Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fec0d4c-ed94-374b-b5cd-fb68d9f1b907.roa
File:                     1fec0d4c-ed94-374b-b5cd-fb68d9f1b907.roa (raw, json)
Hash identifier:          /rwiBrlTkod6HHdTFc8cpToHqjctiverFxH1LvDhEJQ=
Subject key identifier:   BE:2F:8F:05:F2:20:C1:76:EA:B5:49:C2:82:1F:2A:E0:4C:33:8A:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430A2165C2EDB939BF7240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fec0d4c-ed94-374b-b5cd-fb68d9f1b907.roa
Signing time:             Thu 19 Dec 2024 13:45:19 +0000
ROA not before:           Thu 19 Dec 2024 13:45:19 +0000
ROA not after:            Wed 19 Mar 2025 12:45:19 +0000
asID:                     40717
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:0a:21:65:c2:ed:b9:39:bf:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:19 2024 GMT
            Not After : Mar 19 12:45:19 2025 GMT
        Subject: CN=99808c97-0f90-40b7-ab7b-33473287bdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:b5:c7:cb:e5:8d:67:8b:55:11:2b:75:5e:
                    12:ea:3e:7f:bd:72:93:a9:be:f9:ee:b4:88:71:23:
                    47:1c:55:3b:b6:02:f4:be:5f:ba:ab:76:3f:9f:c5:
                    76:06:99:e6:b1:24:25:95:fb:b7:4d:a3:33:7a:01:
                    2b:88:a3:3b:21:a6:ca:e8:7f:17:cb:8c:e5:01:af:
                    1d:07:59:6b:0c:bc:8e:87:13:ed:47:6c:72:c9:9c:
                    11:f0:5e:a5:47:9e:a2:e9:31:a1:e2:18:46:a9:94:
                    49:e2:1f:d7:05:3c:a3:cd:c5:f6:48:42:f5:59:f1:
                    82:ce:b7:66:bd:8b:5d:6b:6b:4e:43:83:cd:57:1e:
                    86:d8:fe:d4:6b:47:ba:7c:1e:91:5f:7b:43:87:7c:
                    60:14:4e:8d:5b:bd:98:5c:9d:eb:d0:5e:91:2c:84:
                    e4:c9:20:57:50:15:8d:cc:5f:63:a2:34:d0:70:9d:
                    b3:58:a7:e3:17:6c:82:01:da:59:3b:df:78:2a:00:
                    3b:58:a6:58:9e:5f:59:5c:5c:f1:82:0e:98:2a:2d:
                    19:c3:fe:5a:98:e3:a7:58:01:9c:e9:21:07:8c:b3:
                    e9:1f:e7:67:79:36:9b:dc:4e:3e:cb:f3:ff:ea:a3:
                    b0:03:66:4a:59:f4:2b:e6:f1:a8:cf:bf:04:52:d2:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2F:8F:05:F2:20:C1:76:EA:B5:49:C2:82:1F:2A:E0:4C:33:8A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1fec0d4c-ed94-374b-b5cd-fb68d9f1b907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:45:51:69:64:3c:18:09:7e:e5:70:55:20:e1:fd:f5:7e:91:
         cc:c5:2a:66:2f:4a:0d:d7:42:02:c3:34:87:82:34:fb:f2:f5:
         f8:50:96:f5:33:cd:1a:48:1f:ca:88:57:27:2c:68:5a:28:f0:
         60:48:b5:eb:6e:9e:24:09:1b:78:ab:0f:96:f9:21:71:9f:fd:
         ff:69:8b:f6:39:61:63:44:bd:c7:fb:75:7a:1d:22:07:a9:22:
         54:15:78:18:70:44:3a:a5:b6:30:9b:b2:fb:49:8f:f3:1a:46:
         e0:e8:56:fa:a1:36:f5:45:a0:6f:2b:4b:d1:7d:68:a1:bd:f5:
         74:a0:6f:a2:68:79:d4:90:5e:e2:d1:5d:0a:ad:a4:37:5c:4c:
         68:b2:8c:98:e0:a0:d7:46:ca:0b:40:11:c3:3c:ed:47:eb:41:
         7b:51:1a:ea:7a:64:f7:30:3f:1f:91:e9:42:77:d0:91:d8:3f:
         22:82:13:b0:18:a7:cb:08:33:b7:ec:fc:2b:b4:20:00:98:f5:
         27:68:49:25:ce:53:ba:8f:94:6c:34:3d:a5:0d:51:1f:3c:01:
         0e:d3:ca:ac:16:38:e3:da:b6:e7:a4:4a:d8:c5:dd:62:81:4c:
         f8:03:3d:eb:3c:da:b4:7f:6b:1b:68:44:fa:b2:39:76:12:a8:
         e9:23:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----