Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa
File:                     ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa (raw, json)
Hash identifier:          VQbZU7XCZA9JtdvQE1HSOE3nIxhoSRZ2Rmr8SJqceVo=
Subject key identifier:   47:38:FD:9B:12:28:32:F9:D0:7C:44:F0:24:0F:EB:FF:91:CD:EE:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584973DEF1E6800AA03A4E01DFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     396600
IP address blocks:        192.42.174.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:f1:e6:80:0a:a0:3a:4e:01:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=93439fd4-f6b7-48cd-8736-4fbda601fc7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:67:e8:1d:bc:98:76:d6:26:92:78:f5:33:
                    27:be:51:4d:cd:21:92:a3:64:b7:ee:d0:50:ff:5c:
                    cf:2c:78:88:5f:98:45:5d:1f:03:02:17:12:73:ee:
                    59:cc:88:f9:2f:d1:25:52:26:1f:12:c6:aa:49:ae:
                    d5:c5:1d:48:6f:3c:d7:3d:05:7e:3c:07:1f:36:da:
                    a9:ac:c6:d9:41:46:00:bd:0a:8b:3e:da:83:18:14:
                    1d:af:68:c8:96:5d:e9:b9:7c:32:2b:4b:82:af:26:
                    a1:cc:e2:20:d4:5d:3a:1d:01:57:d6:09:3b:23:ff:
                    4f:80:04:9d:92:e2:27:f4:60:29:d1:9b:a9:0d:ec:
                    7e:9d:ff:73:f4:c1:30:a7:3a:97:e3:c7:c4:62:5b:
                    34:0b:8f:14:0f:b0:f4:45:36:89:33:ef:11:a5:ea:
                    52:aa:0b:ac:98:05:f6:46:e6:82:4a:37:14:45:97:
                    2b:e7:7e:e1:e1:86:72:50:52:38:ac:80:06:47:47:
                    fd:ad:d0:25:28:30:67:77:72:af:48:2b:4f:d2:b7:
                    66:ef:21:73:3f:11:f4:06:e9:52:3f:41:e1:c2:70:
                    ee:00:f0:b2:bb:4f:78:51:e4:af:3b:2d:b4:0d:1c:
                    5f:b5:15:cd:4d:12:69:c4:0d:5b:31:4f:f6:ab:f3:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:38:FD:9B:12:28:32:F9:D0:7C:44:F0:24:0F:EB:FF:91:CD:EE:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce9d7ed6-87ab-35e5-bfcd-ab19068dfb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:82:49:d8:91:8b:f6:14:38:29:27:84:c6:e1:d6:e4:14:1a:
         67:6a:0d:4f:f5:1f:8f:ef:bf:f9:8c:9b:a7:9f:6e:d5:3e:24:
         56:a5:87:c7:fb:89:19:83:75:39:fb:04:fe:43:77:63:3d:c4:
         81:ae:cc:a4:69:07:e3:b9:4e:21:c0:b1:77:0a:a3:33:fd:be:
         28:14:54:69:1f:6e:c8:9a:e5:0c:41:8c:63:04:8a:b1:e8:2e:
         8a:78:0e:ae:86:47:39:5e:6f:30:e3:0e:e0:27:39:f6:87:dd:
         65:a7:07:21:e6:81:57:94:63:54:bd:30:02:5b:4e:a0:02:c2:
         27:3e:31:01:69:b6:90:33:e8:5f:be:07:0a:3c:5d:25:d3:a7:
         ca:61:a9:d6:f5:eb:2e:f2:d5:e2:cd:cb:6c:6c:8b:c4:ed:e6:
         e7:44:c1:43:7e:a2:9e:35:69:ea:68:99:a4:d8:e3:26:5e:39:
         3b:05:ff:92:f2:60:f4:5e:4a:bb:85:32:df:41:bc:49:47:0f:
         6a:21:33:03:a2:dd:7a:2d:70:07:c1:00:bb:53:93:7b:12:fc:
         c3:cd:0d:b0:3e:46:26:a4:a4:44:44:49:0b:bc:40:83:fb:d1:
         96:09:6a:eb:0c:23:e5:c9:b9:da:c8:38:5d:c1:b5:44:93:6b:
         16:15:ac:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----