Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5679ddda-8e0b-33e4-9e35-dbce9364d83d.roa
File:                     5679ddda-8e0b-33e4-9e35-dbce9364d83d.roa (raw, json)
Hash identifier:          M+AqboBKq2g3TxPanFAd7gR7SqeZXKG2oxG64DcfLQs=
Subject key identifier:   1E:C6:F9:84:13:17:11:F2:E8:E2:30:8E:97:13:DA:0E:F2:59:E6:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484243065B5DC899B9AF794100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5679ddda-8e0b-33e4-9e35-dbce9364d83d.roa
Signing time:             Thu 19 Dec 2024 13:45:17 +0000
ROA not before:           Thu 19 Dec 2024 13:45:17 +0000
ROA not after:            Wed 19 Mar 2025 12:45:17 +0000
asID:                     396599
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:06:5b:5d:c8:99:b9:af:79:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:17 2024 GMT
            Not After : Mar 19 12:45:17 2025 GMT
        Subject: CN=b2b43d0d-8bad-49c8-b841-7ae6fb920b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:90:38:bc:20:34:f7:26:84:cc:7d:ed:d7:
                    d5:d7:ea:fa:b3:90:55:2b:cb:f7:b9:3a:43:e6:57:
                    08:1f:df:3b:d4:ff:b6:bd:d6:fb:d9:f9:ee:be:7e:
                    b9:09:23:4c:24:e6:9d:61:84:f9:fd:2b:be:a0:44:
                    1d:00:01:9f:7f:fc:18:c4:19:eb:9d:4b:63:c7:9b:
                    10:11:ae:39:7b:26:6f:4c:51:8a:88:0e:6c:fc:3d:
                    dd:ba:2e:0e:f4:b2:10:d0:99:42:b4:8b:16:05:b3:
                    f6:1d:79:2c:00:82:b9:a7:f5:8e:b7:97:5b:3d:fe:
                    31:f2:89:6b:df:00:47:cc:96:cf:44:9e:32:ee:6d:
                    fb:4d:70:05:d8:c8:de:78:61:81:b0:87:1f:73:81:
                    e6:61:44:e3:54:45:3b:0b:63:de:ed:9a:f0:56:c3:
                    c4:c2:b1:fc:c0:30:4e:a7:ba:8e:bc:56:61:d8:6f:
                    f7:fc:78:54:80:04:4f:4d:ba:76:70:e6:04:95:cb:
                    51:06:d5:8a:e0:dd:08:33:b6:e5:1b:6a:49:66:dc:
                    33:8d:24:1e:be:6f:64:3e:0f:a6:78:9b:bf:ae:7f:
                    c2:c3:95:50:4d:b5:b3:a2:65:43:f4:5f:00:e2:60:
                    ae:be:c4:45:b3:fa:a5:80:fe:ae:06:5b:7f:b6:43:
                    42:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:F9:84:13:17:11:F2:E8:E2:30:8E:97:13:DA:0E:F2:59:E6:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5679ddda-8e0b-33e4-9e35-dbce9364d83d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:46:eb:6b:b3:a5:a7:52:14:a7:8b:89:0f:f8:00:39:ab:
         d4:3d:ee:21:b1:f8:ab:e0:ea:eb:8d:18:c8:09:84:c2:85:ee:
         21:a1:88:b3:42:20:c6:ee:15:bc:69:4e:fe:ee:a1:e4:3a:16:
         4b:00:e3:a2:78:6b:71:0b:80:ce:32:c4:c3:f0:7f:a1:9c:9e:
         4e:11:61:dd:91:2d:87:d4:7a:94:77:57:3d:74:a6:7f:e0:94:
         22:dc:05:71:cf:0e:3a:22:b0:93:fc:cf:73:2a:7d:6b:07:dc:
         78:e4:de:eb:86:a5:77:c4:48:a1:80:d7:e3:08:25:03:34:df:
         08:ed:4b:4a:57:7f:4e:e4:7a:e6:cc:95:82:e8:86:16:43:7e:
         52:e1:1e:69:12:fb:54:e7:f2:20:e7:ba:ce:80:a5:f8:6a:5c:
         c1:fc:73:8f:99:32:e4:2b:c5:d6:57:e2:30:d7:b8:2f:63:28:
         7d:32:e4:03:6e:78:d5:6e:5c:cb:a5:72:93:f2:91:a7:4b:d5:
         57:22:76:4a:49:ec:76:c1:41:1a:1d:ff:0e:a5:28:2e:c9:51:
         8d:a6:5e:61:c9:9b:5e:52:be:be:10:60:3b:6f:29:df:9c:f8:
         0f:be:22:ee:3d:e4:3e:b1:71:71:49:9d:9d:c9:c2:bf:d7:87:
         6c:38:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----