Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a868a135-4e5e-3ee1-b7a6-b94c2934b8f9.roa
File:                     a868a135-4e5e-3ee1-b7a6-b94c2934b8f9.roa (raw, json)
Hash identifier:          mLUB7V3SlGXoM/8d6OWtZItBxBXMEeHzsH+ZvzW1y38=
Subject key identifier:   DF:CD:E6:30:7D:B4:BE:E6:56:96:C7:2E:7D:95:ED:2D:DB:81:EA:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF737323590B4E6113880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a868a135-4e5e-3ee1-b7a6-b94c2934b8f9.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396551
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f7:37:32:35:90:b4:e6:11:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=aafad4df-22e6-4ca5-94e7-c98101c9aab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:2d:20:af:8d:12:57:1f:ec:fa:aa:c8:76:
                    26:39:c5:04:fb:60:09:27:32:d2:7a:bf:a2:90:17:
                    0a:1e:26:f9:b5:d9:05:1a:f3:19:85:c8:a0:0d:16:
                    46:15:97:94:a0:46:6c:43:1f:6d:7c:94:ef:12:33:
                    83:0d:7f:cd:0f:ca:d2:a3:a7:76:3a:ff:1f:4e:4d:
                    e4:ff:76:de:de:72:76:e6:0a:b2:9d:07:86:20:77:
                    4b:07:ec:6a:3d:7b:0b:cc:11:2f:22:eb:ae:bd:5b:
                    b0:1f:75:69:94:57:e8:46:3c:e8:51:ec:51:09:d1:
                    84:44:e5:dc:b9:e7:2e:c5:31:21:ad:1c:11:20:ea:
                    56:b4:2a:fc:13:ea:1e:5f:a1:4f:39:98:da:2b:a7:
                    c2:c9:87:72:c5:c1:02:6d:0c:ea:aa:82:20:2b:84:
                    53:3d:46:82:1d:7c:2e:2c:5a:f4:20:9f:3f:91:d7:
                    00:33:6c:e6:1b:a9:d2:2a:8e:05:35:e9:8e:72:09:
                    ec:48:18:1d:54:ab:b4:95:47:b0:24:2a:a3:b7:1a:
                    6b:41:fc:6f:01:ab:e1:db:f8:99:8d:a1:f9:a5:47:
                    95:df:d8:a6:b6:e1:4c:69:8c:fc:29:6b:d0:14:d8:
                    fc:b8:39:47:28:22:64:8a:85:23:0d:85:5a:3e:69:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CD:E6:30:7D:B4:BE:E6:56:96:C7:2E:7D:95:ED:2D:DB:81:EA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a868a135-4e5e-3ee1-b7a6-b94c2934b8f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:8e:bc:44:aa:9f:a8:b6:71:08:d1:6c:db:36:44:e4:65:4e:
         d9:b9:12:ef:eb:34:23:47:a6:22:d4:4a:1c:ba:23:0f:c9:bd:
         ef:f3:f5:d4:1f:0d:81:df:09:19:cf:80:bf:d4:09:02:7f:b1:
         b5:bd:03:06:df:c8:1e:6f:99:09:0e:ff:15:25:d2:31:30:da:
         3d:ce:a7:4b:16:45:1b:d2:83:2a:ad:0e:c5:d7:8d:f2:5d:17:
         c5:a3:4c:ab:30:f8:f3:aa:8c:28:7a:d5:4a:0a:b2:b0:2a:d7:
         46:98:74:4a:ee:99:dd:a3:a5:7c:3a:14:c6:9d:2d:f4:32:8b:
         d5:0c:d5:10:51:40:f0:eb:88:bd:d8:8a:61:b7:1c:69:cf:2c:
         b5:5c:be:ac:0b:9d:1b:3b:62:ee:c5:0d:68:6c:cc:d0:47:ad:
         7a:44:38:45:dd:2c:bd:0d:36:70:90:40:f5:35:df:bb:96:0c:
         7d:8e:80:e3:ca:e5:74:0d:0a:10:c8:a6:b1:2f:e5:8e:42:2a:
         05:01:55:89:39:68:9a:8a:0d:79:b3:8a:6b:29:a5:b8:31:da:
         cd:65:e4:99:63:2f:82:6a:49:d7:38:83:5f:72:c0:d0:13:37:
         b1:8d:d6:94:ab:02:56:8d:de:61:a2:57:a2:82:f7:0f:de:aa:
         27:a6:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----