Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
File:                     9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa (raw, json)
Hash identifier:          9vT1M73+XOEttn3dK4AieIRI8z4dkYZrIbWbq+dVtNE=
Subject key identifier:   AB:5E:A0:54:13:C0:B5:FA:8D:91:F8:F6:BD:84:58:B1:79:23:E8:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849203C7BF2445FFE1D93295140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     396602
IP address blocks:        192.34.234.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:7b:f2:44:5f:fe:1d:93:29:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=820c01e5-9cf5-461c-8b95-24dead56ab2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:d8:b8:a7:b8:8f:e9:4d:67:46:c5:ca:9c:
                    7f:1b:59:0d:09:aa:4f:87:d7:5b:a7:4f:ee:01:d1:
                    17:4c:d0:ff:f0:a5:f1:a5:b7:2c:b7:a5:92:a7:60:
                    b6:c0:a2:f3:fa:e7:12:c5:1b:57:de:87:44:b3:f3:
                    19:bf:b9:f8:8f:56:8b:23:08:25:1f:2a:ec:84:37:
                    4f:c6:f7:23:7f:3a:80:9f:ff:0a:b0:b1:7c:26:32:
                    35:da:23:e8:b6:0b:3c:31:de:c8:7d:7d:63:ea:79:
                    f9:47:1d:c8:6b:1a:68:c7:c0:c8:38:a5:0a:4f:f8:
                    6f:13:40:d7:77:55:63:ab:03:32:9d:2d:df:a1:30:
                    a2:17:d3:4e:4d:fc:d0:42:4c:76:94:b6:d3:4f:de:
                    94:cf:a8:0b:de:d9:15:8d:70:2b:4a:44:8f:3c:62:
                    b6:dd:ff:8e:30:f7:25:76:cf:70:1f:a4:99:c0:56:
                    a0:aa:f7:3c:61:c9:a9:e0:90:aa:f4:3e:35:f2:41:
                    39:1a:79:dc:0a:3b:13:ac:79:15:2a:4e:2d:ae:25:
                    61:6d:01:89:6a:85:9a:9e:be:c6:da:9b:f3:69:9b:
                    4e:df:1b:c3:5d:81:71:c3:bb:ab:6d:2a:61:7e:98:
                    44:b3:a1:c0:d8:48:82:5b:6e:5b:73:00:fa:18:d1:
                    c9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5E:A0:54:13:C0:B5:FA:8D:91:F8:F6:BD:84:58:B1:79:23:E8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f88a9c1-a057-3c61-9af9-02f63dffbeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:da:43:9d:85:32:99:fd:af:c7:fa:67:7a:e3:83:c2:a0:
         90:5f:c5:06:02:51:37:b7:78:ee:ef:d6:a2:cf:1b:af:c2:ce:
         18:e1:65:a8:66:12:24:59:ed:88:3b:cf:7d:8d:79:8e:45:46:
         15:35:ee:f8:2d:4a:52:d9:e6:c0:ba:f7:ed:b4:a0:13:64:c9:
         0e:a0:ca:de:ba:a3:41:f9:42:b5:16:43:a4:b9:fb:c8:e9:d6:
         0a:38:19:7d:7b:49:66:d1:f9:d3:6c:d2:dd:69:8b:d2:5d:74:
         f1:b5:c0:ae:17:1e:d0:71:23:89:f6:e3:0c:dd:68:8b:2a:54:
         b7:d2:b9:af:09:50:b6:48:50:a1:74:1d:1f:b4:fc:e6:aa:2c:
         a4:9e:46:e3:dc:07:0e:02:ca:56:12:5b:d9:3d:75:45:3c:20:
         ca:34:60:05:68:1e:9b:54:7d:12:f0:06:00:87:2b:6c:42:55:
         2a:e0:8d:15:98:62:95:1c:59:39:33:e4:0e:4a:b6:3f:d8:58:
         95:22:7d:12:ee:b8:0a:ef:d3:09:3c:ae:be:77:86:c7:70:79:
         41:73:29:b6:03:ba:e1:14:34:18:47:02:f0:58:11:f3:ab:87:
         d6:e2:9d:81:3b:03:1b:a6:72:0f:19:21:49:64:ea:fd:77:f2:
         d3:2c:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----