Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
File:                     8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa (raw, json)
Hash identifier:          dZ94pezPpKZfx5a11aT4sB9UDOF/SDW+QzM5nJGCfuk=
Subject key identifier:   2B:FA:E4:FE:85:E9:14:31:E3:8B:D9:C3:9D:C9:72:7D:CF:E5:FC:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484D75A0A82F3D23F56878E300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     396611
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:a0:a8:2f:3d:23:f5:68:78:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=b2599fc7-bacf-4a28-b37e-2b660feb1924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:82:68:bc:6e:b0:e1:73:52:7e:2d:3f:76:
                    50:eb:e0:5e:35:1f:fd:20:0c:65:b3:e5:51:bb:b7:
                    7b:df:e7:ac:e5:9e:da:e1:88:2f:96:52:66:39:2c:
                    c7:4c:f9:58:2e:21:91:7b:7d:94:a3:05:23:c0:8a:
                    45:fa:34:ac:ea:3c:cb:f4:05:7a:7c:eb:07:75:50:
                    39:cb:11:07:41:df:16:4c:36:65:66:5c:e8:05:3c:
                    b3:58:7e:d8:ce:98:a7:e7:dc:3d:52:7c:26:64:66:
                    47:64:36:a1:2b:fd:1f:0c:8d:69:ef:6d:6e:2b:6b:
                    2f:0e:c9:6d:51:f5:43:79:1b:45:c0:2d:d7:62:ed:
                    e0:2e:7b:d0:a0:00:d2:40:ee:0a:fd:74:5e:b8:42:
                    29:06:0a:04:f0:54:40:a5:be:a2:eb:c5:bd:8b:33:
                    e5:36:06:fe:12:a2:66:f1:ad:07:30:59:39:73:04:
                    11:37:e3:fc:62:54:62:c7:2c:a9:38:6e:b9:b9:72:
                    98:d9:cf:98:25:88:3a:ad:55:00:a3:60:b0:dc:7c:
                    4c:58:0a:5e:38:bf:53:81:d1:8b:9f:c7:19:5e:1a:
                    44:e8:e1:26:e3:46:04:7b:d1:c8:92:72:cb:57:ad:
                    44:be:b4:d8:58:bb:52:74:11:9d:69:2e:70:f0:cd:
                    0a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FA:E4:FE:85:E9:14:31:E3:8B:D9:C3:9D:C9:72:7D:CF:E5:FC:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d24d7a2-79b1-3dc0-8081-d0c98b1afbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:c8:d0:1e:2f:3e:cc:75:3e:5c:a6:7a:a2:d5:03:a8:0e:16:
         b9:f6:e4:21:50:30:77:ee:72:95:6b:97:38:4c:96:84:ff:72:
         e6:5d:ed:80:b9:32:47:d0:25:da:75:c3:c4:df:9f:8a:f7:c5:
         27:4e:b6:33:eb:6b:64:3b:3e:ed:cf:98:6d:e1:fb:6d:75:6a:
         b6:66:69:42:8a:00:f6:be:f2:b2:e1:e4:5f:d7:f7:09:dc:6e:
         46:18:3b:37:61:51:41:06:09:65:68:22:98:eb:9e:42:38:a2:
         c9:74:8a:69:bf:a6:d7:8b:a4:c0:55:b5:ed:b3:ae:8a:f0:09:
         ba:30:08:b3:2f:13:00:29:34:3d:33:5b:0f:8a:a7:c0:f4:1d:
         9d:0c:26:c5:37:e8:8e:e0:82:9e:76:e5:64:18:a0:b5:a7:a2:
         c0:c4:52:2a:26:a9:f1:92:9a:38:0b:ea:80:3e:05:cc:98:f0:
         06:25:cf:99:bb:0f:54:7c:cd:d2:2d:92:8d:fa:f4:66:21:51:
         8e:52:74:46:1d:b4:09:51:17:1b:6a:fc:26:ec:38:28:c1:dc:
         bc:87:66:8b:6a:aa:c5:98:4c:e0:bd:6a:46:35:c3:ab:f9:18:
         69:9f:d8:9f:e1:31:73:e2:3d:0b:2c:1b:ed:1c:34:94:37:74:
         3e:aa:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----