Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
File:                     87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa (raw, json)
Hash identifier:          Ki6+lCPLB5yem1c39PyiSdMb6pbM1MVZrRnCLoW0ERk=
Subject key identifier:   64:60:0B:B9:2D:85:1B:C2:EF:15:6C:E1:7F:93:E7:00:B7:57:BC:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F61C9970C50057DC2D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396550
IP address blocks:        198.17.208.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f6:1c:99:70:c5:00:57:dc:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=5d21e19f-34af-49f6-8200-0ce50a8b8a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:1e:3d:e4:1b:24:fb:6a:1e:f7:c7:03:8d:
                    ed:ab:0e:0f:43:ea:28:34:68:b1:36:9c:aa:bd:9f:
                    c4:52:3a:7a:71:2c:0a:7a:62:46:fb:f6:24:6b:ad:
                    88:80:61:90:87:5c:06:5e:9e:8b:5e:8d:df:c2:69:
                    8e:34:87:fe:4e:19:e9:95:4c:13:4b:3f:1b:56:00:
                    01:24:67:c9:27:08:5e:4f:ff:63:eb:c3:8d:e5:8f:
                    07:b5:a3:a3:64:5f:82:09:21:29:5e:f3:d8:fe:67:
                    dc:cc:5e:80:a7:17:e0:2a:1c:41:06:82:95:8c:86:
                    8f:7f:c1:9d:df:71:6f:77:44:40:2f:f5:d9:33:8b:
                    7f:b5:c1:70:29:7d:8b:57:a2:40:c7:61:34:99:f6:
                    88:40:24:4c:c5:9f:9a:99:bf:91:93:3c:62:55:78:
                    7d:ba:33:1f:c2:32:5a:4c:65:36:c7:0f:36:0a:ce:
                    04:c7:56:e0:38:44:11:90:1d:d0:0d:86:ad:0a:01:
                    d1:09:a9:53:85:b6:d6:f6:4c:0f:a9:14:ed:cf:9f:
                    10:c1:0b:f3:28:dd:5b:e2:94:91:b4:d9:2c:c6:cb:
                    68:81:7a:33:71:29:60:21:9b:1d:d7:96:66:a2:26:
                    01:c9:a6:43:2e:ae:8c:af:f9:5b:83:b6:bf:0f:df:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:0B:B9:2D:85:1B:C2:EF:15:6C:E1:7F:93:E7:00:B7:57:BC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:8a:57:af:37:e3:f7:3c:c5:a6:b6:e2:24:91:0e:b2:14:
         99:29:29:37:9a:e0:fc:c5:45:f7:7e:96:08:50:23:49:c9:eb:
         a0:82:89:4b:bc:e5:59:88:5a:83:ec:dd:95:64:dd:5a:8a:80:
         fb:4e:c6:ac:a9:54:3b:74:1f:23:74:68:49:2e:f6:2c:e4:47:
         af:db:6e:75:63:62:88:fc:2a:35:d3:01:f8:b7:a1:70:74:1c:
         28:6c:a1:3f:d2:e1:2c:0a:58:d3:f5:b8:81:f5:7d:70:10:88:
         26:1e:79:50:04:b4:22:c9:b7:60:b0:a4:37:b8:f9:3a:6c:05:
         4e:71:ce:bf:49:23:da:ce:2a:53:4c:84:3f:9d:2d:ae:54:18:
         2e:58:70:6d:e8:81:a4:81:fc:55:9a:7b:12:32:91:4d:15:16:
         1b:29:b0:81:be:6f:eb:13:a4:e4:6b:30:40:cf:4d:fe:51:89:
         92:71:bc:f3:f0:21:02:99:8c:7e:24:d6:b7:b8:85:6c:12:2e:
         76:c2:d5:3a:14:5a:59:75:24:eb:93:a7:2f:2c:59:6a:37:07:
         9d:26:97:33:91:d4:9d:29:b7:60:4c:26:49:9b:6a:a6:73:3d:
         be:9c:c2:c4:10:ea:ec:b2:dc:e0:34:c4:b2:0f:bf:f2:68:4e:
         61:a6:e2:13
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/YcmXDFAFfcLUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
NWQyMWUxOWYtMzRhZi00OWY2LTgyMDAtMGNlNTBhOGI4YTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfMePeQbJPtqHvfHA43tqw4PQ+ooNGixNpyq
vZ/EUjp6cSwKemJG+/Yka62IgGGQh1wGXp6LXo3fwmmONIf+ThnplUwTSz8bVgAB
JGfJJwheT/9j68ON5Y8HtaOjZF+CCSEpXvPY/mfczF6ApxfgKhxBBoKVjIaPf8Gd
33Fvd0RAL/XZM4t/tcFwKX2LV6JAx2E0mfaIQCRMxZ+amb+RkzxiVXh9ujMfwjJa
TGU2xw82Cs4Ex1bgOEQRkB3QDYatCgHRCalThbbW9kwPqRTtz58QwQvzKN1b4pSR
tNksxstogXozcSlgIZsd15ZmoiYByaZDLq6Mr/lbg7a/D9/cwQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGRgC7kthRvC7xVs4X+T5wC3V7xTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdlNWQ4NTUtYTg3ZC0z
OWMxLTgyYzYtMWUwMDlmNzlmYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAdfopXrzfj9zzFprbiJJEOshSZKSk3muD8xUX3fpYIUCNJyeuggolL
vOVZiFqD7N2VZN1aioD7TsasqVQ7dB8jdGhJLvYs5Eev2251Y2KI/Co10wH4t6Fw
dBwobKE/0uEsCljT9biB9X1wEIgmHnlQBLQiybdgsKQ3uPk6bAVOcc6/SSPazipT
TIQ/nS2uVBguWHBt6IGkgfxVmnsSMpFNFRYbKbCBvm/rE6TkazBAz03+UYmScbzz
8CECmYx+JNa3uIVsEi52wtU6FFpZdSTrk6cvLFlqNwedJpczkdSdKbdgTCZJm2qm
cz2+nMLEEOrsstzgNMSyD7/yaE5hpuIT
-----END CERTIFICATE-----