Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a3c9ccc-7437-31a5-8351-669d6f04b3b3.roa
File:                     6a3c9ccc-7437-31a5-8351-669d6f04b3b3.roa (raw, json)
Hash identifier:          /fByefAYqN8ava6XLfsVD1ymHCpqh5uNalvNs2C8qc4=
Subject key identifier:   A2:21:AB:E6:51:AC:79:EF:33:39:6E:A6:6B:86:6E:8A:96:55:9F:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485E35A70607DAADAE8E24B680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a3c9ccc-7437-31a5-8351-669d6f04b3b3.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     396605
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:a7:06:07:da:ad:ae:8e:24:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=112b938f-fd8d-47a3-8636-8767e9290af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:62:84:b4:58:c5:8c:99:f9:00:09:e1:14:19:
                    c1:66:21:ac:cd:a7:40:bc:f4:a2:8c:9e:c0:6b:13:
                    66:1e:13:27:ec:5c:92:54:a6:0f:2e:93:06:08:5b:
                    fa:fb:02:8f:4d:17:a2:6e:de:23:12:e3:10:b1:30:
                    99:87:48:3d:7d:71:37:15:82:c9:81:7e:c6:a4:52:
                    7b:12:b4:8f:e3:75:b7:cd:be:4b:7a:b2:8e:87:ed:
                    2e:68:bf:3d:ea:24:75:b1:e6:71:db:03:c1:3c:f2:
                    58:24:26:fb:3a:d5:af:30:f1:3f:ed:1a:93:7e:84:
                    e3:73:4b:b1:2e:26:ed:31:6b:33:55:18:ef:23:57:
                    a2:16:f6:d3:c1:1d:21:e3:60:83:ec:d2:11:69:99:
                    5e:a2:c8:6b:4b:ec:d0:3b:f8:3b:a2:5d:13:29:6a:
                    96:e2:07:5d:bd:55:56:8d:f2:c9:90:a3:14:20:3f:
                    61:25:7b:16:35:d4:5c:f3:b4:ce:9c:13:36:8b:19:
                    0e:a3:00:0a:d7:4c:30:b3:88:b8:18:dc:a7:03:c1:
                    1b:ab:03:29:8c:36:d0:f2:b0:2f:5e:34:89:04:34:
                    7d:f9:70:fb:19:8e:f7:7f:4c:bb:41:ed:96:5d:89:
                    23:ae:cd:e0:52:46:aa:e7:08:f6:1c:c4:7d:36:0c:
                    5d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:21:AB:E6:51:AC:79:EF:33:39:6E:A6:6B:86:6E:8A:96:55:9F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a3c9ccc-7437-31a5-8351-669d6f04b3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:6d:40:81:1a:9d:55:3c:dd:70:fa:61:37:e9:6b:6b:2a:
         5f:55:be:12:57:1a:5d:1e:fd:9d:97:c3:2e:2d:57:b8:20:df:
         16:14:a7:6f:9a:1b:84:f6:86:d7:65:fc:de:e9:14:29:e1:21:
         ce:4f:da:aa:02:c4:70:09:f9:c0:bf:f1:03:e2:ee:45:7a:2e:
         f9:7f:92:0d:d3:9d:86:25:e3:b1:e0:d4:2c:73:7f:92:e2:b6:
         1f:d1:95:89:44:92:ee:34:25:26:a1:66:6f:04:dd:8a:1e:30:
         84:39:14:b8:73:f7:1d:0e:36:9c:75:3d:0c:34:5d:f5:19:62:
         17:73:29:b9:13:f2:62:ce:91:f3:3b:37:44:c4:fa:c2:11:93:
         5c:e0:48:9a:2b:70:83:39:e1:cf:81:d8:10:33:b0:f5:a2:1d:
         35:d7:70:b3:e2:7b:e8:91:f7:45:2c:50:c6:40:89:fe:09:be:
         7c:62:e5:fe:b4:83:92:46:52:4f:07:47:41:89:05:7d:ab:a8:
         7f:02:3f:cc:11:c7:0c:48:a2:34:4f:66:04:dc:aa:11:61:de:
         52:48:b8:cc:92:06:0d:70:c4:1d:fe:fc:5a:54:1d:68:09:66:
         9b:2a:33:29:15:7f:58:95:8c:4d:e6:da:ad:5b:4a:db:49:ee:
         4f:e7:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----