Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
File:                     a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa (raw, json)
Hash identifier:          umESfP+ZSIat2sP9UXnHExtHe6kHde7hZmSaIkmBqfI=
Subject key identifier:   C8:10:09:1C:7E:9A:15:6C:9C:C7:EE:6B:D4:5D:95:DF:D6:A3:24:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849797449350473CE1739982680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396603
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:49:35:04:73:ce:17:39:98:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=3cd3ac59-7b6d-4e37-a4b1-34a3daab75a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:ca:b3:6c:95:6d:9d:19:fe:06:b0:8f:22:
                    02:3e:6a:b4:53:b1:54:43:ff:08:38:58:82:a5:d1:
                    4d:83:06:35:b7:cb:31:fb:27:bb:61:b4:cf:d2:84:
                    cd:76:fe:72:92:04:cb:9c:e1:2a:d7:01:c1:02:43:
                    28:e0:3f:4b:70:66:2a:72:05:c0:d5:58:ef:8c:64:
                    1c:e1:3c:74:ba:9e:40:81:a0:a8:cc:aa:e4:5b:8e:
                    0c:88:1a:d4:bd:53:e5:c5:58:17:04:06:fa:1d:1c:
                    e9:97:66:2f:dc:3f:48:3c:9b:02:d3:e2:44:73:42:
                    51:93:6b:13:10:1c:f0:6d:36:2e:ce:6f:28:b2:fb:
                    f6:8b:73:57:60:27:17:67:81:8a:d8:bb:c1:c8:d2:
                    b6:1e:29:9a:86:d0:8b:d8:11:ab:c9:c2:63:63:9d:
                    cf:12:aa:58:86:e2:5d:3d:ad:5a:16:97:95:19:ed:
                    25:38:5e:4c:d3:36:a1:02:42:79:0a:d1:df:fc:c7:
                    62:97:0c:5c:b0:83:81:4e:7c:9d:ae:6a:7c:40:1e:
                    cc:1a:0d:2c:a3:d9:e0:7f:d4:61:d6:6c:66:a0:ae:
                    a0:23:93:80:51:ac:b0:1c:82:12:81:3b:03:4f:1a:
                    df:8e:a9:29:8a:76:0d:ec:fb:c3:a4:94:26:18:85:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:10:09:1C:7E:9A:15:6C:9C:C7:EE:6B:D4:5D:95:DF:D6:A3:24:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a303b1b9-bc5a-3d0a-b4fe-6b382d63395b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:f5:10:c5:44:58:cc:71:c7:80:53:df:b6:45:a8:02:61:
         66:01:58:24:44:77:72:04:5a:1c:f9:04:a2:06:d3:96:fe:61:
         6c:a7:0d:b4:3a:00:70:29:09:02:68:09:b8:33:b9:c0:b9:f2:
         5b:64:96:cc:ef:66:24:d0:0d:d9:c5:c0:7c:3a:0c:13:2b:6b:
         c3:fc:70:a7:8c:6a:1e:7c:07:e2:a1:a5:31:4a:25:9c:3f:86:
         12:86:3f:72:34:35:f2:30:02:9b:99:35:5d:00:c0:1c:45:96:
         83:34:c4:90:59:8b:14:d9:c1:8b:bf:9b:e0:4d:01:21:be:cc:
         22:cb:7d:c7:18:db:f7:7c:1e:14:2e:c8:81:34:f1:30:42:8a:
         b0:08:6c:f9:79:67:d4:2d:10:4c:a7:17:f6:1a:dd:b6:ef:bf:
         e2:df:7c:20:6c:03:f7:7e:9b:aa:ab:4d:7a:a6:3b:c1:19:8a:
         84:4c:12:5c:29:12:50:ff:50:3c:68:fa:62:8d:3d:d0:db:62:
         c3:d2:e1:2d:7b:cd:ad:a9:5c:8b:be:9b:fa:33:bc:b6:2d:ba:
         18:fa:ba:30:64:4f:6c:60:f9:b6:49:9b:23:42:81:3c:6e:1b:
         91:51:ff:ee:05:c4:c6:f3:e5:55:e9:eb:8f:dc:ab:bb:07:e7:
         53:e8:17:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----