Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec7fc60e-afe3-36d8-badb-396f825af791.roa
File:                     ec7fc60e-afe3-36d8-badb-396f825af791.roa (raw, json)
Hash identifier:          uh/+g3R5uoxQoCKAtqR1muToYy/SIXFjOr4cfnYjsFw=
Subject key identifier:   1F:B9:E8:DC:44:83:27:F0:B1:77:BC:FC:B0:EF:62:40:82:5D:F6:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497974481F7746881472DFD800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec7fc60e-afe3-36d8-badb-396f825af791.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     396580
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:48:1f:77:46:88:14:72:df:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=c7533f5c-9525-45a6-a38a-abacc3448ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:80:cb:50:82:cc:bd:1c:59:2f:1c:8c:03:
                    89:54:1f:1b:fd:82:ca:50:e2:76:46:32:cc:f0:41:
                    a0:bf:ce:d1:2c:64:24:26:c4:20:5d:7f:e2:b8:e2:
                    82:45:20:c6:1e:35:f8:66:38:30:7a:6f:38:01:79:
                    52:3e:67:58:a1:1a:34:ec:d5:0a:a7:b5:9a:36:10:
                    5f:51:ee:55:d2:be:84:05:80:36:cb:0c:0d:92:b8:
                    06:84:d1:a2:00:d0:4a:6f:26:b9:b6:10:b9:36:c1:
                    e4:53:b7:18:a4:2a:6d:8f:78:a6:99:4b:b1:ea:d5:
                    50:e6:02:cd:b8:30:e6:ff:3a:42:17:80:f5:c1:b3:
                    80:06:e1:c5:98:c4:52:29:1b:09:af:74:5d:5f:b9:
                    0c:ba:12:fa:d5:66:e3:36:72:c7:61:00:e6:38:db:
                    04:b1:cb:5a:d3:c4:66:de:c0:d3:d7:09:3f:ee:d5:
                    be:b3:a6:f4:01:78:1a:0a:dd:91:a2:fb:bb:3a:77:
                    f6:72:2c:b7:50:ad:7b:93:52:cf:e2:a0:93:9f:a1:
                    78:13:87:f0:ad:d7:32:de:03:0f:35:aa:c0:de:d2:
                    27:89:51:be:4a:82:e6:42:b2:24:38:be:94:4e:07:
                    27:ea:7a:02:0c:bc:0c:fd:f7:94:90:fd:d4:45:65:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B9:E8:DC:44:83:27:F0:B1:77:BC:FC:B0:EF:62:40:82:5D:F6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec7fc60e-afe3-36d8-badb-396f825af791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:45:67:f6:f4:2a:83:52:1b:34:16:64:e0:52:d2:90:00:ae:
         b7:d8:35:e1:96:93:91:f0:61:51:97:bb:7d:a6:85:99:c1:50:
         c1:02:35:e4:dd:8f:78:1b:5b:41:97:dd:27:75:5d:e8:90:99:
         45:80:db:ef:d3:66:41:af:55:65:51:3a:a9:28:32:4c:a1:d2:
         68:f6:4c:e5:d5:bc:9b:3c:12:6c:f9:25:5c:40:cb:e9:b3:d8:
         52:a5:04:69:10:0f:84:14:28:9e:50:a9:9b:77:ed:3a:3c:28:
         de:e3:b6:4a:c0:1f:81:0c:99:86:05:43:53:e3:bd:ad:03:af:
         7d:2c:c8:bc:84:d2:ef:a2:9d:ad:52:71:93:ee:5f:59:ef:fc:
         ba:24:65:02:d3:be:55:d2:96:87:a8:0c:23:65:7f:b1:66:9b:
         81:81:ee:09:20:15:c8:eb:c5:f2:f3:0f:64:05:61:61:e8:30:
         50:3b:84:70:34:fb:a7:85:7c:bf:df:a2:aa:fe:aa:f6:e4:6d:
         74:2d:f3:36:23:9f:e0:93:8d:b2:48:2d:c6:a8:15:36:de:2a:
         1f:d9:61:3e:22:7c:e2:d3:ef:1c:ae:38:0d:38:db:1c:92:d4:
         d6:39:94:bd:c5:55:f1:fd:ce:e5:c4:a8:38:34:d0:ae:36:6f:
         87:cd:ea:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----