Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d50de1e-8087-354a-8fb8-1c21657411e2.roa
File:                     9d50de1e-8087-354a-8fb8-1c21657411e2.roa (raw, json)
Hash identifier:          25JsPoqRo3TsdZaftJLNzk56nG5/RAA8vy39pWBiCf0=
Subject key identifier:   7C:DB:38:69:42:AA:19:0D:01:DC:DA:86:5C:A3:3C:AC:89:FC:EF:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424332BF740553C7C0E2A3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d50de1e-8087-354a-8fb8-1c21657411e2.roa
Signing time:             Thu 19 Dec 2024 13:45:38 +0000
ROA not before:           Thu 19 Dec 2024 13:45:38 +0000
ROA not after:            Wed 19 Mar 2025 12:45:38 +0000
asID:                     396579
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:32:bf:74:05:53:c7:c0:e2:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:38 2024 GMT
            Not After : Mar 19 12:45:38 2025 GMT
        Subject: CN=107e9d55-5300-4bfa-af2a-0c09a418cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d0:47:45:e8:c2:93:85:9e:9e:43:44:c6:00:
                    3a:0d:19:93:d8:b2:91:d9:10:99:8c:c1:2b:f3:8e:
                    b2:46:4a:24:86:27:7f:01:d7:f1:a0:66:c9:2c:68:
                    72:d8:af:a2:84:97:61:ae:86:c8:a6:89:b0:ba:ce:
                    f9:82:b8:78:de:af:f0:d0:ce:d0:59:ca:3a:ec:1e:
                    91:12:51:79:ae:b6:1b:0d:1e:a6:f7:3b:ba:ae:19:
                    07:0c:13:42:2a:87:65:ed:b4:65:ac:b8:01:6a:ee:
                    36:67:8d:bb:df:a0:15:6c:46:69:be:f3:94:a5:bf:
                    86:3d:a4:45:1b:c3:98:95:82:bf:fa:dd:86:73:7d:
                    15:86:37:fa:f1:60:47:62:5e:b7:4d:4e:12:af:da:
                    d7:7e:fc:5d:d9:91:3b:b5:34:4b:c8:88:1d:e8:e8:
                    3e:a9:87:e1:94:a6:6d:d4:5c:d9:f3:79:02:4e:81:
                    4a:ed:46:00:14:d5:05:df:1c:2a:61:45:45:69:cf:
                    63:81:fb:0c:a1:1e:8d:c3:74:e1:a2:d6:5a:e2:ff:
                    cb:28:3b:74:04:50:69:59:38:df:3d:2c:39:6b:a9:
                    8f:9e:e8:18:95:22:2b:d9:ad:f6:88:84:eb:58:79:
                    ae:f2:50:83:91:73:74:24:74:05:c5:5e:bb:66:63:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DB:38:69:42:AA:19:0D:01:DC:DA:86:5C:A3:3C:AC:89:FC:EF:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d50de1e-8087-354a-8fb8-1c21657411e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:27:0a:d6:ba:b2:6e:99:f0:e3:76:59:f5:3f:5b:47:1c:ac:
         14:e6:5d:ff:2c:e8:cf:be:8c:8b:03:dc:f9:9a:47:af:04:d9:
         02:9c:5e:1f:3d:dd:8e:55:9b:d8:ec:2d:33:6f:8b:66:12:4e:
         71:f0:08:16:a3:9f:e0:73:5a:f4:80:3e:32:ae:7c:12:0c:7c:
         0a:68:a8:6d:e7:3e:ad:59:5a:49:26:62:ed:bc:b1:91:b5:73:
         a1:eb:55:7b:44:22:58:b4:37:8d:97:cb:3f:e8:c4:bd:81:58:
         b2:88:21:91:26:20:39:1f:46:ac:bf:59:24:63:cc:61:58:3f:
         71:12:b4:c6:da:64:92:a6:3f:bd:d7:e8:fb:f9:98:97:23:ee:
         25:b2:0a:cd:97:b6:2c:f9:9d:df:4b:0c:8f:f4:1d:a8:6e:61:
         d2:a7:ed:1d:1d:b7:b4:28:d4:0a:cb:73:a0:51:62:8a:da:d3:
         bb:9c:f1:5b:b1:45:8a:f5:28:aa:a3:d7:0d:95:c4:86:ae:22:
         50:5a:e3:12:e3:66:03:44:03:ca:7f:59:1c:88:d0:19:6e:5e:
         e6:dd:69:9e:2f:62:2a:26:00:7f:51:a9:57:1f:55:f6:3d:87:
         d4:e2:08:e8:64:85:ee:a2:0a:72:8f:ab:23:46:e4:86:9a:67:
         11:ed:61:9d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQzK/dAVTx8Dio8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUzOFoXDTI1MDMxOTEyNDUzOFowLzEtMCsGA1UEAxMk
MTA3ZTlkNTUtNTMwMC00YmZhLWFmMmEtMGMwOWE0MThjZDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtBHRejCk4WenkNExgA6DRmT2LKR2RCZjMEr
846yRkokhid/AdfxoGbJLGhy2K+ihJdhrobIpomwus75grh43q/w0M7QWco67B6R
ElF5rrYbDR6m9zu6rhkHDBNCKodl7bRlrLgBau42Z42736AVbEZpvvOUpb+GPaRF
G8OYlYK/+t2Gc30Vhjf68WBHYl63TU4Sr9rXfvxd2ZE7tTRLyIgd6Og+qYfhlKZt
1FzZ83kCToFK7UYAFNUF3xwqYUVFac9jgfsMoR6Nw3ThotZa4v/LKDt0BFBpWTjf
PSw5a6mPnugYlSIr2a32iITrWHmu8lCDkXN0JHQFxV67ZmMhKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHzbOGlCqhkNAdzahlyjPKyJ/O98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQ1MGRlMWUtODA4Ny0z
NTRhLThmYjgtMWMyMTY1NzQxMWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBlJwrWurJumfDjdln1P1tHHKwU5l3/LOjPvoyLA9z5mkevBNkCnF4f
Pd2OVZvY7C0zb4tmEk5x8AgWo5/gc1r0gD4yrnwSDHwKaKht5z6tWVpJJmLtvLGR
tXOh61V7RCJYtDeNl8s/6MS9gViyiCGRJiA5H0asv1kkY8xhWD9xErTG2mSSpj+9
1+j7+ZiXI+4lsgrNl7Ys+Z3fSwyP9B2obmHSp+0dHbe0KNQKy3OgUWKK2tO7nPFb
sUWK9Siqo9cNlcSGriJQWuMS42YDRAPKf1kciNAZbl7m3WmeL2IqJgB/UalXH1X2
PYfU4gjoZIXuogpyj6sjRuSGmmcR7WGd
-----END CERTIFICATE-----