Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a14ce4b1-f379-38c6-8279-d99e03a68013.roa
File:                     a14ce4b1-f379-38c6-8279-d99e03a68013.roa (raw, json)
Hash identifier:          CQzUrVp5tnKkIlnhefYAHClXMSwbno2kmIDAlkRHpu8=
Subject key identifier:   71:B7:97:4C:70:58:B5:F8:50:0A:E4:FC:16:7B:18:13:05:81:7B:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C4EFDB283F9B6506B800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a14ce4b1-f379-38c6-8279-d99e03a68013.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     36632
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c4:ef:db:28:3f:9b:65:06:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=1443b79b-a104-49b2-a23e-b4ee76226b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:eb:13:3d:1f:ec:20:05:87:2a:7e:66:44:4a:
                    2f:ff:3a:a8:35:b2:d6:b6:54:04:fa:d0:e1:83:e8:
                    47:a1:6a:51:81:c2:9d:eb:30:c9:a1:bc:22:66:78:
                    ee:e4:fa:45:f2:e2:46:bf:a9:3a:7e:bd:60:8f:2e:
                    64:97:af:70:bf:f8:dd:25:bd:42:b5:a1:ff:e9:8e:
                    b8:9e:21:c8:99:f4:fb:de:1f:9d:4d:f3:41:97:23:
                    ee:8a:54:51:39:a5:fb:fa:72:11:89:77:7a:fc:43:
                    d6:5d:35:78:48:d3:4b:d6:56:7e:1c:64:61:f0:ca:
                    b3:68:b0:eb:13:14:0d:88:7b:6d:b0:9a:05:5d:9a:
                    ce:67:07:e2:25:f2:45:b5:4a:41:20:87:fa:5e:4b:
                    58:3b:9f:3a:8a:c9:63:f2:e2:f1:13:3e:62:03:13:
                    70:6c:dd:18:01:c9:5b:a7:12:2a:37:74:a3:0a:7a:
                    af:4d:31:1d:3b:49:07:fd:cc:70:89:c3:eb:fd:0a:
                    3b:2a:83:6d:6a:85:3b:16:9c:64:de:58:cc:45:0f:
                    18:6c:92:ce:3b:85:13:93:7a:53:49:b6:ae:52:f3:
                    24:ce:54:3b:f3:b0:3b:f6:eb:9c:15:9b:71:cf:34:
                    46:bd:bc:a4:f0:ff:68:6f:04:6e:e4:9e:b3:83:fe:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B7:97:4C:70:58:B5:F8:50:0A:E4:FC:16:7B:18:13:05:81:7B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a14ce4b1-f379-38c6-8279-d99e03a68013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:95:b6:92:07:b1:38:50:c1:c3:81:f7:c9:ad:87:0e:35:73:
         d0:4b:c8:be:7f:5e:ec:52:27:05:3a:2b:5d:b2:a9:ff:18:c3:
         59:61:fd:af:f1:c0:52:ce:bb:08:82:da:da:65:c2:56:bb:b2:
         4a:21:d7:e0:74:3b:e3:c1:47:8e:82:c9:5d:a1:b4:97:26:46:
         94:d4:a0:75:ed:a1:54:7d:e1:a3:b1:8e:6b:a2:69:cd:5d:2a:
         24:0b:73:b7:63:f7:92:b5:8f:aa:9d:d4:f0:84:f3:28:b4:2b:
         58:ac:c7:b1:21:c1:bb:4a:12:c7:33:75:4e:c4:a2:04:86:e7:
         3a:cd:75:bb:9e:25:ec:15:bc:cd:cc:64:1d:cf:76:a7:8d:0f:
         a9:b9:c4:40:ef:b3:11:96:69:bf:17:bf:c9:ec:c3:f9:52:b7:
         d5:50:13:fa:ba:37:4a:70:b1:82:2f:36:76:2e:a2:1b:4e:3e:
         9b:ba:c9:45:61:1e:28:70:bf:b8:0b:7b:99:63:a8:9d:55:52:
         90:95:31:d5:22:69:f4:cd:6e:5f:b1:28:dc:00:2e:9c:a9:b4:
         a3:cd:96:a0:4c:61:8a:37:69:5e:58:5f:42:9d:51:8b:32:01:
         c7:42:f9:74:00:c8:06:ef:f0:26:1c:6f:b0:80:9f:b3:48:ac:
         17:7e:a0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----