Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c7c39a-5059-34a2-bc6d-02578c5ee998.roa
File:                     98c7c39a-5059-34a2-bc6d-02578c5ee998.roa (raw, json)
Hash identifier:          I/IqFrj7DBQIqk2JhRp8MEMvE4tGh3JNHnYbvef0BRw=
Subject key identifier:   5C:5F:F1:B6:AD:A0:DE:8C:0E:CB:E9:21:A9:47:BB:54:43:11:F5:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430F14D40A9CA8A5FD0A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c7c39a-5059-34a2-bc6d-02578c5ee998.roa
Signing time:             Thu 19 Dec 2024 13:45:21 +0000
ROA not before:           Thu 19 Dec 2024 13:45:21 +0000
ROA not after:            Wed 19 Mar 2025 12:45:21 +0000
asID:                     396578
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:0f:14:d4:0a:9c:a8:a5:fd:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:21 2024 GMT
            Not After : Mar 19 12:45:21 2025 GMT
        Subject: CN=07ee7be4-ad1d-41b3-bf3a-01f29ed8ff43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0b:9c:3d:06:ad:98:00:1c:5d:2d:42:8b:84:
                    36:92:77:6f:1b:48:de:74:69:81:74:47:65:79:87:
                    5a:a4:ac:29:8d:07:2a:62:b7:7d:81:4e:8c:b8:ea:
                    bf:ee:73:09:9a:4e:37:51:07:1e:6f:15:02:d4:a7:
                    7a:37:c7:5d:8b:53:71:84:14:ab:49:09:29:68:4d:
                    a6:71:69:42:37:f0:26:cb:81:24:1a:71:9b:62:1e:
                    b2:a8:d7:9c:85:5e:cb:2c:6f:52:62:e1:d7:7d:a8:
                    c8:9b:99:d3:b3:4b:75:3e:82:a9:52:53:12:73:9b:
                    52:90:52:95:1e:8e:fc:1d:b4:8e:46:98:dc:97:20:
                    40:1d:ba:d3:35:3b:de:62:b2:7a:a0:70:0c:f6:3d:
                    2e:da:ef:87:aa:2f:b1:f6:c6:0c:e0:d3:bd:de:2f:
                    f4:d8:02:ad:82:14:68:cf:ee:8b:9a:0a:b0:c1:7e:
                    be:e2:17:35:a8:3e:13:28:2e:31:3e:41:80:cd:b2:
                    0e:46:7c:bd:63:63:fb:33:15:4a:95:e1:fa:6f:95:
                    0b:1f:8e:20:97:dc:a7:32:da:a6:3d:36:ba:ef:8d:
                    e0:bd:f8:1e:cc:4d:c5:4c:1a:d0:b5:76:19:9a:0b:
                    95:40:03:0f:4a:f1:b2:a0:d3:49:e0:8a:e1:ae:1c:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5F:F1:B6:AD:A0:DE:8C:0E:CB:E9:21:A9:47:BB:54:43:11:F5:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c7c39a-5059-34a2-bc6d-02578c5ee998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:04:0b:4e:61:6d:68:cc:74:04:43:62:90:33:ef:1b:d0:9f:
         c1:f5:b6:20:05:b3:4d:74:e1:6a:95:1a:82:8c:06:5e:87:6c:
         8f:88:3f:ab:e7:d8:4d:df:cf:15:73:01:47:97:3c:fe:ef:85:
         f6:5e:de:80:91:06:40:8a:67:1d:dc:33:b0:2c:1b:15:7f:d2:
         f0:9c:f6:71:82:64:b3:e1:6f:68:b6:33:02:17:e4:c7:d9:ad:
         5d:43:9e:5b:b7:3c:14:cb:23:fa:1e:13:8e:9d:fa:b4:5f:34:
         9b:ed:64:4c:e6:b6:a2:42:61:28:23:9d:b2:a9:3f:63:9a:c6:
         8f:fa:68:d5:e0:34:64:33:dd:b5:98:d6:a7:a4:a8:ca:d4:7e:
         df:17:23:3c:67:e7:27:56:6a:3d:bd:75:33:f5:5f:98:f1:8e:
         6d:a2:68:45:21:fb:74:d1:9d:e0:aa:fc:01:3e:e2:dd:59:1b:
         ac:51:b3:fa:b2:f4:4b:f3:e3:ec:1e:84:f3:47:d1:d2:66:1c:
         2e:c7:8b:3f:77:a1:ce:8d:f1:3e:2e:d7:5f:b5:cd:b3:56:90:
         ea:6e:9c:a5:24:85:01:38:13:e3:ea:81:2b:07:c1:8f:a6:33:
         85:5a:ff:26:59:58:c5:c8:5a:7a:9b:97:ac:5a:47:57:0e:b6:
         cc:46:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----