Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbdfff7-9cfe-353a-9089-084d28a8d366.roa
File:                     acbdfff7-9cfe-353a-9089-084d28a8d366.roa (raw, json)
Hash identifier:          mdJZXPB6o+WpE9sF4qKN1J1TPEfrGgDHcDrjKV8Z+Og=
Subject key identifier:   B9:2E:D7:D3:3E:AE:34:9E:DB:EE:6F:09:39:B6:7B:1F:15:B0:23:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB16465DFAB52985AF964C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbdfff7-9cfe-353a-9089-084d28a8d366.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396608
IP address blocks:        199.7.71.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:64:65:df:ab:52:98:5a:f9:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=92962092-3bed-426d-b468-4f5a6f6bbe70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:89:47:c7:3d:00:2a:8d:2c:50:b9:27:73:
                    5e:3a:5e:f9:89:17:26:06:9f:95:ee:f5:91:1e:cc:
                    ba:9e:60:a1:bb:c5:40:99:c3:7f:e6:92:11:44:74:
                    75:23:ce:f0:32:6e:6c:98:7c:02:f7:71:b1:5a:7a:
                    73:a5:18:6c:02:66:e7:94:08:57:28:e0:80:4f:43:
                    77:b7:bf:50:af:4b:76:e2:6e:a2:9a:fd:17:0b:5c:
                    c3:6b:b3:8e:bd:c8:3d:e3:ca:c8:b7:d0:3f:57:60:
                    6b:fc:d9:ee:42:90:95:dd:9c:c4:6f:d6:7b:97:52:
                    f5:08:04:2f:1a:58:f5:d7:90:e1:ac:18:60:00:ce:
                    fb:c0:41:db:95:45:8f:25:e2:ee:3b:63:7d:eb:db:
                    9c:cb:16:84:af:47:cb:9a:f8:52:67:67:b1:ac:09:
                    28:2a:be:32:5c:02:25:fe:90:71:78:1b:32:15:c4:
                    1d:49:f6:68:f4:11:4f:83:17:4b:a3:b9:b7:55:8e:
                    07:41:0a:b2:1d:ca:18:ba:f3:cb:d7:8a:96:d6:a8:
                    35:61:98:76:94:2c:1c:62:bc:2d:e2:fb:57:bc:64:
                    0a:80:a0:01:93:1a:9c:22:a0:71:c5:7e:57:3d:60:
                    5e:ef:66:fe:44:2b:34:4c:36:23:1a:3d:43:a5:a5:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2E:D7:D3:3E:AE:34:9E:DB:EE:6F:09:39:B6:7B:1F:15:B0:23:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbdfff7-9cfe-353a-9089-084d28a8d366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:c4:8f:ed:80:40:19:1f:c5:6b:ce:b8:d5:09:97:5a:39:
         2b:87:97:17:7a:74:db:b5:8a:a5:1f:84:22:8c:6d:e2:87:e3:
         72:ca:a4:d5:fe:4a:3b:e7:e1:bd:e7:f4:a9:2e:69:41:53:5f:
         a5:c3:ef:35:df:43:bd:4a:04:14:01:2a:c6:61:cc:cd:f7:15:
         67:a3:ce:7f:4e:fb:e5:0a:9b:7b:ae:4a:d6:16:31:5e:d1:21:
         c9:46:e7:c4:b3:5e:42:5a:95:e0:7d:f1:06:58:ec:c3:b7:22:
         05:13:d1:a2:87:1b:e0:26:ba:f0:94:dd:49:7e:1d:54:6d:59:
         d2:e0:19:24:15:91:c2:33:30:2d:dd:fe:56:48:7c:5e:38:2f:
         52:f3:29:88:42:f3:b6:a7:ef:f2:bc:54:a4:b8:b7:67:8d:d6:
         04:51:0d:9d:e3:25:e4:12:33:80:4a:22:91:9e:71:8c:7c:48:
         7e:46:a3:49:75:43:12:f0:1b:01:5c:51:16:c6:6d:91:07:80:
         0f:cf:e0:4d:5b:59:c1:3a:65:1c:b3:9a:ee:cc:4e:2d:29:f3:
         1d:cd:3e:5f:d1:d3:c5:cb:1d:9e:41:d1:30:8a:00:1d:55:53:
         8a:f2:2e:f1:63:99:42:60:ee:9c:8e:d9:19:50:d2:e5:a3:a5:
         2d:47:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----