Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa
File:                     b902a145-91ce-3127-b047-3b79b31c5679.roa (raw, json)
Hash identifier:          4eSa3EUo2TkmoZupuT/w14k6+BVfrmSjwGetGDg/Iqc=
Subject key identifier:   8B:F6:84:C8:5B:83:F9:E9:7D:7A:EE:6A:3D:D7:C0:31:2F:CA:15:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C0F3128F2D243802D60E
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396586
IP address blocks:        192.68.126.31/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c0:f3:12:8f:2d:24:38:02:d6:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=555d5d22-03f0-4d60-b52e-ac2d5e518ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a7:ad:f9:18:ea:e5:2d:2f:3a:cf:90:dc:a8:
                    a9:5c:07:cb:be:58:f8:d1:f4:8f:f5:d6:f7:0c:59:
                    b9:a4:3e:fb:f1:81:c8:a6:b5:cd:31:f5:08:fc:aa:
                    0c:cd:93:89:b2:31:8b:08:82:86:77:31:f0:11:77:
                    3e:65:ab:7f:ca:b5:1e:e4:89:e6:ae:af:0b:53:c9:
                    79:ef:05:3b:cb:e3:80:0c:1d:ef:8b:b4:f1:fd:db:
                    3a:fe:ed:68:72:98:24:40:9c:44:56:f0:07:8a:9a:
                    80:35:54:93:cc:32:12:6f:22:75:ec:32:f1:6d:85:
                    0a:1e:95:f5:c9:17:dd:8e:47:12:ae:fb:3c:13:56:
                    44:b5:a3:62:59:f7:bb:0a:20:cc:ac:b8:40:46:17:
                    4b:92:85:32:86:70:ac:da:f8:04:48:e7:f2:b1:17:
                    ee:0a:3f:b1:2f:70:20:89:62:49:55:e6:7f:b2:8d:
                    6e:eb:e5:95:58:6f:6f:22:ee:ff:66:5f:64:f0:e8:
                    63:6b:a4:c4:92:74:c0:d2:7a:8a:63:27:93:25:88:
                    c7:35:e4:2e:d1:55:1d:6d:9d:eb:e6:f0:db:e6:5c:
                    d8:eb:f7:fa:99:02:f4:2a:66:3f:be:42:9c:1c:fb:
                    00:3e:45:5d:14:43:ca:af:87:df:e1:ef:12:cd:cf:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:84:C8:5B:83:F9:E9:7D:7A:EE:6A:3D:D7:C0:31:2F:CA:15:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b902a145-91ce-3127-b047-3b79b31c5679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:98:04:56:6c:cf:40:7b:00:4b:9f:6f:5e:36:62:08:f8:09:
         c7:28:ed:bd:ad:eb:42:07:ee:22:3f:61:38:d6:fc:45:c4:5f:
         1c:85:30:e0:36:bd:d9:11:f0:e3:32:e2:43:7a:a4:9d:65:4e:
         d6:aa:4a:ed:d6:9e:3c:8e:f7:24:3a:6e:d1:24:c5:65:1f:8f:
         3a:e4:0c:ce:b0:7a:6b:6c:03:aa:5d:44:4a:e1:97:dd:2f:28:
         ae:82:48:12:ab:40:3a:33:8e:02:4a:04:43:a0:91:38:cc:33:
         ea:a9:1f:df:58:ca:cc:7f:2c:a5:97:11:16:91:29:2d:db:3e:
         67:2a:cf:20:09:70:e5:96:18:b5:07:c1:88:fd:f0:f5:dc:b6:
         b9:6a:51:16:3d:9c:7f:ff:f9:69:65:0d:49:b2:f7:cf:10:07:
         ae:ec:e5:5f:a8:1d:3e:dc:5c:dc:45:33:62:7b:f9:54:ae:63:
         c6:54:e8:fa:43:af:c1:98:62:72:bb:4e:58:ce:9c:2b:c2:ae:
         73:95:3c:23:8f:bb:83:79:3a:c0:31:1b:c1:d1:ed:8e:3e:e0:
         fa:e7:36:40:72:95:98:34:22:84:4d:ab:c1:bd:8f:8f:10:fb:
         f8:28:ab:e3:9a:44:ee:ae:fd:c6:a1:97:f4:66:3f:7a:1f:6a:
         2f:01:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----