Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa
File:                     ebc78df9-60e4-3115-986d-09323d166bd5.roa (raw, json)
Hash identifier:          mQLdaSO25kQT52HkUi7RN7O0nSASv69Dl9ck3jO/too=
Subject key identifier:   BB:BF:3D:1B:AB:7C:56:BA:D4:78:71:42:25:85:66:53:90:9A:1C:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E057ADF8CB2D38A77B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396552
IP address blocks:        192.82.134.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e0:57:ad:f8:cb:2d:38:a7:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=79d8b6d2-da6d-4549-928b-c14a678983e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:b8:ec:4f:e9:62:be:e9:d2:41:ba:82:4d:
                    96:2d:0a:0b:ca:52:f2:28:d5:a7:49:20:ef:f0:57:
                    7f:ba:24:3d:db:90:e6:27:dd:cc:cb:27:59:ca:b3:
                    1c:89:da:cf:65:86:19:a4:79:4c:21:f2:2d:19:02:
                    ce:4a:a5:ce:20:a1:21:ba:92:ec:53:7e:52:a0:59:
                    f4:51:0b:c1:15:28:a4:0d:62:40:d4:8b:e5:80:65:
                    3a:7b:7b:1f:a8:31:75:ff:00:e5:37:c5:f8:d8:e7:
                    96:68:ee:31:f1:7f:d7:e0:b8:38:aa:92:b2:21:e8:
                    69:3f:6c:47:78:c0:5b:ae:16:8b:09:fc:40:cd:64:
                    0b:f1:7f:43:19:95:15:73:2e:1c:9b:fe:3f:d8:ca:
                    97:1c:3f:62:8c:dc:c5:8f:c2:1e:18:4b:9a:f9:16:
                    26:29:5a:e2:3c:13:9c:8d:4c:4f:b9:b9:70:5d:3c:
                    50:91:67:dc:95:07:a5:5a:58:3a:63:bf:96:14:7a:
                    21:66:e4:0f:96:bd:3f:67:e4:a5:db:72:d6:e9:32:
                    c5:d0:f4:9b:75:aa:be:f3:c6:f0:cb:b3:98:fc:0f:
                    0e:d8:ac:c5:5f:75:6d:b8:5f:05:d9:e7:dc:14:29:
                    b0:09:c1:f9:e4:bf:1e:00:f9:09:98:45:ba:1f:3c:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BF:3D:1B:AB:7C:56:BA:D4:78:71:42:25:85:66:53:90:9A:1C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebc78df9-60e4-3115-986d-09323d166bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:be:86:b3:b7:3e:f1:8e:3e:66:0e:c5:69:29:61:29:bc:76:
         88:48:24:0c:b8:6f:a0:7d:a7:c0:76:a3:f4:53:1a:08:ae:e0:
         c9:ea:83:5a:9f:e6:37:9c:13:99:03:b6:93:7b:79:4e:98:e7:
         3d:19:2e:02:71:59:bb:6f:e9:53:35:5f:6b:d5:aa:39:a5:6f:
         25:0c:2e:89:27:45:aa:9d:8b:7c:88:ac:1f:14:d5:b5:f0:5f:
         b7:fd:3d:6e:e5:33:6e:6b:7a:ea:02:f2:d3:8b:78:14:4d:0c:
         a4:f7:bc:1b:4f:36:00:d3:63:5d:66:ee:0b:c7:79:e1:8e:92:
         c0:11:c8:2d:fe:3a:bf:50:96:eb:5d:9c:12:19:ea:7b:9e:8f:
         05:91:0b:12:b6:75:8f:0e:c1:35:c2:9d:b9:b1:4c:9f:5d:06:
         2f:2b:22:37:87:f1:00:2e:28:0a:cb:af:62:72:60:f0:a3:34:
         a6:34:8c:a1:b9:9f:9d:76:56:32:36:fe:26:d4:c2:77:f8:c8:
         b7:a2:7a:41:bf:c0:c8:51:93:34:68:ed:5e:86:e6:91:da:7a:
         c0:99:70:e9:4b:c6:40:f5:10:f6:39:b9:87:8a:59:0b:ad:e8:
         8e:b4:d8:a2:d5:b2:e8:db:9a:31:6a:27:6e:7f:46:97:7f:2a:
         72:c5:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----