Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db88ddd0-15b6-32a9-afaa-b4368fd6f747.roa
File:                     db88ddd0-15b6-32a9-afaa-b4368fd6f747.roa (raw, json)
Hash identifier:          j6F+kTPn59mZj0v5kSTjpQoJOApqJcv0OjKCwCzUmGg=
Subject key identifier:   E5:DF:74:E2:3E:B4:79:F5:13:CD:50:08:08:A8:F9:C8:0B:64:6F:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E77F55AC1D5853ED3380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db88ddd0-15b6-32a9-afaa-b4368fd6f747.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396600
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e7:7f:55:ac:1d:58:53:ed:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=b3ca2a28-48f9-4829-a7c5-a01ed1424484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:a6:71:42:50:30:c0:b8:d8:08:d4:1c:de:
                    cc:b1:7b:8f:23:84:bd:5a:de:1b:0f:ff:d6:20:82:
                    a9:44:92:0a:15:57:7e:07:31:14:b4:78:66:29:25:
                    43:04:fe:60:cf:dc:e4:5d:ea:06:27:01:b6:fb:71:
                    34:03:48:30:2b:8f:fa:e0:70:ab:77:f1:61:da:b6:
                    71:9f:c2:0c:e3:85:c0:82:7a:95:bc:7b:c6:a4:1e:
                    54:b4:a2:a3:94:f8:26:01:a6:17:a8:c5:9c:bc:2a:
                    11:d1:53:5b:d7:b0:6f:c0:2b:bd:a4:25:78:11:06:
                    36:47:33:3d:02:f8:aa:1f:dd:f4:ca:49:c6:7a:93:
                    b9:cb:fe:c9:63:ec:a4:f4:9f:c9:6c:31:9a:64:3d:
                    e5:7d:2a:70:2b:18:1d:c6:4d:cb:fc:cf:97:9f:41:
                    ed:4f:89:2c:74:c1:aa:16:bc:26:fd:57:77:29:c7:
                    5c:57:48:a0:87:1a:c5:88:1b:a5:9c:ea:a2:91:d1:
                    dc:d9:2d:15:86:ce:59:cf:52:b7:4d:d0:d6:c7:90:
                    52:ab:cf:d3:ff:fb:03:9a:c2:77:d9:4e:ba:6a:b2:
                    85:5e:91:9c:04:5d:b7:b5:f8:53:2f:bf:32:06:8c:
                    8a:65:b2:d3:16:aa:4a:22:c7:43:11:81:b0:77:ae:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DF:74:E2:3E:B4:79:F5:13:CD:50:08:08:A8:F9:C8:0B:64:6F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db88ddd0-15b6-32a9-afaa-b4368fd6f747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:21:12:e5:89:c9:12:3c:af:6f:ee:9d:7b:b4:76:78:8f:7f:
         4a:7e:8b:15:40:ac:de:12:84:f2:87:fb:f2:c0:21:8f:92:d9:
         eb:08:74:0d:41:f9:3e:d9:ec:30:c2:cc:27:ab:4f:7f:fc:08:
         fc:48:44:5c:c2:af:0d:ba:91:6b:1b:55:27:2f:30:55:25:7b:
         b8:b7:05:d3:d1:69:dc:35:c8:4a:4d:29:4d:55:a6:18:d8:94:
         1d:5e:86:02:d4:86:39:64:e8:db:f6:6e:80:91:08:97:a7:d8:
         a4:41:10:04:a4:7e:b4:67:19:fa:f6:a9:c3:b9:4e:a1:cf:c1:
         98:e2:4a:43:5f:09:9d:ec:c3:d3:3e:c6:b1:7c:13:c6:ea:d6:
         14:69:d7:47:9f:52:54:9f:91:23:8e:13:af:fc:77:3c:35:ce:
         78:83:be:5c:d0:83:14:82:1d:e1:a8:ce:d3:86:ab:ad:66:7c:
         30:a4:fd:13:55:4f:2f:b4:4c:22:9d:cd:68:0e:49:6f:f9:bf:
         a0:cc:d4:14:d6:bf:3c:7f:30:46:3c:8e:b7:85:63:b3:ca:07:
         f0:80:f3:cd:f1:32:29:4f:ed:73:6e:93:4d:ff:9b:4c:8a:87:
         0b:83:f6:20:c2:d8:07:ac:c9:9c:8d:70:2f:56:34:39:62:1e:
         d1:d0:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----