Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e465b337-7ab5-3eb4-a509-125625697a87.roa
File:                     e465b337-7ab5-3eb4-a509-125625697a87.roa (raw, json)
Hash identifier:          klFpavF9fsTy5xhf6BbQIauTel765rlMFwAITTHCSJ4=
Subject key identifier:   57:43:CB:D3:C2:41:59:6B:DC:AF:B6:F4:AD:46:E7:65:BA:B7:A0:87
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F388B6015BBC7D412A90
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e465b337-7ab5-3eb4-a509-125625697a87.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396542
IP address blocks:        192.42.178.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f3:88:b6:01:5b:bc:7d:41:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=596fc988-6832-4a0b-be2b-317b1100d71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ee:3a:2c:d4:32:ef:03:03:5e:49:c2:30:2a:
                    03:9e:3e:07:07:24:8f:da:c3:12:f5:d1:00:83:04:
                    bd:ac:1b:ac:e5:df:a2:cc:9a:e5:a9:97:2c:f7:c0:
                    fe:e6:6c:34:13:e9:42:f2:39:b1:33:84:2a:25:f3:
                    97:a2:e2:a7:95:90:97:2a:a7:5a:44:b0:15:a1:a6:
                    a9:c0:45:61:e4:84:2b:e6:76:86:59:30:2e:7d:e1:
                    ba:ec:f7:6a:8c:fd:db:d2:ee:80:57:2e:c8:a6:23:
                    08:4e:ca:73:76:33:e1:a5:89:07:60:83:b0:71:e2:
                    39:0c:4a:7b:34:c0:3b:35:4c:2f:fb:42:c6:6d:68:
                    9d:ab:24:d2:54:17:87:5b:9b:e1:a8:5d:c2:83:47:
                    4f:ce:ef:20:fc:26:0e:53:7b:cc:36:f8:bc:82:6a:
                    31:5e:79:9d:39:4e:ec:1c:42:55:a5:e1:92:dd:27:
                    c1:11:06:99:cb:d3:1f:56:f6:8a:e8:84:f2:c9:2f:
                    b4:76:e9:4e:25:4e:64:69:be:20:1a:3a:3f:b2:68:
                    c0:4d:d3:8c:0a:d0:a8:19:b6:f2:95:36:78:26:d1:
                    09:85:04:c7:4f:ca:88:a6:5b:71:2b:f6:2b:ef:2a:
                    66:2f:b8:2c:f9:63:07:f8:9a:1e:7b:50:83:18:c5:
                    d6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:43:CB:D3:C2:41:59:6B:DC:AF:B6:F4:AD:46:E7:65:BA:B7:A0:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e465b337-7ab5-3eb4-a509-125625697a87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:6a:7f:5c:42:2b:ca:60:49:51:7c:7f:68:b2:b5:de:24:
         9a:66:fe:ba:11:6f:26:59:4b:3b:1c:15:ec:cd:34:e1:36:0f:
         02:a2:d6:42:76:c8:00:3c:c1:a2:a4:37:ae:87:4d:e7:d3:23:
         e5:b8:02:03:9c:62:8a:c3:39:b0:44:2a:7c:8f:78:f6:92:13:
         49:ac:04:54:f2:0e:ba:8f:20:42:22:6e:bb:4d:56:57:88:29:
         ae:ae:2e:58:f1:d0:90:cd:b8:20:9f:d4:fd:2c:1b:46:83:0f:
         39:63:ef:e9:91:3e:9a:0c:ad:9e:27:6c:51:e0:49:b3:5b:ee:
         77:40:1c:a3:fa:45:4e:d5:88:8a:32:9a:0c:ce:3a:58:9e:95:
         0f:fa:8e:21:a1:b2:6e:7f:c9:09:51:b8:77:90:f4:9b:7b:4d:
         e7:40:b9:82:6b:ad:b2:95:ec:8e:3c:e5:04:b3:22:96:13:79:
         73:3e:27:00:a6:00:de:47:23:d7:6b:34:b3:a8:f1:7a:89:ff:
         85:2d:88:85:be:0b:d2:7d:40:f1:e9:5d:1e:0f:e3:10:a6:42:
         61:82:ce:09:0e:c2:de:ea:eb:f1:b4:94:4d:db:8b:6f:3d:43:
         e0:a9:37:8b:a3:8b:4d:13:c9:a5:1e:19:ea:88:53:1d:41:02:
         f0:7a:96:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----