Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa
File:                     f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa (raw, json)
Hash identifier:          bnSgz0lsRBLKnykGG5Dp9mXbRMr9YhUmqMkM+is/9pg=
Subject key identifier:   85:B4:1B:DB:5D:50:6E:64:D3:A6:DC:DD:3F:CE:DE:F3:AA:86:50:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848CB08A59718AB234C125DFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa
Signing time:             Thu 06 Feb 2025 13:33:24 +0000
ROA not before:           Thu 06 Feb 2025 13:33:24 +0000
ROA not after:            Wed 07 May 2025 12:33:24 +0000
asID:                     397196
IP address blocks:        192.58.128.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:08:a5:97:18:ab:23:4c:12:5d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  6 13:33:24 2025 GMT
            Not After : May  7 12:33:24 2025 GMT
        Subject: CN=be9d612f-f875-4c50-bc1b-133f3c94405f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:fe:26:30:5f:18:8c:8a:c4:d2:cb:95:61:
                    22:19:98:f4:a3:7d:c2:23:bb:b8:43:b3:24:ce:50:
                    9a:08:09:e2:71:f6:18:82:45:39:59:01:00:27:7d:
                    95:c9:d2:44:2c:d8:28:38:98:1d:17:3d:d7:d5:f3:
                    5c:7e:e7:bd:b4:2f:67:73:1f:06:56:61:9c:0c:e7:
                    c2:50:b5:66:09:fd:9e:e5:d1:03:dc:89:05:49:0f:
                    df:0d:59:97:15:51:e5:51:3d:4e:ce:36:45:01:92:
                    c4:db:f5:c2:0b:91:22:67:5b:43:21:c1:81:15:86:
                    5d:01:f0:3f:a5:f8:49:79:ec:7f:81:64:5c:f2:fd:
                    a8:91:20:bf:74:e2:99:fb:6e:8f:0e:06:96:f0:c6:
                    5a:20:a2:11:09:90:0d:b5:90:47:f0:89:f1:b4:7b:
                    ac:8d:d8:50:0b:3c:cf:82:3c:83:8f:10:0d:4d:6c:
                    66:83:bf:c2:66:2c:cf:a4:be:44:1b:ea:f6:95:58:
                    19:bb:46:03:0f:a4:be:1c:07:16:10:8b:dd:90:11:
                    73:d9:38:08:1b:53:35:72:c1:41:97:a7:d7:37:ac:
                    a2:06:7c:fe:94:06:8a:1b:6f:a7:c1:72:b5:f5:03:
                    b2:27:87:dd:9e:bc:3b:71:f3:c4:38:90:0d:78:3a:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B4:1B:DB:5D:50:6E:64:D3:A6:DC:DD:3F:CE:DE:F3:AA:86:50:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1fcc5d6-66ba-31e5-99d1-f6ee355e98ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9a:7c:5a:95:09:cd:6b:b5:26:c0:5c:50:1a:37:2e:92:94:
         3b:46:96:42:25:67:40:84:51:f0:fd:a7:15:9d:0b:57:e5:a2:
         e3:e1:3d:c7:72:7c:c1:b6:f3:93:6b:9e:f7:d0:52:c5:e8:22:
         c0:e6:dc:20:b3:fb:89:bc:c9:0a:d2:b0:0e:40:d1:4e:6b:95:
         64:b0:d3:9b:46:53:1b:95:2c:92:b4:14:2e:c4:21:6c:25:a7:
         4c:a6:1b:52:5a:c7:12:8b:4b:08:a8:96:52:d3:49:50:49:49:
         9f:70:bb:2a:54:8c:2f:23:db:d7:d5:d3:a0:55:7b:34:d6:6e:
         c2:74:a1:e7:2d:66:f4:fc:78:75:3a:ed:b7:9c:52:56:df:c1:
         54:17:a0:05:66:ef:47:92:1d:c5:2f:6a:a9:11:da:ff:15:1a:
         a9:5d:92:e4:e3:c6:e1:3e:af:d6:96:09:e4:8c:01:52:4c:1f:
         45:2b:17:9c:75:46:81:49:e3:52:7b:91:4e:ad:62:a1:ff:67:
         9a:1e:c7:02:98:6f:74:5b:34:45:9d:69:1b:22:49:ee:89:93:
         6c:3a:78:89:28:5d:81:b6:0a:b3:b0:bc:a6:af:3c:1f:9b:c8:
         6e:e7:f3:6b:dd:04:4d:e7:97:01:4e:ef:ea:75:1e:db:2b:e1:
         31:6a:31:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----