Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4375101-e93e-3905-87ac-f8b36295d2d7.roa
File:                     c4375101-e93e-3905-87ac-f8b36295d2d7.roa (raw, json)
Hash identifier:          u+z2eQcRk9a6kMPravEBVXjBcP9zLt2Gadv75W8nABM=
Subject key identifier:   27:30:5C:82:59:39:CF:05:7E:D8:F8:FE:C2:26:4D:60:B1:1A:0B:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF69513DEB9159884D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4375101-e93e-3905-87ac-f8b36295d2d7.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     36621
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f6:95:13:de:b9:15:98:84:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=dd4fce0b-34c2-4d06-86ca-cf0f21517e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:ff:0c:8f:df:dd:6c:ee:54:7d:09:04:19:
                    88:b2:0c:0e:e0:35:bb:3e:d9:ea:07:8c:25:86:2e:
                    06:ab:9c:5b:38:55:ce:41:0d:a9:10:be:24:c2:88:
                    29:4f:ef:28:e8:19:8f:13:28:a8:26:69:39:31:df:
                    9b:ee:ea:c6:ac:ae:94:ef:6d:04:a0:02:b3:de:53:
                    0c:6a:b2:52:84:1a:f3:93:72:f0:34:a4:26:57:12:
                    93:7a:e8:39:57:0b:74:a5:7b:d3:7b:ca:98:c4:54:
                    72:c5:da:c6:71:2e:0f:49:1a:2d:27:a9:5a:00:40:
                    ba:62:c0:c0:71:db:20:6a:c8:90:e5:7b:8e:a6:08:
                    5a:62:4e:c9:3d:cb:de:d2:f6:7d:49:9f:50:dd:e9:
                    2d:81:f2:a5:b6:ab:74:49:85:43:30:53:b4:65:68:
                    61:dc:10:a8:52:5a:96:a1:83:1b:db:83:06:73:6d:
                    bc:92:41:02:9d:32:09:41:ea:62:1d:58:ba:83:06:
                    3d:8f:16:53:68:8c:cd:4a:46:21:56:8f:07:71:23:
                    f1:23:fb:b1:93:62:95:2e:75:7a:c9:f8:db:90:af:
                    06:43:e1:81:df:bd:55:78:0b:e5:fa:11:04:59:11:
                    3e:3c:b0:9a:62:8f:2f:2b:49:a0:96:cf:11:7c:17:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:30:5C:82:59:39:CF:05:7E:D8:F8:FE:C2:26:4D:60:B1:1A:0B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c4375101-e93e-3905-87ac-f8b36295d2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2c:d5:15:8c:74:1b:1b:b2:cc:75:e7:0a:c9:ae:2d:a4:fd:
         9f:0e:37:65:e0:46:f9:6d:06:90:e6:f6:97:42:53:98:2c:28:
         9f:07:04:d1:7f:60:2d:af:13:1d:e4:5a:8d:88:46:fe:b1:75:
         41:dd:3a:df:76:7f:39:33:43:c9:ab:69:a7:65:16:46:02:96:
         01:54:32:7d:7a:c0:3e:b4:8f:98:bf:4a:b5:e3:90:9d:46:73:
         5b:eb:57:5d:a3:75:ca:54:c9:c3:71:72:ec:e0:13:61:0c:5a:
         41:35:14:1e:7b:04:28:11:14:ae:24:a8:08:88:28:8a:68:db:
         ff:bb:20:0f:47:54:ff:80:b5:90:e8:bd:5e:ad:d8:38:ed:1c:
         57:b6:fe:ff:df:1a:a5:ef:f7:f7:de:39:29:7d:b7:1c:ef:a3:
         f3:df:55:47:8b:99:08:e6:d0:6e:fb:8c:7b:c2:d2:6a:1f:80:
         08:12:9b:57:e1:29:6c:fc:fb:8b:3b:5f:6c:8a:8d:60:5c:22:
         c7:0b:54:6c:d1:02:3c:2d:96:8c:f2:4c:02:9a:70:11:da:b1:
         df:86:f8:b0:10:17:de:64:15:52:07:46:6f:66:83:66:be:a4:
         45:f8:3a:fe:c7:0e:fb:93:8f:a9:68:21:ef:58:28:b6:ae:7c:
         71:0b:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----