Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f0310e-368c-3fe9-9b32-38fca397d72c.roa
File:                     f4f0310e-368c-3fe9-9b32-38fca397d72c.roa (raw, json)
Hash identifier:          t+KSM1db/IfU0iB9IsldFdRF2oUZzImVUn9YyzI3onw=
Subject key identifier:   C5:58:9F:74:6C:F3:05:00:03:10:C2:02:64:81:B4:96:EE:13:5E:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584979744E9A49E57D6B97439580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f0310e-368c-3fe9-9b32-38fca397d72c.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     36623
IP address blocks:        192.42.173.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:4e:9a:49:e5:7d:6b:97:43:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=123e630e-13c5-4be9-afc3-fc285aefcd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:74:97:c9:f4:4e:92:9e:23:e1:43:9f:fe:e3:
                    7f:c8:20:20:a6:15:2f:dd:24:20:17:e9:01:5b:16:
                    09:1c:16:5e:cc:5e:22:ea:f4:c6:38:72:f5:9e:33:
                    f9:05:2d:f4:0a:1c:b7:6f:78:20:8e:05:f2:1d:41:
                    00:fd:4c:0c:ea:51:03:b1:a5:ab:ed:f3:47:dc:a4:
                    1e:28:9d:eb:50:c9:21:4f:40:7e:d9:ad:a0:86:ef:
                    c8:7a:d6:fa:eb:91:ef:95:bb:47:e5:0c:c6:d2:56:
                    25:3a:02:40:10:d3:b2:39:61:a7:88:92:ef:fa:3d:
                    92:8a:ef:dd:ce:e8:dd:35:ce:cb:00:5c:24:ca:47:
                    78:c9:d9:04:02:13:d0:27:09:61:80:73:21:2d:37:
                    b4:79:da:b2:5b:5b:1c:f5:b6:1d:85:a0:a6:ee:da:
                    cc:5e:11:f4:02:ed:b7:5a:2b:b4:c0:3e:2d:b3:d5:
                    f2:5a:0c:7d:98:b7:5d:b5:ed:03:7e:17:c5:d7:39:
                    1c:07:89:01:54:1f:2f:c6:a3:29:d8:e6:28:9e:ab:
                    63:e2:74:84:dc:30:1f:64:3d:6e:62:c5:3e:d5:63:
                    36:c0:39:3b:c0:84:61:50:42:8e:66:09:0c:87:04:
                    c5:48:c9:83:e9:c7:15:ba:2f:6c:76:64:40:74:cd:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:58:9F:74:6C:F3:05:00:03:10:C2:02:64:81:B4:96:EE:13:5E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4f0310e-368c-3fe9-9b32-38fca397d72c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:67:a1:27:bd:3c:44:64:a1:ba:47:44:f4:7a:f8:41:fb:26:
         7a:c7:1a:96:8a:4f:fd:bd:0c:bb:e7:e3:d8:8b:19:3b:07:f5:
         98:b1:85:09:62:11:31:fb:75:e8:30:5e:55:85:36:74:1a:07:
         79:c1:25:05:bf:0a:eb:53:ec:5d:67:08:b1:1b:bf:55:aa:d1:
         0d:d4:52:93:80:86:d1:3e:d6:de:57:34:ec:c4:51:c2:f5:0b:
         d1:20:66:2e:3e:2e:3f:8d:0a:47:fe:95:b3:cb:a1:05:bf:f3:
         e9:6e:ce:4a:21:81:d1:94:b8:3a:a6:6e:63:e6:55:19:59:26:
         61:c5:46:16:97:c7:07:6c:62:ba:c9:c7:b4:b1:53:f2:92:8b:
         90:b2:d3:8a:ba:14:40:d8:7c:8b:81:cc:bf:b3:4a:c6:29:d4:
         7c:77:fe:ff:7e:ca:98:12:1a:5b:e5:51:54:db:18:e3:ca:5f:
         01:8f:34:9a:50:3b:65:c9:fc:99:4d:43:72:09:f6:f0:e6:8d:
         00:da:e5:3c:77:60:33:d5:03:cf:2b:47:75:26:83:7e:87:cb:
         5e:c9:88:af:e1:11:8b:7a:b9:f0:31:20:7d:ed:86:7f:b3:07:
         f5:25:ab:ca:07:0e:fe:e6:3e:6f:05:a0:e7:31:e8:f4:55:da:
         15:f3:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----