Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/424de6cc-c4fc-338d-9f08-63701c0e8fb2.roa
File:                     424de6cc-c4fc-338d-9f08-63701c0e8fb2.roa (raw, json)
Hash identifier:          VfTs40ovmzfXO1LqFQJZb4Vv4ICMWE29ln8f9Qth2XU=
Subject key identifier:   5A:BD:91:79:0B:24:1B:6E:A0:4C:1B:3B:A0:46:83:9B:B4:C7:D0:B7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842431932FDE2391E57432500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/424de6cc-c4fc-338d-9f08-63701c0e8fb2.roa
Signing time:             Thu 19 Dec 2024 13:45:26 +0000
ROA not before:           Thu 19 Dec 2024 13:45:26 +0000
ROA not after:            Wed 19 Mar 2025 12:45:26 +0000
asID:                     396615
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:19:32:fd:e2:39:1e:57:43:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:26 2024 GMT
            Not After : Mar 19 12:45:26 2025 GMT
        Subject: CN=99fa6a72-1692-46b5-a90d-a667731a4688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:e6:ab:ab:48:5f:bb:02:a8:68:35:41:97:
                    ba:19:8e:e5:0d:c4:65:42:d1:06:21:63:ef:95:89:
                    10:97:ba:22:b2:f7:00:e7:18:be:b0:4c:c0:df:5e:
                    41:ad:5b:a8:f9:71:f9:cd:e9:22:b7:96:29:b0:7a:
                    d7:f0:8d:77:f7:37:51:7d:ba:8a:88:55:30:3e:fe:
                    e2:e0:86:46:98:96:5c:1b:60:c1:2b:2e:ea:ae:44:
                    9e:66:fc:98:9b:d9:55:b6:9e:62:5b:7a:4e:90:7f:
                    dd:12:89:c0:45:c3:4c:af:f3:1c:5b:a0:cf:38:06:
                    d1:b3:f4:ed:30:fa:2c:a7:17:79:34:80:f9:6b:d0:
                    68:5e:a6:9f:fb:19:c2:e6:a4:57:af:0b:9a:29:a2:
                    24:ea:63:99:35:23:ec:c6:db:0d:a9:ab:b5:b6:f5:
                    f7:0d:e1:d2:3e:5e:79:e8:cb:cd:79:15:96:b6:18:
                    a0:43:5e:7e:7f:e7:42:cc:43:ee:df:04:74:0d:86:
                    8d:9f:13:3f:06:21:5b:77:66:34:31:de:d1:dc:d1:
                    bf:a6:51:43:ef:9c:75:87:d9:ff:fd:c3:40:6a:d7:
                    f9:c5:10:37:dd:fc:32:48:57:49:69:31:b3:de:50:
                    1a:d1:2e:e5:86:f8:b5:e1:cc:0d:80:32:cd:09:7b:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BD:91:79:0B:24:1B:6E:A0:4C:1B:3B:A0:46:83:9B:B4:C7:D0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/424de6cc-c4fc-338d-9f08-63701c0e8fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:6e:0c:bb:e5:7f:50:21:aa:77:6b:80:eb:e0:08:ce:24:c2:
         1e:86:e9:4f:2b:b9:b2:88:02:a1:d0:ce:bc:11:81:ff:04:55:
         af:a2:27:4f:38:f6:63:c5:41:80:76:eb:28:5b:ac:eb:f1:1f:
         39:e4:95:7e:41:2f:e7:75:ae:e9:cc:58:68:44:41:e7:df:ba:
         70:3b:b8:e7:55:ff:a2:38:97:70:80:fb:c1:af:99:ca:a6:50:
         0f:fb:a0:f5:51:08:23:56:72:9c:2e:ae:f6:3b:ba:04:4f:09:
         9a:22:01:f0:22:86:e2:7a:cd:96:7b:d8:4f:b1:64:49:d6:c3:
         39:f9:4a:19:02:83:72:25:bd:c3:6c:ef:9f:aa:c9:4e:d9:29:
         fe:4f:33:1f:18:7a:c0:98:90:6a:76:6e:4b:7e:eb:c2:a7:91:
         5b:75:c0:5c:5e:02:f1:88:ed:b7:c6:36:2d:3d:81:2d:7f:da:
         98:4d:73:46:f4:35:5c:47:2c:8f:4d:8d:71:e7:6e:81:59:ee:
         2d:b4:91:cb:dc:6b:20:30:57:ca:bf:50:fa:4e:fe:33:60:b2:
         92:5d:99:49:0e:e4:6c:ed:91:2b:7d:77:bf:05:45:8a:f4:a4:
         ec:0f:e2:47:e0:11:12:03:7f:a1:99:41:86:e1:36:61:71:6a:
         3a:0f:99:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----