Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7c98fd6-4ac3-396c-bb33-e9842a4ba537.roa
File:                     b7c98fd6-4ac3-396c-bb33-e9842a4ba537.roa (raw, json)
Hash identifier:          qGkYQ1EUCJ+YBEV02Zgs+xhNiVBfJO6F5X46JKM5VIs=
Subject key identifier:   6D:D2:56:B3:74:6C:99:40:3A:3B:83:E6:62:E3:DD:6C:0D:EB:76:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339DF7726C4B25CD698B800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7c98fd6-4ac3-396c-bb33-e9842a4ba537.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     397212
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:df:77:26:c4:b2:5c:d6:98:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=d0db76de-80b3-4929-a608-f114207031cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:ef:e1:65:97:be:aa:04:a3:38:f5:df:91:
                    14:62:19:84:48:f1:e5:e3:73:ae:03:66:9a:0a:c4:
                    36:a9:93:cf:9e:1a:fb:95:00:54:67:ed:35:74:a8:
                    ee:8d:c2:f5:54:bf:65:47:1f:91:8d:48:7a:1c:f0:
                    e3:00:91:5b:c8:2c:85:ad:66:32:90:69:40:16:0c:
                    03:28:38:04:ab:04:2f:94:e9:28:33:27:ec:38:5b:
                    7a:3f:12:b9:81:bb:3a:b6:27:45:16:33:69:7c:3f:
                    26:b4:46:db:61:ce:c1:94:80:93:bb:08:e3:c3:7e:
                    bb:ef:19:0d:e0:8f:ca:19:cc:69:92:92:3f:53:64:
                    3a:c6:29:0f:33:81:6a:f0:2d:01:45:56:ee:7e:a2:
                    e8:fb:81:07:17:40:ba:d0:f3:38:0f:b6:9b:bb:ce:
                    7a:31:b5:3f:c7:31:87:31:ed:6c:22:81:c1:89:a7:
                    13:41:f1:f1:83:a1:1a:32:c6:92:b0:43:92:4f:95:
                    5c:4b:38:77:95:16:f6:ec:35:07:7c:65:a0:fa:79:
                    f6:75:87:df:2c:28:c7:39:41:b4:9b:7b:3d:e2:11:
                    dd:f5:ab:86:39:d3:49:ba:ea:1c:8e:4f:5f:e7:36:
                    99:86:50:44:0a:22:70:9d:25:92:9c:01:84:36:fe:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D2:56:B3:74:6C:99:40:3A:3B:83:E6:62:E3:DD:6C:0D:EB:76:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7c98fd6-4ac3-396c-bb33-e9842a4ba537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:20:55:00:0a:ac:88:1f:08:e8:31:da:c2:12:b5:19:31:4f:
         13:1b:4d:e0:c5:76:b0:d6:9f:97:4e:55:09:38:ac:45:db:8c:
         5c:6b:b9:d1:35:ec:3f:24:54:43:61:97:f9:58:66:60:fa:c8:
         38:21:43:c6:41:c5:9a:14:7f:f2:00:a6:11:41:e5:ff:69:96:
         fa:bd:8f:b2:82:88:67:53:56:76:e0:d7:de:24:38:c4:b9:fc:
         99:4d:09:66:c7:48:94:d0:68:b2:77:40:86:3a:3b:c3:1e:cb:
         6b:be:1a:27:57:d8:c5:67:5f:82:e2:0f:b3:99:97:e7:70:7a:
         f0:04:54:6f:36:15:5d:12:68:5c:24:91:6d:c8:6a:a1:a8:7e:
         89:f7:a2:db:9a:90:4d:91:11:12:95:d4:1f:36:d7:d0:ed:72:
         01:48:f7:f2:f0:97:7a:bf:4a:28:e2:84:c3:11:4c:4f:eb:3d:
         54:a9:76:37:d9:b2:5f:a1:1c:e8:4f:36:a1:ab:e0:20:c3:af:
         f8:b6:ef:7f:ca:b6:58:3f:08:7b:59:36:2c:4f:3f:f3:05:25:
         7e:bd:75:ba:77:73:5f:55:34:34:f4:5a:65:d4:cb:28:1b:b5:
         c3:b5:91:0e:31:97:3f:5d:6e:53:62:b1:c7:96:74:02:f3:bc:
         20:0c:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----