Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7609c12-d599-3a6c-bc38-3b66258c1021.roa
File:                     a7609c12-d599-3a6c-bc38-3b66258c1021.roa (raw, json)
Hash identifier:          FUvfbIK2V5UMJ7N5L5TOduRCe5YrVZkY9ioXA8UKMn0=
Subject key identifier:   F3:67:59:2E:2B:F5:0A:75:B3:89:FA:EF:BA:62:76:CC:49:A0:51:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E4253477A7C27B406F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7609c12-d599-3a6c-bc38-3b66258c1021.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396586
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e4:25:34:77:a7:c2:7b:40:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=3b3ec45b-6a21-44c6-bece-52f7d3a719bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:49:8b:9f:7d:de:42:b0:96:ac:0c:c0:26:
                    b4:7c:a5:da:fe:cf:55:15:05:86:f2:bf:0e:92:3e:
                    12:ea:f2:fe:07:57:8e:2e:2c:d5:7a:0c:b8:a3:24:
                    c7:04:0a:51:33:cb:87:f5:7b:d9:e9:70:d0:f5:d0:
                    58:ff:b2:cc:bc:93:4d:41:be:46:2b:29:92:63:48:
                    de:4c:67:40:64:7d:bb:da:da:a3:7a:f8:78:8b:57:
                    76:4a:3e:a5:47:86:eb:11:da:98:e4:57:4a:70:0d:
                    60:d9:96:cf:3c:4a:bf:e2:32:2c:e6:a9:75:3e:54:
                    78:22:f5:bc:4d:a1:9f:34:86:77:3e:53:a4:44:bc:
                    d1:e5:92:e0:a1:33:0a:20:b6:42:9b:5a:c2:7c:bb:
                    9d:74:e7:59:fd:e6:7c:2d:88:d7:08:01:75:24:92:
                    ec:69:22:a4:63:48:15:4e:2d:73:54:1e:1c:1a:e6:
                    fa:b7:67:43:1f:da:7f:a8:95:70:f1:d2:d5:ba:6c:
                    ca:cc:c1:e8:88:c0:0e:97:0f:2d:c9:48:0f:79:d5:
                    0f:fe:87:f5:9e:13:1b:6d:a8:18:3d:19:96:c4:09:
                    bc:3a:e1:5f:c3:bd:84:bc:03:b0:c2:90:10:dd:d0:
                    64:45:a1:e9:d3:f1:9d:18:99:52:33:70:93:22:d2:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:67:59:2E:2B:F5:0A:75:B3:89:FA:EF:BA:62:76:CC:49:A0:51:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7609c12-d599-3a6c-bc38-3b66258c1021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:62:db:a3:39:7b:c1:c9:72:22:0e:7e:2d:e4:e8:b5:74:54:
         11:17:e2:d5:db:c7:16:d0:d5:ee:c0:62:11:cf:fb:b3:82:39:
         c9:b3:b1:b9:10:d7:8c:62:eb:a8:92:5e:03:83:8f:d2:b5:0b:
         37:d9:ea:bd:64:6a:0a:bb:6e:81:95:eb:c1:7c:73:4e:92:40:
         0e:e7:76:ab:d2:66:49:4d:f5:a6:7a:8f:0c:d0:db:b4:d4:b6:
         cf:7a:fc:45:01:0b:13:6e:b5:b0:9a:38:bf:95:cd:66:59:59:
         b2:d5:59:2c:89:d8:8f:8e:26:45:02:c9:89:e8:96:84:e5:0d:
         52:c1:a1:67:d5:32:50:be:bf:e3:e0:b3:e5:74:ef:f8:0c:91:
         3a:22:83:8e:1f:bf:65:64:bf:1d:3b:5a:56:f9:5b:34:b1:c1:
         5a:10:ae:4f:8e:a4:30:82:47:94:d7:ed:4d:d7:f7:99:61:80:
         98:f5:67:2a:cd:9d:b0:fc:7f:ea:fd:f4:08:08:c2:69:59:ef:
         28:6e:26:94:62:cb:65:29:2e:af:bf:94:c2:38:65:10:17:dd:
         d5:8c:83:70:5d:4c:06:74:09:3e:f1:da:1d:fa:95:c7:10:f2:
         c2:72:89:95:b8:83:6a:97:d8:7a:7d:3d:f2:52:ae:d2:5a:3d:
         fd:69:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----