Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efd07d0e-1e94-39e8-ac50-2dbfbfbb67bf.roa
File:                     efd07d0e-1e94-39e8-ac50-2dbfbfbb67bf.roa (raw, json)
Hash identifier:          N0diOiHiePMpQmJje5nRQtTV2uEDo73rV1fpsMG8kbY=
Subject key identifier:   16:9F:62:06:97:16:2F:83:98:D1:48:47:75:3F:7A:D6:9E:5D:9B:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744A7B5AC00754ADC36F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efd07d0e-1e94-39e8-ac50-2dbfbfbb67bf.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     36620
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4a:7b:5a:c0:07:54:ad:c3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=f58cdc5b-b0e4-4627-a39a-f294ca0a9b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:b7:f4:fd:a5:b6:c2:02:15:aa:d7:da:5f:
                    62:a3:4e:1e:fc:d1:5e:78:b1:f2:2d:cf:1b:18:49:
                    fc:48:b0:5d:35:4f:63:4b:38:ba:cd:f6:88:e3:f9:
                    ba:c0:dd:b3:73:43:37:23:9c:1d:28:1d:2f:93:ec:
                    e8:7f:4f:db:91:dd:11:93:bb:05:6c:31:e1:71:4c:
                    ab:ae:48:d1:7b:b4:c9:8e:fe:5a:58:57:25:d8:b1:
                    0f:9e:1d:a2:8d:60:fe:9d:e4:f9:b3:c8:36:44:ac:
                    50:fb:48:d4:ee:61:3e:f7:b1:4f:31:6a:00:d1:f5:
                    8d:a0:ca:2b:7d:fa:79:0d:e4:b0:db:b6:38:7a:32:
                    de:61:9d:62:da:dc:d5:12:2d:01:ed:42:ed:90:fe:
                    e7:75:36:87:e1:df:3a:c7:c6:db:65:9f:74:60:dc:
                    89:8b:84:38:5d:54:42:d1:85:b8:fd:24:b0:91:d4:
                    12:f3:7f:44:12:0c:8f:2c:d0:c5:b7:7c:6e:ed:5f:
                    67:c4:5a:41:b2:57:69:eb:1f:f6:5a:5e:28:4c:78:
                    f0:e5:e3:91:a1:1c:d7:ae:53:f6:5d:27:c3:79:bc:
                    97:15:42:5d:86:84:c0:87:f0:dd:32:94:dd:b9:a6:
                    63:78:38:08:3d:23:0c:f4:7f:31:2e:f6:bf:59:e3:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9F:62:06:97:16:2F:83:98:D1:48:47:75:3F:7A:D6:9E:5D:9B:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efd07d0e-1e94-39e8-ac50-2dbfbfbb67bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:9f:b0:00:3b:94:38:61:d4:c3:f7:f5:3f:0f:24:9c:99:b1:
         ab:c4:66:6a:12:cc:a9:9b:37:ee:13:7e:06:03:95:ca:cb:95:
         88:58:ef:5f:68:b9:59:53:47:e6:f0:67:52:17:62:f7:eb:e4:
         2f:7c:3b:b1:bd:45:75:51:da:46:ff:2d:bf:06:45:0b:36:64:
         f0:10:c0:29:3a:08:e7:d0:08:00:d7:2c:0d:d0:25:2e:8b:89:
         b7:b5:64:d8:4c:c9:02:f5:95:56:f1:80:08:2d:e6:08:09:4b:
         c3:b6:96:39:ee:4f:0c:77:4f:10:23:70:1d:9b:ea:a9:6f:2d:
         a1:e5:6d:34:7f:0b:fc:a2:8e:8a:52:6d:90:75:08:3d:70:98:
         a8:ae:ef:e6:c6:df:ca:f2:0b:42:9c:fc:20:f5:79:c9:cc:9e:
         6f:9d:43:b2:a3:c8:76:c5:b0:8c:fa:ae:75:44:43:fb:ed:ac:
         c3:44:da:ee:2a:5c:25:2c:8c:09:73:9b:24:1d:f2:84:e0:d2:
         f5:89:ac:a6:b5:59:eb:a2:95:fb:63:05:92:9a:80:c1:f0:75:
         9d:25:7b:e1:01:f9:3f:de:54:bd:12:72:44:a1:71:93:95:b1:
         e4:0c:aa:6f:ab:8e:5e:fe:c5:96:35:6b:7a:a0:16:10:57:70:
         6c:47:e7:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEl5dEp7WsAHVK3DbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
ZjU4Y2RjNWItYjBlNC00NjI3LWEzOWEtZjI5NGNhMGE5YjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfm39P2ltsICFarX2l9io04e/NFeeLHyLc8b
GEn8SLBdNU9jSzi6zfaI4/m6wN2zc0M3I5wdKB0vk+zof0/bkd0Rk7sFbDHhcUyr
rkjRe7TJjv5aWFcl2LEPnh2ijWD+neT5s8g2RKxQ+0jU7mE+97FPMWoA0fWNoMor
ffp5DeSw27Y4ejLeYZ1i2tzVEi0B7ULtkP7ndTaH4d86x8bbZZ90YNyJi4Q4XVRC
0YW4/SSwkdQS839EEgyPLNDFt3xu7V9nxFpBsldp6x/2Wl4oTHjw5eORoRzXrlP2
XSfDebyXFUJdhoTAh/DdMpTduaZjeDgIPSMM9H8xLva/WePjmQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBafYgaXFi+DmNFIR3U/etaeXZvuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZkMDdkMGUtMWU5NC0z
OWU4LWFjNTAtMmRiZmJmYmI2N2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC/n7AAO5Q4YdTD9/U/DyScmbGrxGZqEsypmzfuE34GA5XKy5WIWO9f
aLlZU0fm8GdSF2L36+QvfDuxvUV1UdpG/y2/BkULNmTwEMApOgjn0AgA1ywN0CUu
i4m3tWTYTMkC9ZVW8YAILeYICUvDtpY57k8Md08QI3Adm+qpby2h5W00fwv8oo6K
Um2QdQg9cJioru/mxt/K8gtCnPwg9XnJzJ5vnUOyo8h2xbCM+q51REP77azDRNru
KlwlLIwJc5skHfKE4NL1iaymtVnropX7YwWSmoDB8HWdJXvhAfk/3lS9EnJEoXGT
lbHkDKpvq45e/sWWNWt6oBYQV3BsR+fg
-----END CERTIFICATE-----