Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa
File:                     bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa (raw, json)
Hash identifier:          1mLnm5tltu7CIpNsRnbSgsBIGped0+c9KCNfqBQvZfM=
Subject key identifier:   C9:0B:03:BB:34:5C:91:E7:C6:A0:63:76:22:AE:D4:F2:3E:77:AD:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744D735B0517A7D2F436C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396608
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4d:73:5b:05:17:a7:d2:f4:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=2f59ea8f-11d8-4438-8e0a-352f10db7987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:a6:57:f4:10:74:54:9c:7b:a2:69:a2:a2:
                    18:51:a6:ed:ba:87:35:fb:36:6e:58:ff:ac:fe:92:
                    1a:10:bf:29:2d:3c:97:e9:a0:8a:61:13:e9:45:b9:
                    b4:89:10:aa:19:cf:20:d9:f9:0f:f7:6c:4d:3a:ae:
                    4a:f2:ad:23:c0:3c:06:c8:49:56:dc:ec:22:81:4c:
                    19:94:e8:37:fa:81:d1:6f:28:51:72:35:15:f3:81:
                    09:e7:2b:06:a0:63:b0:b7:68:a7:c8:a6:9c:72:36:
                    c1:58:eb:ac:f4:46:5c:7a:c8:00:e8:73:bc:be:ba:
                    e6:03:7d:d3:1b:78:ed:46:2e:7b:a8:39:5d:47:53:
                    73:4f:f9:b5:25:4d:0c:72:24:d9:b4:1f:b9:27:2e:
                    09:c8:29:23:90:01:93:fe:05:2e:b8:1a:65:c3:83:
                    2e:7f:4b:8e:12:bd:0a:3a:5b:33:6c:a3:b9:c7:f6:
                    d0:80:28:e7:4b:40:9a:95:bc:ab:f3:6f:6a:93:86:
                    a9:00:32:6d:e7:7a:47:b9:68:2c:40:72:6c:ae:9a:
                    46:97:8f:18:ce:a0:25:fd:fd:72:c1:c1:3b:65:11:
                    de:f1:b6:9c:1b:28:aa:6f:97:61:b9:47:70:ee:2c:
                    ad:9d:3a:f4:a7:e4:8d:42:0c:35:2d:4b:69:11:e3:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:03:BB:34:5C:91:E7:C6:A0:63:76:22:AE:D4:F2:3E:77:AD:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc4ec9ef-2e1b-3b88-b703-cd491c48e71d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:10:62:b0:85:0f:a4:01:f8:96:c0:4e:27:11:a7:44:c9:77:
         73:21:43:39:31:24:cf:eb:5d:58:c4:fe:0b:14:e1:43:75:9b:
         fc:aa:8f:04:57:c8:54:95:b8:1b:d3:f6:8b:31:6e:94:97:22:
         13:ac:43:15:26:cf:0f:3a:6a:0a:f5:ff:22:56:bb:a5:f1:11:
         ec:d0:aa:43:44:e9:e2:29:10:04:8d:04:ef:10:22:49:7f:be:
         85:74:57:9a:62:c8:58:db:a6:92:45:61:e5:8b:b0:79:13:11:
         82:82:14:ee:51:66:32:4d:e5:f9:8b:26:c2:21:8e:d7:44:b0:
         0c:eb:02:ec:08:b6:26:6e:17:2c:09:53:a6:68:89:67:01:38:
         3c:d5:49:ca:8b:90:d1:05:28:73:e0:df:7a:75:3d:8f:70:72:
         70:5e:c2:af:d8:36:e0:f7:d9:f9:38:f5:f7:c6:03:1e:c8:89:
         1f:4e:66:3c:78:ab:93:6d:5b:f9:4f:ea:5d:2d:ee:36:ac:63:
         1f:ab:0c:59:85:50:e6:e8:1f:8c:21:75:c0:d4:48:54:74:6e:
         1b:23:7d:ea:16:fd:79:3d:2a:e5:8c:1f:07:a8:a3:07:49:e1:
         c8:d2:a0:f5:6a:c5:3c:93:55:d6:00:bd:b2:55:c4:6b:78:b1:
         f2:80:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----