Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa
File:                     14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa (raw, json)
Hash identifier:          hE6X9RoVhVQE6jMx9m4SupSIAYt4WMQylR0pcJRrQ8I=
Subject key identifier:   30:27:F0:96:FF:AE:7F:3B:17:18:8D:50:BD:8B:6B:61:CC:C9:AD:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FA46B7EA229EFF9D1500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa
Signing time:             Thu 19 Dec 2024 13:45:11 +0000
ROA not before:           Thu 19 Dec 2024 13:45:11 +0000
ROA not after:            Wed 19 Mar 2025 12:45:11 +0000
asID:                     36622
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fa:46:b7:ea:22:9e:ff:9d:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:11 2024 GMT
            Not After : Mar 19 12:45:11 2025 GMT
        Subject: CN=38de8641-6636-47c5-9bf6-d00c5fd226c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:c7:13:31:80:cd:3b:28:64:7a:05:ff:00:
                    97:90:30:75:ed:96:1b:41:84:0f:09:8c:5e:d5:be:
                    c6:18:bd:b4:cc:4e:97:6b:eb:60:1f:11:52:eb:02:
                    75:c2:a2:0b:1a:9e:a1:49:a8:b6:6a:71:40:32:aa:
                    25:e6:62:ed:53:7b:8b:78:32:20:7a:c3:93:7f:59:
                    d2:00:19:d1:a4:fb:e0:7f:11:fb:ff:25:5c:78:d3:
                    9a:9a:66:02:3f:d2:95:c7:30:17:1c:7b:b8:dd:db:
                    fd:4c:ef:12:22:28:74:5e:7c:a4:50:a3:b5:ac:b0:
                    3e:c4:52:60:b0:00:41:da:a0:99:cd:d1:d8:e2:c0:
                    6b:f0:43:62:30:9d:3e:e2:c3:49:b1:c6:4f:8b:a3:
                    f5:53:72:e5:fd:e5:e1:5c:f2:2f:df:6b:b5:d5:d6:
                    e7:da:53:ce:3b:70:d7:5b:56:7a:09:15:3a:60:31:
                    26:36:46:9a:2c:77:09:ad:f3:bb:22:16:b4:25:2b:
                    e2:c9:67:4e:82:39:a3:5f:25:5c:67:80:cc:71:83:
                    86:66:e1:6c:f5:79:2e:69:6c:6b:88:d1:3f:8a:5e:
                    39:39:57:17:b2:fa:63:63:14:69:84:f3:06:17:eb:
                    55:95:0f:05:09:18:5b:9f:f3:80:de:8f:b3:0e:25:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:F0:96:FF:AE:7F:3B:17:18:8D:50:BD:8B:6B:61:CC:C9:AD:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14257b45-4f3f-3e58-a6d8-1237f8eb09c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:e8:05:42:97:b2:a4:55:95:f7:0d:92:49:77:3f:73:9b:
         02:74:8e:c3:57:d3:b8:bf:7a:51:34:59:86:ea:72:da:56:42:
         75:1b:92:c4:79:6d:1b:85:46:2f:4f:27:0f:f5:df:f7:6a:ee:
         64:48:47:45:db:89:f0:70:20:75:ee:69:28:42:1c:af:dd:76:
         7d:a0:b6:03:0f:02:b3:29:4e:4b:85:fd:f7:3e:d0:1e:0f:5a:
         cd:70:7d:31:da:4b:6c:c5:e8:23:90:17:9d:df:23:14:7e:85:
         88:cb:57:e4:da:eb:b4:df:e0:e5:51:e8:05:09:c2:ab:c5:4f:
         71:00:b6:de:82:ce:4e:fd:e3:9c:57:f0:66:f8:06:c4:87:74:
         22:9f:51:17:22:7f:57:9e:52:eb:20:ff:b0:d2:46:b8:75:43:
         83:0f:2d:1e:06:46:18:6f:1d:73:56:2d:2f:43:c6:d4:fe:76:
         f1:0c:91:ae:87:e2:13:bf:13:62:1e:40:a4:63:01:60:9a:ce:
         f2:f2:a0:87:e7:79:1b:07:c1:f2:af:8d:42:a9:8b:91:eb:f3:
         8c:33:64:27:1d:9b:36:12:aa:cc:9c:cb:5a:17:e6:3f:04:b0:
         e9:42:18:77:3b:17:25:40:70:d8:70:d0:e3:25:0d:9e:8f:13:
         4e:74:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----