Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2b8ccf-7aa1-30ba-8e24-deacc8dd253d.roa
File:                     3d2b8ccf-7aa1-30ba-8e24-deacc8dd253d.roa (raw, json)
Hash identifier:          znEqs+gzGDsk8yGVIEb/5U606tthFul30dMhJzQzODk=
Subject key identifier:   58:CD:BB:23:24:4D:24:00:14:41:F9:E7:11:95:6F:59:2C:28:58:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484D759E30A222204A46913280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2b8ccf-7aa1-30ba-8e24-deacc8dd253d.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     396591
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:9e:30:a2:22:20:4a:46:91:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=1667ec76-8d9c-4b06-a307-5b0e02c49d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:61:c9:d9:52:ff:06:57:36:8a:f2:7a:d8:
                    01:ad:0e:85:13:64:4d:26:61:04:7f:24:d4:b5:b4:
                    b9:6f:42:54:60:19:fe:73:d6:8e:16:d7:c6:3c:d4:
                    21:4d:59:0c:43:9f:90:fc:bf:83:3b:f1:4b:de:b7:
                    9d:2c:ec:7c:89:f0:4f:e0:b9:e0:4a:07:2b:e1:11:
                    d6:45:44:5e:98:60:ac:79:3e:d1:ef:18:5c:b6:1e:
                    d9:28:37:0c:f9:54:a2:a4:9f:48:17:4f:6e:56:0f:
                    6f:8a:b5:b4:b0:cf:c5:fc:26:e6:f0:c7:31:24:d2:
                    22:68:0d:5c:87:f5:58:f1:1c:1e:56:b8:a6:2b:62:
                    3b:1f:cb:3e:d0:c4:5c:2a:a2:1c:25:ad:cf:45:f4:
                    9a:d2:54:d6:ae:1d:9a:b5:21:59:ac:c4:30:fd:c6:
                    cc:42:41:c0:2b:0b:d4:4f:fb:8d:9d:91:52:cd:4c:
                    bb:ab:78:eb:cf:17:1e:a0:be:f6:46:01:1e:37:5b:
                    64:6f:a8:73:56:6b:0f:cd:5d:38:67:75:6b:b7:50:
                    c0:38:5e:f9:36:5b:53:9a:53:81:eb:07:bb:79:02:
                    dc:31:34:d0:ae:46:3e:86:16:33:ae:7a:99:eb:74:
                    91:b2:51:23:b3:0a:a2:72:aa:81:87:3b:91:b4:d5:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CD:BB:23:24:4D:24:00:14:41:F9:E7:11:95:6F:59:2C:28:58:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2b8ccf-7aa1-30ba-8e24-deacc8dd253d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:42:26:09:43:be:d9:ba:50:6c:4a:f3:35:f9:bc:7e:de:
         dc:aa:fa:62:f7:a5:f4:28:b3:c3:91:c6:38:36:e8:bc:3b:f2:
         5a:bb:52:02:3e:f4:b1:93:fb:53:63:86:8f:dc:41:70:ed:52:
         ee:d6:a2:dd:39:bf:99:34:57:3b:61:2f:b8:54:a4:72:fe:67:
         dd:17:6a:d6:b4:1d:b1:1a:b0:0c:0e:19:15:de:71:43:2e:c5:
         77:98:53:2b:ed:ed:82:18:4c:72:03:90:da:a1:12:f1:0c:62:
         3e:84:93:9e:44:b1:be:05:f5:40:b8:3d:e5:fc:8e:8e:6b:4d:
         a6:5e:24:2c:06:e4:c7:16:ec:c6:36:03:fe:cd:48:92:a0:a3:
         3a:40:6e:dd:75:96:d9:47:61:13:17:e2:bb:66:73:73:97:03:
         03:89:c2:9d:1a:2d:96:82:f2:24:f3:65:c5:b5:dc:d3:3a:bf:
         a7:6f:a4:51:c4:8f:7b:4f:f2:87:85:9e:a8:3b:4a:b9:1c:a0:
         25:65:fc:cd:bb:8b:41:19:51:7c:99:4e:72:46:55:c3:59:60:
         25:94:bc:d7:18:92:57:3f:fb:cc:d8:61:bf:bc:17:ec:5e:81:
         64:a5:cd:15:55:23:c6:8b:22:95:a3:52:aa:4d:37:33:10:75:
         ec:38:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----