Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e60b25f-d585-392f-8d3e-a327ca31525a.roa
File:                     0e60b25f-d585-392f-8d3e-a327ca31525a.roa (raw, json)
Hash identifier:          28m3UUo0tw+kb0pzvtx7FpClITBe/8u4A2enabKZLsc=
Subject key identifier:   00:F9:11:92:E5:42:3D:DC:6C:0A:DA:00:B5:91:37:D5:8A:3B:DF:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485E35A2CA61B46919E9BBB600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e60b25f-d585-392f-8d3e-a327ca31525a.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     396572
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:a2:ca:61:b4:69:19:e9:bb:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=0f797495-e9a2-475c-8510-ed1eccdc29bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:31:a2:98:8a:00:db:fe:a1:8f:f3:e5:2c:
                    7e:5c:6f:6c:fd:bf:c8:79:08:76:e3:3b:92:d6:dd:
                    f9:7f:d3:8f:84:d3:da:aa:dc:d1:ac:13:0b:e3:30:
                    58:10:41:da:c4:1f:3c:94:f8:cd:61:36:16:7a:ff:
                    c8:6e:33:50:84:53:4f:c4:2d:81:01:3a:14:d6:7e:
                    50:49:5a:c9:d7:73:e3:2c:38:ab:3d:c4:1b:b8:1f:
                    3a:3d:23:65:98:0b:63:22:63:ea:d9:61:24:2f:e7:
                    93:c2:c0:93:12:a7:02:5e:a5:dd:a6:54:94:92:35:
                    a8:31:2b:1a:c5:c9:99:a8:ac:28:ed:af:40:0e:63:
                    b6:77:86:06:27:53:a2:dc:3e:83:c2:1e:86:ab:1d:
                    0b:2f:4d:f2:31:06:93:37:4a:d8:23:4c:93:db:2c:
                    cf:79:41:62:70:d1:ee:0b:e5:e3:64:e0:3b:5e:c1:
                    af:64:a6:9c:86:40:88:32:33:c8:66:7a:6a:a4:8b:
                    21:54:9f:d7:cd:38:46:f2:4e:ed:49:c3:c2:49:87:
                    e1:2c:9c:99:1a:77:97:1e:15:0a:b2:42:d0:e0:3f:
                    49:50:24:79:cb:4c:0c:ce:46:f1:cc:9d:9a:bf:c9:
                    5e:ba:45:94:44:24:da:2f:b6:d2:3a:4c:59:d2:e5:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F9:11:92:E5:42:3D:DC:6C:0A:DA:00:B5:91:37:D5:8A:3B:DF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e60b25f-d585-392f-8d3e-a327ca31525a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:47:29:fd:cc:e0:02:82:4c:f3:42:b3:23:cc:13:43:08:74:
         d0:ef:fe:2f:b8:c9:8f:1b:c5:5a:ab:9e:4d:7f:59:3d:1b:1b:
         63:08:bd:a0:b9:f7:59:eb:8e:75:9c:7e:13:99:db:c8:22:43:
         93:13:ca:90:8c:0d:10:4b:54:9b:12:35:2d:44:cc:15:1f:03:
         14:09:fb:21:b6:4e:e8:de:35:60:d8:7e:77:b8:71:02:97:18:
         6d:8a:6f:82:a2:3b:34:7d:07:83:23:08:1e:2f:0d:09:80:3e:
         8a:14:80:0a:1d:5a:df:1a:78:41:3f:2f:96:58:9f:a7:96:af:
         66:b8:95:8d:0d:ef:74:e6:df:1e:7d:58:15:ae:39:47:75:40:
         b1:ec:53:23:69:46:b1:55:f5:34:b8:0c:6c:44:ee:11:97:5a:
         df:70:21:a8:55:78:01:a6:b0:0d:82:c8:ff:24:f0:77:fd:64:
         d6:3f:2c:b8:b5:8d:2f:a1:9c:f4:0e:8c:44:ca:69:29:1b:ce:
         f6:84:a4:a1:ce:9e:ed:ec:3a:9a:f5:b8:a8:82:33:31:84:01:
         5c:61:c4:b8:08:0b:49:38:4d:7a:8f:40:dc:03:2f:48:c5:99:
         b4:16:09:14:c4:bb:fe:42:07:b0:da:a7:0c:77:d8:ae:f1:40:
         b8:d6:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----