Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33150d21-b33c-318e-bf0e-205b3a9a4f3f.roa
File:                     33150d21-b33c-318e-bf0e-205b3a9a4f3f.roa (raw, json)
Hash identifier:          raDIIVqlV5mE3cgfbw7DiAeQZF85vbBWySmGHM2nraQ=
Subject key identifier:   01:79:85:8A:A5:8F:72:74:09:84:78:CC:10:73:CC:9B:07:8D:91:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484D759CECF96BC11027812850
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33150d21-b33c-318e-bf0e-205b3a9a4f3f.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     396584
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:9c:ec:f9:6b:c1:10:27:81:28:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=9167b460-f29f-4d53-a636-1b670c97f090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:95:45:da:20:2a:82:26:78:f7:50:75:13:04:
                    85:cf:38:82:bc:23:f1:db:77:09:17:c6:c4:32:2d:
                    24:53:e9:d2:8c:b5:c3:14:ef:2f:73:02:f5:20:9a:
                    b8:fb:0a:70:dc:b3:5c:a3:14:22:b3:f5:f6:36:18:
                    8c:ea:28:80:c8:d9:3c:29:ce:b3:09:8a:8b:ee:2d:
                    c1:79:68:67:ec:f2:a5:f1:cd:9b:17:37:91:35:36:
                    5b:fb:39:98:15:a3:af:b9:e6:b5:c6:bb:b8:c4:33:
                    e0:72:90:41:c0:37:82:12:fa:ba:af:4b:61:8a:44:
                    3c:d3:45:86:d6:9c:32:a6:5b:15:96:ad:cd:a2:0f:
                    40:39:bf:7a:31:e5:94:f4:43:b9:81:0c:b5:bf:c4:
                    cf:60:8f:dd:16:bc:be:4b:e4:28:b9:92:4b:77:68:
                    d1:8f:89:da:cc:41:03:76:5c:07:d4:81:c7:42:0e:
                    9d:38:da:90:43:54:a8:b9:f1:d7:d1:06:a8:d1:ba:
                    a2:e2:4e:af:7a:1e:91:40:f2:5b:bd:6c:05:be:92:
                    11:d5:a7:42:6f:0e:66:40:80:31:69:5a:a3:79:7d:
                    34:44:12:47:37:90:1d:f8:62:52:83:8f:f4:47:f9:
                    e0:29:38:73:a5:a1:06:07:b3:b2:7d:e6:9d:f6:4c:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:79:85:8A:A5:8F:72:74:09:84:78:CC:10:73:CC:9B:07:8D:91:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33150d21-b33c-318e-bf0e-205b3a9a4f3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:26:32:6f:74:e3:df:82:7b:17:82:07:d4:7c:57:5d:30:20:
         d8:c0:f1:79:c8:eb:f6:4e:5c:13:13:90:3d:32:f1:67:5b:06:
         db:aa:07:8a:e5:57:0a:41:12:25:99:19:b4:99:f1:8a:24:2e:
         82:51:cd:f2:b0:b6:19:79:35:fc:de:91:2c:03:81:30:d1:dc:
         7c:db:35:34:ea:8d:42:ee:bd:7d:53:32:fa:df:56:60:29:c6:
         e6:bd:52:34:e8:d4:ba:bf:41:9b:ee:f0:05:af:eb:db:29:94:
         ef:80:f9:23:a9:cf:ca:18:fd:b9:70:e2:65:fe:30:22:cd:0a:
         e3:0b:ce:23:84:c3:cd:5e:54:f0:76:f5:44:69:0c:db:2b:a3:
         2a:1a:88:0f:b9:81:65:e5:07:80:ba:77:f9:9a:9c:cb:f8:a0:
         c6:55:bc:a0:4e:25:ed:38:dd:03:84:30:0d:72:ed:cf:ea:b5:
         c9:c2:3e:e1:de:e3:ef:ea:30:48:38:d9:e1:9e:b1:cc:8e:fe:
         70:e1:92:b9:72:4f:3e:0b:0d:11:89:fa:e2:a3:24:e3:ee:18:
         76:94:3e:ba:cd:fc:63:05:dd:62:5f:d2:ab:8e:69:6e:0c:88:
         e5:b9:e8:2d:2b:ff:47:50:16:6e:89:8d:f6:29:b9:b0:de:7c:
         8f:21:da:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----