1e:0a:6e:af:
         c9:1e:03:ea:f5:6b:34:dd:60:77:b0:53:e0:32:88:44:0f:01:
         90:10:b2:0f:ea:f8:91:97:d2:a1:a8:eb:46:83:0d:2a:bb:64:
         1a:4b:fd:b1:b2:62:0c:c1:dc:e3:d2:e0:d8:ea:8c:fc:b8:64:
         62:ee:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----