Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67a0f284-292a-3669-922c-4b49c4d3fc13.roa
File:                     67a0f284-292a-3669-922c-4b49c4d3fc13.roa (raw, json)
Hash identifier:          2SA5q/6za+phuswOAM+RX3ko+X07KVel2kVECjC9FzM=
Subject key identifier:   A9:52:48:D4:70:33:F3:B1:D4:C9:DD:B9:32:30:8F:BD:CE:2C:17:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1BAA722C01ECFBD5FF1060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67a0f284-292a-3669-922c-4b49c4d3fc13.roa
Signing time:             Wed 11 Dec 2024 15:18:12 +0000
ROA not before:           Wed 11 Dec 2024 15:18:12 +0000
ROA not after:            Tue 11 Mar 2025 14:18:12 +0000
asID:                     397211
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:aa:72:2c:01:ec:fb:d5:ff:10:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:12 2024 GMT
            Not After : Mar 11 14:18:12 2025 GMT
        Subject: CN=6298a071-851f-4745-9192-8141e2d6097f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:92:8d:05:89:e9:67:b0:32:3f:26:c5:9d:
                    0f:45:00:c3:e3:f5:ad:60:f2:19:ea:1f:aa:ce:3f:
                    d2:de:c7:69:62:00:c3:4e:84:ea:e8:88:4c:87:23:
                    19:05:af:d6:f4:c1:1a:c5:70:03:b2:7a:3c:14:39:
                    6c:e8:88:4d:da:f1:32:84:31:4a:59:d7:57:0b:43:
                    08:c0:34:a0:cf:94:a6:ac:ad:a8:c9:d4:52:50:21:
                    a5:e9:63:43:8a:97:96:8d:55:ca:c8:78:2f:b7:46:
                    1b:7e:fb:1e:e3:fd:86:e1:ad:49:47:76:32:1f:ad:
                    c7:95:d3:90:07:20:8d:95:e0:6c:2a:d2:86:8f:50:
                    a4:25:1b:ba:61:48:9f:73:6e:59:ff:b4:d1:45:cc:
                    3e:7f:7f:10:4c:0f:65:14:47:46:7a:55:42:99:d9:
                    bc:61:02:93:b6:7e:dd:b8:1a:46:2d:76:95:1e:54:
                    1b:33:22:3a:7c:74:28:62:83:ab:c0:1b:83:2c:cb:
                    57:71:c8:a4:ae:d5:76:a2:a0:f7:22:c3:09:34:14:
                    b2:e2:fa:19:02:2b:2e:b8:24:ce:dd:be:6b:32:6e:
                    a8:de:9b:d6:86:d2:72:14:4e:10:80:86:23:26:7c:
                    4f:3b:6a:58:20:aa:fb:85:46:b9:e1:fa:70:c4:7c:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:52:48:D4:70:33:F3:B1:D4:C9:DD:B9:32:30:8F:BD:CE:2C:17:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67a0f284-292a-3669-922c-4b49c4d3fc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b4:fc:b5:a4:fa:22:8a:7c:ad:36:12:d3:4b:ae:e8:37:1d:
         ab:62:fa:11:88:ec:1b:96:38:d4:e9:df:08:0e:2d:cf:cc:6c:
         c3:97:a8:ad:c7:81:af:cf:26:6e:12:72:9f:48:a0:f8:e4:7a:
         ae:b5:ac:b7:62:05:94:3f:96:07:41:ad:9d:e7:f6:f8:c1:0e:
         eb:9b:51:18:66:02:f2:0f:44:60:2a:93:83:e2:1f:a6:af:42:
         f5:be:4b:de:0a:70:89:de:78:c2:76:97:87:3e:81:b5:3e:d3:
         10:e4:31:95:85:bc:73:5d:f7:cd:41:4b:c4:11:e0:5e:13:45:
         d3:49:c6:d9:c7:d8:36:e2:64:3b:8f:3b:75:17:de:93:09:7d:
         57:bc:d9:fb:a3:f7:93:63:53:d7:ba:e6:0f:d6:af:6b:f9:3c:
         56:cd:ee:6e:c0:6d:32:5f:c0:18:d1:e4:23:1a:58:8a:31:13:
         2a:97:43:33:04:4c:93:4c:31:79:24:5d:7c:98:4d:32:4e:02:
         41:59:08:db:ad:b7:35:d9:f5:2d:68:5c:04:98:3d:cc:9a:99:
         ae:8d:6f:4b:39:09:c9:9c:7e:86:5a:37:fe:a8:2f:17:f1:d0:
         99:7a:2b:ba:d9:53:eb:d5:da:da:f4:eb:80:45:d0:ca:3f:9e:
         88:c9:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----