Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa
File:                     b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa (raw, json)
Hash identifier:          zSPMWHxXbUGacVzKFUvyARYawX29sgg05KmpD2ARQ9A=
Subject key identifier:   E8:47:4B:D1:83:0B:39:CA:61:25:EF:24:30:DA:BA:9F:D9:2D:21:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339EBA291BA0F7781601EB9
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396594
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:eb:a2:91:ba:0f:77:81:60:1e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=a3afeea8-2709-41a2-8456-062106baabf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:bb:fe:f6:f2:82:07:4b:08:2d:d9:e7:3a:
                    6a:eb:ad:36:77:22:38:b9:04:12:1c:81:5e:50:af:
                    e6:87:cc:e3:e4:63:c4:5d:a6:50:cb:fe:f1:16:f9:
                    65:ac:38:e7:76:ef:f4:a0:90:54:ef:31:4a:f3:7f:
                    a9:71:49:11:19:17:60:26:52:c5:5a:b4:18:38:a0:
                    8e:6c:00:25:d4:be:58:06:66:8d:f5:2d:f6:6b:c0:
                    f6:c1:76:3b:d3:0d:eb:ca:55:c8:51:d7:d5:8a:1d:
                    a0:e6:a6:7e:3e:95:67:ec:50:79:da:24:0c:4d:21:
                    72:bd:a7:db:05:d3:a5:e0:1e:34:74:a1:7d:18:80:
                    e0:6a:84:77:b7:09:76:d9:65:d8:fe:29:6f:2c:2c:
                    53:c3:c6:3e:71:d1:4f:a0:a7:59:12:e1:8c:d8:06:
                    26:33:c6:5b:d6:e5:9c:61:f0:20:37:26:65:b9:7e:
                    fc:85:c4:6d:aa:14:ca:26:82:b1:87:64:b6:eb:fc:
                    8d:01:e9:48:af:28:3b:84:e5:73:e3:4f:3d:b9:a0:
                    db:d7:a1:4e:87:83:fb:9a:70:c4:fe:b6:05:91:a1:
                    70:db:1a:56:2c:60:75:ab:19:2e:a9:27:94:71:d4:
                    ac:03:c3:6a:13:49:df:fb:79:4c:f6:3f:c6:01:ff:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:47:4B:D1:83:0B:39:CA:61:25:EF:24:30:DA:BA:9F:D9:2D:21:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:c6:f2:da:ca:7c:25:7f:83:4e:0a:8e:d5:61:46:64:fc:
         65:cb:93:d9:15:78:23:26:89:5a:44:19:bc:4e:e3:6a:c8:9e:
         a3:ca:b4:04:2c:70:b9:37:ed:04:84:2a:49:08:a8:67:2d:b8:
         51:10:fd:8e:ab:ef:22:48:bb:87:8c:cb:81:7b:25:f6:aa:df:
         c6:a4:92:ff:a6:59:84:c1:24:3d:90:28:8d:48:f2:99:e8:7e:
         66:39:f5:f4:ab:f9:ba:e5:7b:62:64:c1:3d:de:a0:8c:78:12:
         00:da:79:af:b3:91:a2:f3:04:58:14:1e:e8:01:30:12:c6:4b:
         3c:89:aa:7f:0a:0e:9e:c3:a5:5d:3e:76:b1:26:c9:8f:c3:b9:
         3f:57:12:6a:ae:85:35:11:30:c6:0f:f6:46:d4:c8:46:19:72:
         9b:cd:5e:59:2b:b6:98:e7:b0:1e:8b:69:e1:08:ab:48:56:f9:
         e6:d8:05:51:74:29:d1:60:7f:3b:a7:e9:07:96:fa:90:cd:28:
         90:aa:dd:81:82:ec:aa:2d:7b:aa:c8:3b:61:f0:29:97:d4:87:
         5d:7a:9a:0b:40:d3:73:28:ba:3f:c0:dd:11:d8:50:ad:90:1f:
         59:b4:71:30:c0:37:ea:a9:ff:6b:56:97:80:2e:3f:14:d6:86:
         cf:09:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----