Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa
File:                     8644eaaa-633c-3556-947b-d6f7912835f5.roa (raw, json)
Hash identifier:          Er3r3GyPIIWHuRX/W7PBBTce4ccAvs5Mbn4Zh5GZa8Q=
Subject key identifier:   5E:7D:0B:67:1B:48:5F:93:C9:4B:87:B3:8D:F4:05:E2:DF:C3:84:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496484580B22A8EB89E5731000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     396603
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:58:0b:22:a8:eb:89:e5:73:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=9335222b-57b7-4f4e-bb57-8ea69f520d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:48:a7:ae:27:94:ca:4b:53:13:8f:ab:37:
                    b1:0b:f7:eb:11:72:ed:77:d7:7a:56:37:87:68:fd:
                    84:e4:ed:c3:e7:23:92:b2:69:78:61:e6:f1:16:78:
                    6b:ef:cb:80:49:b1:86:0b:5b:c2:b8:35:ba:1e:3d:
                    b9:9c:28:5a:d3:14:9c:4c:bf:8e:32:78:53:e5:2a:
                    b2:15:d5:4a:bc:f4:12:3d:4a:a5:45:c1:1d:42:1f:
                    cb:6c:b4:17:57:7a:7f:79:7f:db:6f:ca:9f:bf:27:
                    34:07:90:28:09:e6:cd:37:cc:b8:a0:03:91:c6:99:
                    db:ea:0f:77:48:f3:36:82:bf:1d:6d:dd:26:be:ff:
                    7c:fd:df:84:9d:73:8d:58:be:89:55:48:89:82:6a:
                    be:19:e9:4a:f0:83:8f:78:ad:a8:cc:1c:14:52:7a:
                    26:2a:4d:77:36:3b:32:00:06:83:ef:c5:4f:75:58:
                    08:71:e6:9f:b7:bb:52:c1:04:99:55:0b:3e:ee:cf:
                    c7:5c:7e:1c:61:c0:81:32:30:4a:cd:8c:e7:a3:91:
                    34:e1:6b:f0:05:57:8e:ee:5d:fb:07:d3:dc:86:08:
                    d1:55:e6:13:53:39:8c:54:b5:7f:dc:74:a4:e3:94:
                    78:80:a4:7d:bc:9f:3e:44:6a:1e:e3:9b:40:fc:83:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7D:0B:67:1B:48:5F:93:C9:4B:87:B3:8D:F4:05:E2:DF:C3:84:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c7:4a:6d:11:2c:c9:e3:9b:49:e0:1b:ee:d2:9e:b2:8c:47:
         7b:b8:3d:aa:30:64:89:e1:c1:4e:39:f5:64:1e:78:b7:f2:89:
         be:05:c8:ae:27:87:73:c9:3c:db:c9:d6:53:91:4e:1b:88:13:
         d2:ee:91:2b:0d:e3:3c:46:32:4d:a3:22:4d:11:95:1e:8f:68:
         ae:6a:b1:80:67:36:a5:14:30:12:9a:53:56:01:bf:d8:d0:49:
         5b:9e:e9:d9:25:26:63:18:99:7b:42:19:76:f6:c9:d4:8c:71:
         d0:73:2d:5a:2e:e0:20:79:ba:0b:76:fc:34:9c:0b:03:46:f7:
         05:96:0e:76:d5:ac:8a:33:43:a7:13:ee:25:5a:2b:d1:21:6a:
         c1:8b:5a:1e:93:18:28:92:e2:19:fb:a9:a3:f3:04:41:19:a6:
         fb:cf:82:3c:1d:31:fb:54:1a:fd:5f:da:8d:86:b0:50:60:c7:
         2b:b9:ff:2e:5b:39:38:5d:27:41:a5:01:5b:f7:15:f1:42:4e:
         51:78:93:92:07:08:ea:c6:25:4d:24:95:23:ac:a6:cf:27:f7:
         f9:aa:b4:d7:7a:cc:21:47:52:57:14:a7:d4:70:e8:3a:4e:7c:
         0b:a5:fb:55:68:3c:37:82:61:d1:55:d4:45:c3:73:ad:36:5f:
         ce:34:e8:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElkhFgLIqjrieVzEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
OTMzNTIyMmItNTdiNy00ZjRlLWJiNTctOGVhNjlmNTIwZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBxIp64nlMpLUxOPqzexC/frEXLtd9d6VjeH
aP2E5O3D5yOSsml4YebxFnhr78uASbGGC1vCuDW6Hj25nCha0xScTL+OMnhT5Sqy
FdVKvPQSPUqlRcEdQh/LbLQXV3p/eX/bb8qfvyc0B5AoCebNN8y4oAORxpnb6g93
SPM2gr8dbd0mvv98/d+EnXONWL6JVUiJgmq+GelK8IOPeK2ozBwUUnomKk13Njsy
AAaD78VPdVgIceaft7tSwQSZVQs+7s/HXH4cYcCBMjBKzYzno5E04WvwBVeO7l37
B9PchgjRVeYTUzmMVLV/3HSk45R4gKR9vJ8+RGoe45tA/IMeEQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFF59C2cbSF+TyUuHs430BeLfw4SAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY0NGVhYWEtNjMzYy0z
NTU2LTk0N2ItZDZmNzkxMjgzNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCNx0ptESzJ45tJ4Bvu0p6yjEd7uD2qMGSJ4cFOOfVkHni38om+Bciu
J4dzyTzbydZTkU4biBPS7pErDeM8RjJNoyJNEZUej2iuarGAZzalFDASmlNWAb/Y
0ElbnunZJSZjGJl7Qhl29snUjHHQcy1aLuAgeboLdvw0nAsDRvcFlg521ayKM0On
E+4lWivRIWrBi1oekxgokuIZ+6mj8wRBGab7z4I8HTH7VBr9X9qNhrBQYMcruf8u
Wzk4XSdBpQFb9xXxQk5ReJOSBwjqxiVNJJUjrKbPJ/f5qrTXeswhR1JXFKfUcOg6
TnwLpftVaDw3gmHRVdRFw3OtNl/ONOge
-----END CERTIFICATE-----