Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa5b01-7b41-3cf9-ba01-9045fb058086.roa
File:                     cfaa5b01-7b41-3cf9-ba01-9045fb058086.roa (raw, json)
Hash identifier:          fPyepDE9tt7ittzXjQCXP+1XsROy1+tkOVHG0X4WkLk=
Subject key identifier:   66:17:88:0C:34:F8:FF:B1:5E:F9:C7:E6:9E:31:70:6C:4C:0A:54:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584953C4566DB99F79BAB4EEBE90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa5b01-7b41-3cf9-ba01-9045fb058086.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     36623
IP address blocks:        192.153.247.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:56:6d:b9:9f:79:ba:b4:ee:be:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=d79f9cb7-60f2-48d3-9f9d-429034546dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:ef:93:13:a9:d2:33:e2:b9:60:34:f1:85:
                    31:2b:ad:4e:76:b0:01:7a:09:0d:d7:a4:db:ba:15:
                    ac:2d:04:86:6e:59:f4:85:e8:bb:74:7b:bf:b2:7d:
                    d2:f7:3a:b7:38:52:b1:69:b6:35:de:80:70:3a:e1:
                    53:1e:e3:54:de:11:33:8e:16:fd:2a:b9:4b:5b:89:
                    77:cf:81:8d:b2:59:7a:43:c3:92:4c:25:75:b2:6f:
                    67:3e:e3:e7:65:9b:6c:1f:fc:4e:8e:94:0e:56:7b:
                    66:58:b0:90:e9:3c:39:b5:29:93:2c:72:d4:b8:94:
                    45:7c:05:fe:c3:6b:49:30:0b:f5:c4:1d:2d:8d:2f:
                    b7:41:1c:5c:f0:5a:1b:2a:62:c4:a4:8f:b4:d7:9e:
                    64:a6:1c:cf:ac:52:e3:d5:dd:8f:b8:59:2d:4e:3e:
                    c6:55:64:0c:05:4c:b1:df:82:39:34:cb:d4:82:02:
                    93:2a:ee:c9:4c:1b:e0:b2:70:ef:f0:86:0d:91:10:
                    28:5d:e5:b3:39:46:00:ca:ac:7b:69:62:0d:90:b7:
                    39:0b:a2:c8:47:4d:36:1e:55:51:81:72:2e:b5:12:
                    59:be:57:f4:0d:08:15:2d:f4:45:6b:dd:0f:29:c9:
                    9e:10:7d:34:05:4f:92:ba:9b:df:7e:4e:24:c5:a2:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:17:88:0C:34:F8:FF:B1:5E:F9:C7:E6:9E:31:70:6C:4C:0A:54:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cfaa5b01-7b41-3cf9-ba01-9045fb058086.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:67:96:27:24:91:b7:85:80:f0:32:83:4e:b6:8b:13:65:
         c3:21:29:b0:81:20:72:74:c8:40:a2:29:08:47:7a:72:b7:c7:
         8d:d9:e8:3f:76:58:42:61:fc:5f:90:59:cf:76:9e:4e:20:e0:
         89:4c:4d:6e:82:0e:7e:b0:97:9e:13:77:75:0f:24:eb:aa:bf:
         fe:40:5e:c0:26:e6:7a:e6:c0:d7:ec:20:72:d9:a0:9e:e6:5f:
         95:29:30:f2:b6:fa:c0:4f:d4:3b:ed:cc:f2:a0:82:b8:ba:16:
         c5:73:29:48:b3:0c:df:a0:d5:15:17:7d:6d:7f:a7:d4:59:b3:
         2a:37:4e:2f:f9:c3:9e:22:20:da:f1:20:8b:63:4e:50:69:63:
         bb:66:89:dc:57:34:33:a0:39:08:b9:b3:f4:16:43:af:d0:94:
         a0:38:f2:e4:43:a9:59:97:76:33:2e:bc:76:9f:04:b8:22:29:
         13:3f:07:39:a3:e2:21:2d:ee:b3:6e:99:3d:d7:c8:bc:a6:c3:
         5f:22:cf:a3:b7:fb:69:00:e9:b9:89:95:9d:58:d4:23:28:09:
         68:ce:8a:b1:8f:30:f0:09:f0:1c:32:48:83:d1:d6:3d:22:b4:
         92:cb:fd:01:42:83:f0:8c:6b:e5:70:5c:31:39:ab:ea:19:cd:
         f8:2c:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----