Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7adab735-bc94-3847-9b16-6779fa10f290.roa
File:                     7adab735-bc94-3847-9b16-6779fa10f290.roa (raw, json)
Hash identifier:          ztFZ9F/rqH/Plg6fwA6y9zUL3dwInKAHwQ3i/X/MBXc=
Subject key identifier:   A3:59:E3:FB:C2:73:57:B2:79:90:C8:16:74:13:0F:30:EC:1E:9D:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0EDA2B72C2AD307E1CA10
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7adab735-bc94-3847-9b16-6779fa10f290.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     396827
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:ed:a2:b7:2c:2a:d3:07:e1:ca:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=61be1059-3d3a-4308-b15f-31406406a23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bc:45:64:08:e5:dc:d2:09:c2:80:dd:09:e9:
                    c7:4e:34:c3:63:4b:94:53:f9:31:7c:b1:99:58:5f:
                    81:0a:84:38:ce:2b:da:ce:74:6d:69:33:09:d9:d3:
                    10:82:e0:03:93:16:3e:be:bf:5d:e7:bd:63:1a:ee:
                    a2:30:b2:b2:55:5e:4d:58:b1:fe:b6:fe:11:77:8e:
                    01:ce:47:ac:ac:83:5f:55:93:1b:04:87:7d:37:70:
                    c3:47:13:97:ca:66:46:32:bf:b0:0c:45:f7:2c:9b:
                    5a:0d:5e:f0:ec:09:36:a5:5f:98:0d:6a:0c:4f:ed:
                    81:14:64:a7:05:e2:ff:4a:24:d2:e2:5a:de:f3:3d:
                    6b:08:1e:4a:8e:af:be:cb:15:70:40:d9:e8:2c:f2:
                    49:61:50:fa:7b:d6:ae:02:02:e9:b6:61:bd:39:36:
                    bb:88:42:32:00:18:75:83:48:23:d8:57:56:17:b9:
                    3c:d0:37:90:01:8f:89:c8:a4:aa:03:78:8c:cf:7f:
                    62:44:da:e1:63:ef:76:ae:13:56:17:81:8b:72:9a:
                    d3:13:71:4f:a1:02:97:ee:b5:e5:42:dc:51:55:c0:
                    0d:23:17:4a:90:91:97:f2:95:6f:16:da:05:b1:63:
                    56:32:48:33:0b:23:e2:0f:52:48:9e:8a:c4:0f:57:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:E3:FB:C2:73:57:B2:79:90:C8:16:74:13:0F:30:EC:1E:9D:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7adab735-bc94-3847-9b16-6779fa10f290.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:14:04:5e:56:8b:3d:5e:d4:24:08:ae:44:dc:d2:76:3e:
         89:d6:cd:c1:80:d5:fb:13:6a:05:2e:29:dd:d3:85:88:42:44:
         8b:4d:73:f9:0d:77:20:07:2b:c3:f3:ae:28:d8:4b:b7:31:a9:
         21:e8:90:8c:91:e7:56:39:1c:ec:03:34:31:b1:39:74:ad:26:
         d1:ab:53:39:e4:68:57:d1:3a:2a:ad:07:73:0a:bb:f2:45:e9:
         ec:3f:73:57:32:04:26:38:60:c1:d0:cc:5f:d4:31:4c:ed:b1:
         ce:95:6a:aa:1c:ce:b9:43:35:0f:d5:ff:5a:9b:f4:55:08:32:
         93:19:90:58:6a:cc:df:c9:52:17:d7:15:8e:2f:85:7f:d4:1a:
         5e:6f:53:0c:2c:24:f7:97:15:c7:12:86:97:ec:5f:c0:4f:2b:
         b2:b4:a0:f9:c2:9c:fc:01:6b:fe:ab:9a:ec:b4:48:94:66:88:
         6f:0e:b3:7f:f2:73:28:d4:b2:cf:81:c4:d9:23:4a:78:38:ea:
         2a:32:ee:9f:a2:eb:1a:7e:d5:30:93:cc:6f:60:91:b6:51:06:
         2f:00:94:c8:fa:14:9f:bd:3e:7a:1a:b4:e8:cb:92:04:db:a7:
         bd:7f:a0:b8:9f:80:a3:f7:d8:6e:ae:39:34:6f:16:f8:d2:1b:
         67:77:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----