Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa
File:                     0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa (raw, json)
Hash identifier:          2OQqY5rbASypQAqbOca+i9vLeRcz8rvdOIUHLsJVJ14=
Subject key identifier:   E1:E0:B7:70:7A:85:1E:DB:5A:26:70:D0:ED:0D:FA:35:63:4F:90:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485E35A5B07CBFB1BAB21F3200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     396594
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:a5:b0:7c:bf:b1:ba:b2:1f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=1135d1ae-3cd2-4482-bf21-da1f5f1770a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:91:0c:33:9e:14:0b:ce:48:0c:6e:6c:6d:
                    be:9f:5b:0d:96:6f:29:15:fe:30:18:17:bd:ed:1d:
                    08:6b:ab:5e:92:dd:25:a2:1d:de:4c:47:86:73:33:
                    80:73:88:5a:4a:74:ee:6f:2e:53:ef:6d:1c:8b:e8:
                    d7:68:5e:21:c6:4a:a4:10:b3:85:2f:c2:d8:ee:5b:
                    ea:5f:cd:15:45:13:52:5a:51:63:fb:15:31:78:47:
                    b9:7f:7f:20:c8:b3:52:97:eb:38:a3:13:d2:05:24:
                    27:22:e3:a2:80:1b:7a:ed:f7:1d:e2:e0:da:30:a7:
                    47:b8:94:e1:1b:c1:18:39:a3:fb:b3:3a:e8:96:43:
                    33:c3:21:08:e7:1f:0c:71:8f:11:ee:30:fa:08:ce:
                    f7:a9:72:c6:99:73:37:d1:40:19:05:44:a5:ab:8d:
                    48:2f:ea:69:93:6f:56:c9:fb:55:10:0e:05:f9:dc:
                    e7:82:62:fd:48:43:fe:47:96:e9:5f:00:42:f1:c3:
                    fa:25:8f:08:06:fd:56:b8:36:d8:1f:f1:89:40:f8:
                    39:32:16:97:92:46:ae:12:d6:32:fc:b3:58:1e:ca:
                    7b:00:c9:68:69:14:94:d1:72:b4:58:f3:fc:56:60:
                    f8:e8:8f:ed:78:a6:e8:b1:43:5a:90:83:de:f1:19:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E0:B7:70:7A:85:1E:DB:5A:26:70:D0:ED:0D:FA:35:63:4F:90:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dc9b007-921a-30cc-acbf-7e11d4fb3414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:07:48:77:66:be:2b:04:53:25:b5:47:47:78:a5:2b:a6:da:
         2e:46:fb:f2:a9:74:26:8f:9b:51:43:82:fb:bc:a5:bc:a9:fd:
         29:d7:48:46:ca:b5:2c:30:39:e3:81:b6:c2:69:47:8b:6d:de:
         f4:83:c2:1d:09:e7:d0:7c:67:8e:fb:d9:34:76:9a:59:b1:7b:
         7b:d7:c3:6b:c7:a1:c1:54:08:f3:a5:9c:af:0b:fb:23:2c:4f:
         40:b8:e9:c6:b5:46:e7:d4:03:71:b4:ec:36:4a:56:7d:80:2b:
         ba:43:40:10:cd:95:64:be:1c:98:bb:85:56:9f:c7:7a:41:58:
         94:f2:ee:69:cb:04:5e:30:eb:31:69:67:e7:6e:11:c3:f0:68:
         11:1b:3d:d4:f2:d5:7c:65:bb:ef:19:9e:07:ef:ad:8a:a0:fc:
         e0:0f:58:e7:a8:21:de:d4:66:62:f1:c4:c2:77:f4:de:f5:a0:
         95:e8:42:b5:83:17:9a:93:59:03:82:bd:e3:25:29:e3:3f:6c:
         5f:e5:fe:31:b8:b4:83:56:40:18:4d:87:09:b2:09:f8:18:df:
         2e:11:24:d7:39:49:d0:55:ea:a1:af:24:b1:cd:9c:99:e5:2c:
         22:d5:62:b5:98:79:ae:f1:71:6c:a9:7e:70:88:1f:d2:f6:8d:
         3f:ca:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----