Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3478518e-fb7f-37e1-a065-e2685585fcd7.roa
File:                     3478518e-fb7f-37e1-a065-e2685585fcd7.roa (raw, json)
Hash identifier:          HvIv57VhkLPp3aESYh2Y9AqwDsNKp2w2oj4GfBoipms=
Subject key identifier:   8C:C5:44:FD:74:EC:92:79:48:89:89:36:67:02:0A:8E:2D:92:62:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424314FDDBC588C9270F8B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3478518e-fb7f-37e1-a065-e2685585fcd7.roa
Signing time:             Thu 19 Dec 2024 13:45:24 +0000
ROA not before:           Thu 19 Dec 2024 13:45:24 +0000
ROA not after:            Wed 19 Mar 2025 12:45:24 +0000
asID:                     20362
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:14:fd:db:c5:88:c9:27:0f:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:24 2024 GMT
            Not After : Mar 19 12:45:24 2025 GMT
        Subject: CN=3d20c980-77a0-4166-80bb-0d162fa069cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:30:08:9c:05:0e:28:d4:29:ea:d1:17:62:
                    20:7c:f8:5e:fa:d4:e9:76:c4:8d:e5:fb:05:b1:bc:
                    1e:10:9c:63:f5:40:c3:26:33:36:9a:0e:85:79:3e:
                    45:da:f2:9c:21:5b:20:40:b4:de:f5:4c:8c:5a:e6:
                    30:80:7e:c7:b2:ef:dd:a8:70:38:e0:f1:75:cc:7a:
                    22:75:08:97:26:c1:0d:d4:5d:2f:0f:4c:f2:38:e7:
                    aa:e6:e1:62:a5:31:19:e6:b3:c9:e8:07:80:e4:98:
                    eb:31:b9:2d:90:35:79:84:22:87:17:87:53:9d:4a:
                    16:ac:2d:ad:7c:66:ae:ec:f7:b3:f4:cc:0a:0f:f5:
                    d7:46:79:a7:19:e1:5a:c6:46:ae:fc:c9:df:75:54:
                    7e:2e:bd:74:bd:a5:98:24:1a:cf:58:25:0c:b5:a7:
                    cd:b2:68:eb:00:9a:94:c2:ec:52:8e:8a:22:d7:3f:
                    5b:79:57:1c:21:ce:29:d0:a9:f9:48:cd:4a:b1:0e:
                    6d:2c:22:7a:d9:61:c1:be:00:1d:cf:41:4e:1a:21:
                    14:3d:54:59:c5:4f:91:33:dc:fd:e2:3b:d5:5d:d5:
                    f4:c3:6b:86:c2:52:58:aa:7e:b3:98:9c:25:84:95:
                    79:ea:2f:0f:60:8e:5b:ca:98:16:bb:6e:eb:95:01:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C5:44:FD:74:EC:92:79:48:89:89:36:67:02:0A:8E:2D:92:62:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3478518e-fb7f-37e1-a065-e2685585fcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:1d:3f:2d:5a:c9:c4:2e:b3:03:7f:0a:dc:1a:ca:ab:89:
         f1:84:2d:6d:69:99:cd:28:a6:58:71:20:8a:01:c6:fc:2f:fe:
         eb:36:77:7f:29:e9:e3:fc:21:9f:82:95:d7:ed:2b:b0:27:8c:
         bc:f5:ec:db:71:9b:45:35:77:d1:1c:6b:b7:81:63:e7:11:43:
         56:3e:c1:8d:8b:84:47:ed:29:d7:f4:77:09:c8:65:c3:4a:55:
         30:f3:3c:1b:70:4a:d4:27:3d:d4:f2:31:d5:6e:52:10:0a:2a:
         a4:d1:63:0d:f6:ca:3b:d2:4d:61:f3:d1:12:c4:ae:dd:7c:de:
         03:72:52:b2:b3:dc:63:64:00:b4:7c:69:4e:38:1b:5c:81:1b:
         be:c4:5f:d5:01:1b:ca:be:92:8b:9d:96:cd:2a:15:27:94:be:
         56:77:52:23:95:c3:eb:d7:0a:05:d9:2c:0d:5e:21:51:72:87:
         7d:53:51:d1:73:14:b0:3e:98:7e:49:b6:4d:75:a8:15:5a:01:
         ff:8d:10:9c:b2:13:20:d7:33:f8:14:ef:36:d7:b5:d5:79:44:
         7e:bb:23:98:90:70:0c:6e:41:1c:46:d4:c2:ff:3a:4e:54:f9:
         a0:5e:b4:d3:d2:85:1a:c5:f3:b8:0e:fb:de:85:82:48:ed:76:
         6a:18:4f:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQxT928WIyScPiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUyNFoXDTI1MDMxOTEyNDUyNFowLzEtMCsGA1UEAxMk
M2QyMGM5ODAtNzdhMC00MTY2LTgwYmItMGQxNjJmYTA2OWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78kwCJwFDijUKerRF2IgfPhe+tTpdsSN5fsF
sbweEJxj9UDDJjM2mg6FeT5F2vKcIVsgQLTe9UyMWuYwgH7Hsu/dqHA44PF1zHoi
dQiXJsEN1F0vD0zyOOeq5uFipTEZ5rPJ6AeA5JjrMbktkDV5hCKHF4dTnUoWrC2t
fGau7Pez9MwKD/XXRnmnGeFaxkau/MnfdVR+Lr10vaWYJBrPWCUMtafNsmjrAJqU
wuxSjooi1z9beVccIc4p0Kn5SM1KsQ5tLCJ62WHBvgAdz0FOGiEUPVRZxU+RM9z9
4jvVXdX0w2uGwlJYqn6zmJwlhJV56i8PYI5bypgWu27rlQF9cwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIzFRP107JJ5SImJNmcCCo4tkmLBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQ3ODUxOGUtZmI3Zi0z
N2UxLWEwNjUtZTI2ODU1ODVmY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqxHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBUxh0/LVrJxC6zA38K3BrKq4nxhC1taZnNKKZYcSCKAcb8L/7rNnd/
Kenj/CGfgpXX7SuwJ4y89ezbcZtFNXfRHGu3gWPnEUNWPsGNi4RH7SnX9HcJyGXD
SlUw8zwbcErUJz3U8jHVblIQCiqk0WMN9so70k1h89ESxK7dfN4DclKys9xjZAC0
fGlOOBtcgRu+xF/VARvKvpKLnZbNKhUnlL5Wd1IjlcPr1woF2SwNXiFRcod9U1HR
cxSwPph+SbZNdagVWgH/jRCcshMg1zP4FO8217XVeUR+uyOYkHAMbkEcRtTC/zpO
VPmgXrTT0oUaxfO4DvvehYJI7XZqGE9E
-----END CERTIFICATE-----