Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd88271e-2fa7-3f6d-8daa-26cb3ede66cb.roa
File:                     dd88271e-2fa7-3f6d-8daa-26cb3ede66cb.roa (raw, json)
Hash identifier:          U+sQcLDIdiXzckUhqeaHyf1WqstX47eu/pNTemBtPuI=
Subject key identifier:   4B:3F:1E:22:27:09:53:ED:69:38:D1:2C:1F:59:09:69:50:F2:40:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339EAC796CD2B79105D4340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd88271e-2fa7-3f6d-8daa-26cb3ede66cb.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396547
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ea:c7:96:cd:2b:79:10:5d:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=4144fb5e-69f2-4821-8dff-74d688f817b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d5:ff:f5:b5:51:38:44:73:75:10:3f:9b:6d:
                    86:37:de:50:20:12:1b:a1:a8:63:eb:d5:91:5b:ab:
                    31:78:9d:07:a2:cf:72:16:02:5c:a4:29:d0:8d:b7:
                    48:5a:1e:b0:53:46:d3:1d:80:9a:2e:5f:d8:7f:43:
                    d1:2d:b3:f7:70:ea:b0:50:06:a3:94:4c:56:06:ea:
                    21:0c:4c:6f:2f:ff:8e:57:92:c2:e7:61:73:f2:b4:
                    56:cb:c4:5f:13:0d:3a:86:ee:96:35:0b:d3:cf:f2:
                    45:52:1e:e3:0a:09:b2:4b:73:97:97:cb:b5:01:32:
                    f9:f1:89:0c:15:e1:40:f4:1c:f1:7c:15:da:96:3f:
                    39:74:d7:b4:7e:68:45:84:7c:27:f3:5d:5b:e1:f7:
                    a2:ef:da:a4:14:cb:a0:8a:29:92:1d:fa:2c:92:73:
                    c2:94:d6:fe:51:33:1c:5e:32:7b:90:f9:a1:a1:e6:
                    09:3e:43:ca:08:0d:05:65:09:38:55:91:a1:50:91:
                    ea:1d:2f:89:8d:18:ff:8a:26:b4:e3:a1:9b:15:84:
                    88:0c:04:0e:f8:0c:cc:d8:24:47:b8:d0:29:0a:ad:
                    2c:25:72:fb:36:86:4b:bd:ad:16:2f:c2:da:dd:a1:
                    7b:34:11:bb:81:bb:30:85:82:db:8d:77:9a:8f:9d:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:1E:22:27:09:53:ED:69:38:D1:2C:1F:59:09:69:50:F2:40:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd88271e-2fa7-3f6d-8daa-26cb3ede66cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:04:ba:6e:43:07:63:83:d8:62:95:01:2a:32:f5:e6:72:19:
         c1:40:7a:2c:dc:4f:f3:e6:b2:2e:59:6b:8e:8b:2d:7d:98:23:
         5f:13:fc:c0:8d:99:82:d0:ff:87:94:45:d3:d3:4d:6a:6a:61:
         b7:9a:1d:25:e7:07:5c:1e:48:31:bd:12:2b:05:23:e5:3b:b8:
         4d:8d:7d:a5:ea:fa:78:eb:27:b6:fc:dd:e7:d4:ad:e4:79:80:
         79:81:30:af:da:bc:9e:de:01:0b:ae:06:78:4e:4f:37:d5:0f:
         b1:ed:54:fd:6d:05:3b:64:ba:9b:65:6a:d6:0b:4c:c2:a3:83:
         a7:ac:6d:c5:da:a6:8a:03:06:62:1a:08:7b:0f:66:7d:7c:73:
         6b:7b:76:6f:b4:25:f8:4c:04:3e:fc:1e:2f:58:fc:98:a8:f0:
         06:a3:1f:2e:32:fe:25:b9:78:fd:68:e9:4f:12:66:b2:26:e0:
         6f:ad:97:82:1c:13:29:19:43:af:aa:90:c5:3c:80:ce:2e:be:
         5b:55:9c:8a:93:a5:ca:81:c2:99:27:fc:d5:e4:d7:b4:d7:ff:
         73:ab:e4:41:22:e9:04:95:99:8d:23:e4:5a:28:70:7b:f8:25:
         ab:6b:05:16:59:92:ec:4a:de:4b:c1:c3:57:be:99:15:65:85:
         bb:4f:ea:f3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmDOerHls0reRBdQ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk
NDE0NGZiNWUtNjlmMi00ODIxLThkZmYtNzRkNjg4ZjgxN2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidX/9bVROERzdRA/m22GN95QIBIboahj69WR
W6sxeJ0Hos9yFgJcpCnQjbdIWh6wU0bTHYCaLl/Yf0PRLbP3cOqwUAajlExWBuoh
DExvL/+OV5LC52Fz8rRWy8RfEw06hu6WNQvTz/JFUh7jCgmyS3OXl8u1ATL58YkM
FeFA9BzxfBXalj85dNe0fmhFhHwn811b4fei79qkFMugiimSHfosknPClNb+UTMc
XjJ7kPmhoeYJPkPKCA0FZQk4VZGhUJHqHS+JjRj/iia046GbFYSIDAQO+AzM2CRH
uNApCq0sJXL7NoZLva0WL8La3aF7NBG7gbswhYLbjXeaj52V3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEs/HiInCVPtaTjRLB9ZCWlQ8kCyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQ4ODI3MWUtMmZhNy0z
ZjZkLThkYWEtMjZjYjNlZGU2NmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC+BLpuQwdjg9hilQEqMvXmchnBQHos3E/z5rIuWWuOiy19mCNfE/zA
jZmC0P+HlEXT001qamG3mh0l5wdcHkgxvRIrBSPlO7hNjX2l6vp46ye2/N3n1K3k
eYB5gTCv2rye3gELrgZ4Tk831Q+x7VT9bQU7ZLqbZWrWC0zCo4OnrG3F2qaKAwZi
Ggh7D2Z9fHNre3ZvtCX4TAQ+/B4vWPyYqPAGox8uMv4luXj9aOlPEmayJuBvrZeC
HBMpGUOvqpDFPIDOLr5bVZyKk6XKgcKZJ/zV5Ne01/9zq+RBIukElZmNI+RaKHB7
+CWrawUWWZLsSt5LwcNXvpkVZYW7T+rz
-----END CERTIFICATE-----