Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa
File:                     7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa (raw, json)
Hash identifier:          vLi3LezBcG5yQMmgRlqcqVzycE+hs9dxWP412yQsLXc=
Subject key identifier:   C2:8A:AD:89:3D:BB:27:A1:26:B9:27:79:68:AE:30:B6:B1:D9:A4:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493ED3F43ED97CF32B67331D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     396610
IP address blocks:        192.42.176.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:f4:3e:d9:7c:f3:2b:67:33:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=08969077-7600-4bd5-9061-559c76f68393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:9a:e9:a0:75:f6:ef:90:c0:e7:d0:ec:27:
                    c5:50:8b:79:6b:83:f5:4c:ef:81:19:ba:b9:1c:d4:
                    3f:2a:bf:a2:59:6f:50:f0:12:02:52:e3:d6:c7:71:
                    9d:fb:e4:fc:9a:f6:15:42:36:17:3d:cc:92:95:c0:
                    6c:38:2d:42:60:39:ca:f7:be:c6:f7:be:f1:65:85:
                    8e:10:14:c9:51:cd:1c:47:b0:1c:0d:7e:a0:07:62:
                    ac:a5:ff:81:c4:73:49:e3:ce:fb:bb:fe:f4:7e:4a:
                    96:bb:1f:4e:61:37:86:43:4d:53:cd:c3:03:cf:53:
                    68:f5:81:4a:c3:c3:e2:a8:3d:11:d1:99:c8:71:9a:
                    1b:f6:2b:35:15:49:b1:10:eb:47:11:62:57:00:d0:
                    2f:68:3d:fc:19:07:3b:52:32:7c:1e:0a:0c:ab:f8:
                    02:ab:ba:5c:33:89:a6:9c:28:5c:1c:04:3e:3a:91:
                    ab:05:df:99:67:5f:08:c8:1e:34:31:75:18:6e:01:
                    44:01:cc:34:17:df:66:75:cf:3e:06:28:31:99:ea:
                    47:76:b0:30:87:41:80:6c:f9:57:e7:13:72:96:40:
                    83:c7:b8:1f:d5:39:3e:9f:94:7f:f5:c0:28:e9:6b:
                    bb:c1:83:b0:2e:93:e1:b1:41:1d:4a:1f:ab:7f:7c:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8A:AD:89:3D:BB:27:A1:26:B9:27:79:68:AE:30:B6:B1:D9:A4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7cf5ca55-bd41-37fd-b2b5-6740acc4dc7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f3:e7:e7:ef:f5:f8:64:34:c1:32:8e:2a:79:d9:42:da:96:
         c3:95:53:97:a0:ce:fd:f9:c6:69:6e:06:68:62:be:6c:af:81:
         ea:ee:6b:93:08:56:73:c4:bb:0b:db:1a:04:09:de:9a:3b:ee:
         48:c3:9e:01:ee:7b:82:a3:ff:53:20:89:27:b6:90:0b:be:46:
         f2:87:72:5d:ce:1a:84:79:c9:a7:ea:ef:91:c7:fb:46:16:31:
         92:c0:83:74:eb:03:4c:2b:1e:44:f2:5a:23:1d:ad:4c:fd:d5:
         b4:d0:13:cc:56:bb:64:86:2a:b7:4d:15:a3:4b:71:08:00:f0:
         6c:e3:6a:ef:fa:65:fb:40:32:2e:3d:a9:de:0b:5e:12:51:00:
         21:85:c3:f0:97:9d:8c:68:08:76:65:75:47:4d:33:64:13:77:
         b1:09:d6:f9:b6:35:95:50:be:13:0d:78:95:25:e0:ab:45:1e:
         d6:54:c4:70:59:91:ab:01:cd:5c:63:54:22:0c:21:55:4f:e8:
         84:56:9c:cf:19:4e:3f:bf:fb:b8:c4:d4:c9:27:e6:38:7f:55:
         7a:42:3d:74:7d:22:c9:37:02:b4:ce:20:59:e7:ff:45:9f:c6:
         67:bf:54:c9:29:04:f2:26:8f:e0:f1:96:3e:76:14:94:24:a2:
         fb:44:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----