Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb12bbc9-3d54-3593-9a22-ad72487b1459.roa
File:                     bb12bbc9-3d54-3593-9a22-ad72487b1459.roa (raw, json)
Hash identifier:          3I2BToEroZ+wEtBTc9LEYum1X6Mca+roP0c7PBAnGFg=
Subject key identifier:   49:67:6B:00:F0:9D:D3:11:CD:CB:0C:C4:C9:E3:86:2B:64:8C:07:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744F73A5CF246E627901C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb12bbc9-3d54-3593-9a22-ad72487b1459.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396545
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4f:73:a5:cf:24:6e:62:79:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=9737d5ba-febb-450b-a438-f20d54280a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fb:3c:e8:17:13:3c:37:98:78:4c:5f:c4:a5:
                    b8:18:36:74:13:8c:b7:e2:fa:a8:1b:77:74:85:a3:
                    e4:78:3f:1f:66:02:6f:bf:17:fb:74:25:19:c2:f8:
                    17:45:a3:17:7f:3f:0c:4c:0d:91:31:6b:58:af:4e:
                    34:db:b1:0b:f7:d2:3c:93:ed:8e:4c:2c:9d:96:3b:
                    71:49:06:8f:46:6f:32:7a:18:62:e3:78:2a:c0:fe:
                    f6:af:ad:27:d9:d9:08:da:b3:ba:ff:88:f5:62:bc:
                    29:e8:5b:dc:2a:63:75:39:49:76:1d:4a:6e:9d:36:
                    a0:e9:e4:b1:0c:d2:49:f1:3b:15:5c:1d:63:37:8e:
                    d3:8e:b1:bd:34:4a:22:23:da:86:ee:10:2c:cc:6d:
                    41:e9:e1:ed:d2:cf:c6:e2:34:b6:f7:71:39:b2:2f:
                    64:38:6e:d0:6e:7c:e2:36:78:14:23:d6:11:6f:75:
                    9b:58:97:af:39:7a:bf:b3:44:43:53:b5:0b:0a:4c:
                    a5:87:fd:32:7d:0e:10:39:92:f4:8f:75:c4:5e:a7:
                    02:d6:20:7d:c8:ff:1e:b3:de:d5:7e:e0:27:54:34:
                    46:46:39:fd:51:e8:82:32:3f:e5:69:e2:cf:d0:6a:
                    3d:0c:22:7c:c2:13:d1:af:b6:12:6a:30:17:ea:33:
                    10:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:67:6B:00:F0:9D:D3:11:CD:CB:0C:C4:C9:E3:86:2B:64:8C:07:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb12bbc9-3d54-3593-9a22-ad72487b1459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:91:bb:b7:d3:e5:3b:1e:69:08:4b:42:08:09:38:1a:e4:
         81:67:47:9f:27:f5:fe:a6:58:aa:93:7c:ca:50:ab:56:76:1a:
         46:bf:d4:99:3c:cd:82:3b:a9:55:cd:98:bc:3c:89:24:15:6a:
         9e:fd:5a:ae:62:68:3a:72:d9:8d:08:b6:2a:2f:e1:c0:00:e9:
         b7:3b:5c:0f:97:fc:65:c3:98:d5:20:ec:fd:1c:45:7f:2b:39:
         6a:9f:45:ae:9f:07:b2:69:f8:5f:15:ef:68:e5:4a:31:b5:c3:
         de:66:ea:fd:84:54:93:68:ed:84:dd:fd:7c:21:29:8a:1b:32:
         05:b2:5f:d8:98:1c:ab:11:05:28:32:6d:49:fd:5d:56:bc:3e:
         41:cb:da:fd:59:f8:d3:6d:ec:2d:14:55:e6:13:ed:16:9c:6f:
         62:a8:69:a3:c0:f8:6e:a0:79:c8:92:86:b2:be:dc:23:3c:bb:
         6c:46:6c:34:08:f6:4d:ab:49:6c:18:55:de:4e:67:0c:aa:39:
         6e:5d:cd:f7:91:b2:35:e8:55:64:66:11:4e:f4:99:15:94:da:
         d4:02:00:e0:b9:fb:a7:3e:68:66:66:14:ca:9e:2e:e4:25:e6:
         36:c6:29:a3:6c:8e:79:a7:fc:45:d9:d1:68:b1:03:de:e6:bc:
         89:70:0d:1a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dE9zpc8kbmJ5AcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
OTczN2Q1YmEtZmViYi00NTBiLWE0MzgtZjIwZDU0MjgwYTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/s86BcTPDeYeExfxKW4GDZ0E4y34vqoG3d0
haPkeD8fZgJvvxf7dCUZwvgXRaMXfz8MTA2RMWtYr04027EL99I8k+2OTCydljtx
SQaPRm8yehhi43gqwP72r60n2dkI2rO6/4j1Yrwp6FvcKmN1OUl2HUpunTag6eSx
DNJJ8TsVXB1jN47TjrG9NEoiI9qG7hAszG1B6eHt0s/G4jS293E5si9kOG7Qbnzi
NngUI9YRb3WbWJevOXq/s0RDU7ULCkylh/0yfQ4QOZL0j3XEXqcC1iB9yP8es97V
fuAnVDRGRjn9UeiCMj/laeLP0Go9DCJ8whPRr7YSajAX6jMQgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFElnawDwndMRzcsMxMnjhitkjAeTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmIxMmJiYzktM2Q1NC0z
NTkzLTlhMjItYWQ3MjQ4N2IxNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAR1JG7t9PlOx5pCEtCCAk4GuSBZ0efJ/X+pliqk3zKUKtWdhpGv9SZ
PM2CO6lVzZi8PIkkFWqe/VquYmg6ctmNCLYqL+HAAOm3O1wPl/xlw5jVIOz9HEV/
Kzlqn0WunweyafhfFe9o5UoxtcPeZur9hFSTaO2E3f18ISmKGzIFsl/YmByrEQUo
Mm1J/V1WvD5By9r9WfjTbewtFFXmE+0WnG9iqGmjwPhuoHnIkoayvtwjPLtsRmw0
CPZNq0lsGFXeTmcMqjluXc33kbI16FVkZhFO9JkVlNrUAgDgufunPmhmZhTKni7k
JeY2ximjbI55p/xF2dFosQPe5ryJcA0a
-----END CERTIFICATE-----