Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e41f6ba9-7396-3ee2-be41-42aa2311e7fb.roa
File:                     e41f6ba9-7396-3ee2-be41-42aa2311e7fb.roa (raw, json)
Hash identifier:          OmgHGqLgQHhrS2RvCM55Xesg8x6LGyLXon/Aen4GfQM=
Subject key identifier:   C4:75:A5:B6:72:0E:41:8A:77:CB:E3:CC:9C:82:7B:B8:55:6E:E4:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744C8CF462A95C96E232A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e41f6ba9-7396-3ee2-be41-42aa2311e7fb.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396592
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4c:8c:f4:62:a9:5c:96:e2:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=1a8b9d9d-16c7-45fa-bcfb-59e3c80f6c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:1e:b0:1b:0c:4b:37:36:30:97:05:d0:cc:
                    37:b6:41:f1:c0:ac:cc:a5:cc:3f:1b:93:a6:65:72:
                    9d:8f:0d:bc:7c:e7:b5:01:74:85:84:df:73:11:40:
                    1a:dc:42:05:ad:33:f7:75:01:b6:ba:1c:7e:68:3b:
                    8b:7a:ab:cc:2a:01:5a:6a:c3:33:ea:18:00:a3:8a:
                    31:2a:63:e3:7a:ec:39:ec:da:22:d7:40:31:56:6a:
                    d8:c8:80:03:ab:21:41:be:ae:fe:76:35:a4:a5:d5:
                    80:ad:ee:73:78:d9:01:da:72:09:a0:6a:f7:18:1b:
                    8c:d8:08:82:ec:02:b5:9b:5b:a0:8c:fd:ff:0f:d5:
                    bd:3b:80:01:1d:76:86:0b:f2:22:c7:24:20:79:db:
                    63:e5:35:17:ff:2c:46:97:cf:df:6e:e0:1c:65:85:
                    30:39:9f:5e:80:fb:f8:52:8d:ef:65:17:97:4f:7f:
                    0c:a9:24:89:cb:88:11:1d:44:10:74:82:7b:db:b7:
                    8e:96:c8:ba:17:6e:57:3f:b5:94:2e:a2:ce:e0:06:
                    08:70:b1:de:71:e9:3b:a1:56:a4:9b:2e:f4:34:4a:
                    b4:6b:70:c9:b0:b8:94:fe:6e:ff:df:5f:8f:60:11:
                    63:b8:29:86:92:48:30:f6:df:6a:4e:24:ed:93:6d:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:75:A5:B6:72:0E:41:8A:77:CB:E3:CC:9C:82:7B:B8:55:6E:E4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e41f6ba9-7396-3ee2-be41-42aa2311e7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:46:95:54:47:51:d8:99:38:b0:1f:89:66:98:ee:9f:a3:88:
         88:87:31:f1:03:26:6b:f2:56:9f:53:80:2e:04:63:76:c5:85:
         d7:59:39:3b:5e:64:37:7a:4c:ae:66:ff:02:a0:f8:1d:98:da:
         47:a4:23:49:43:6b:80:55:a9:09:5f:a1:75:a0:cb:de:53:34:
         5a:89:37:f0:f2:8c:ef:03:3b:a5:4d:74:1f:3f:bd:19:17:81:
         74:de:7c:9d:9b:78:67:17:05:3d:67:27:0c:b0:63:12:81:2c:
         6f:7c:7a:12:72:0a:f7:95:0d:58:4c:12:5b:55:a9:78:d8:39:
         79:b0:fb:95:e7:76:f0:03:f7:db:a1:54:7e:dc:9b:53:9c:1b:
         29:11:0e:20:2b:0f:eb:05:6c:4a:7d:3b:f2:01:68:4f:f5:91:
         16:4f:81:dc:f8:b1:21:61:64:c0:d6:bf:46:74:60:90:82:64:
         de:a6:12:29:31:43:98:59:f3:b0:87:5b:8d:af:c5:88:77:15:
         6a:be:63:9f:67:df:f6:b9:b0:4d:a4:c9:5b:e1:59:25:e3:99:
         73:e0:3e:f7:27:df:f2:fa:87:5f:b9:10:22:1b:d3:10:a6:65:
         f8:f1:2f:62:39:0e:27:e1:12:e3:ab:7b:9b:e1:cc:43:fa:58:
         8e:c8:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----