Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe3b0669-4a67-31e9-8ad8-701ed736161a.roa
File:                     fe3b0669-4a67-31e9-8ad8-701ed736161a.roa (raw, json)
Hash identifier:          qCD/Rof81wiipUQPO8ZSF/XUS1RyX14RbGjgk66ABJM=
Subject key identifier:   CB:C2:04:C7:0F:DA:8E:42:EA:F4:6E:EF:FC:34:DB:29:5C:C6:87:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849648455DDDB0C6B0147A42F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe3b0669-4a67-31e9-8ad8-701ed736161a.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     396574
IP address blocks:        192.42.175.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:55:dd:db:0c:6b:01:47:a4:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=55b61d43-4c35-4554-a2b4-f47cd8563e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:c1:a2:57:34:e3:e5:91:db:62:3a:1a:e4:
                    d6:a3:00:fa:73:99:e9:e0:5e:14:f9:b8:bb:8a:af:
                    48:73:3f:a2:02:2f:47:55:30:4b:b4:ab:d5:87:ed:
                    9c:23:1e:0d:31:d1:93:fc:ff:ad:c4:ce:34:38:22:
                    21:b7:53:50:6a:f9:e1:57:63:28:e8:86:d2:b9:c5:
                    c0:59:3e:fd:8a:9e:da:95:63:4c:8a:6f:13:be:6e:
                    dc:34:82:77:f1:cf:d5:95:3a:f0:28:38:9d:99:c8:
                    d1:74:63:6a:48:ad:16:4b:39:55:fc:39:50:8f:db:
                    68:c0:92:d1:02:29:2b:2c:d5:f3:2e:c8:f1:fa:5e:
                    06:fd:d3:5d:5e:ae:4f:58:17:26:d6:c5:87:35:68:
                    3b:4a:c5:90:79:57:24:e7:a7:45:0b:cf:2c:a8:2b:
                    c9:58:76:96:84:84:7a:fb:d1:cd:ff:67:76:1e:c9:
                    89:02:2b:e9:c0:1f:28:2e:00:3e:77:29:1b:52:16:
                    88:64:1a:1d:be:26:b8:59:17:65:52:c4:1f:96:8a:
                    a6:06:34:2d:91:ea:f1:3e:a6:c5:9f:81:e2:81:af:
                    f8:28:05:df:4d:9d:87:e0:f2:6a:6c:3e:2c:ba:73:
                    5b:94:9e:74:55:23:b8:b7:bb:fa:ab:17:94:36:b6:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:04:C7:0F:DA:8E:42:EA:F4:6E:EF:FC:34:DB:29:5C:C6:87:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe3b0669-4a67-31e9-8ad8-701ed736161a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f3:2d:b2:87:92:7f:ce:e5:74:21:6c:37:07:9a:d9:28:f4:
         5d:ce:5f:ac:81:91:17:d2:9d:69:ab:2b:fd:61:de:68:f6:9d:
         ff:7e:26:0e:29:fb:dc:1b:61:ea:77:89:70:2e:86:05:c9:39:
         45:b2:9a:65:9f:68:d2:11:fb:60:9e:82:34:9b:53:09:cd:dd:
         4f:21:8c:5d:99:18:6c:a2:f4:1f:de:9f:46:3e:c5:1e:65:f4:
         6d:e2:2b:b7:92:32:96:8d:00:fa:2c:f8:00:95:92:aa:e9:f4:
         32:1b:8e:7c:9f:2b:54:ec:cf:72:bf:2b:30:a1:a3:dd:a1:72:
         d6:57:64:31:db:0a:3f:1b:bc:e2:d6:ae:2e:2d:fb:48:e3:e3:
         b5:52:88:69:1d:1f:e3:4c:91:3f:e2:e4:e8:7f:57:ff:4b:af:
         79:ff:78:2f:04:c9:68:8c:d4:7c:a8:0e:60:7e:5b:46:43:bf:
         65:92:1a:19:41:d3:2e:67:82:48:a0:06:f0:d9:c0:c8:95:c8:
         63:67:49:33:c4:16:5f:2e:a8:57:71:fa:d7:b4:c8:5d:84:a6:
         4f:96:d9:14:29:76:b9:ee:dd:4b:1a:1d:ab:e2:6f:a5:e6:96:
         26:0d:bc:6f:68:d6:c9:f1:3c:73:71:52:fd:23:b6:08:51:8b:
         e1:6d:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----