Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d0ef8f-0fdb-34e8-ae7c-7215d35e3e0f.roa
File:                     d1d0ef8f-0fdb-34e8-ae7c-7215d35e3e0f.roa (raw, json)
Hash identifier:          47H5dBp70j3HPFsDb6777eB9SlRasP6CenfK076HbKI=
Subject key identifier:   9F:5A:09:16:03:DE:35:C2:CE:FF:58:2C:F1:8C:D1:A9:B0:E2:39:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B37978449CCE17ED1F300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d0ef8f-0fdb-34e8-ae7c-7215d35e3e0f.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     396576
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:37:97:84:49:cc:e1:7e:d1:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=2822dccf-e74e-4435-ac26-5584b8c73f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:eb:0d:5d:38:ef:56:64:e7:b3:3d:97:36:07:
                    10:24:4e:ca:57:6f:b5:f0:b9:bd:6f:37:12:b8:d8:
                    14:07:98:1c:56:52:5c:cf:3b:f2:92:47:b0:08:c0:
                    82:6e:e1:24:3c:36:ed:40:2e:cd:3d:21:66:e5:7f:
                    fa:fc:6b:49:f9:c7:da:c6:03:3a:3e:10:c5:ce:93:
                    bd:3f:21:aa:86:35:8e:8a:06:6d:71:6d:20:46:f1:
                    cb:c2:6f:46:da:73:d0:4f:71:ab:c4:52:a3:41:99:
                    cd:c0:70:82:20:2b:f5:66:b4:36:0e:dc:d6:b7:e0:
                    13:5d:72:e0:73:1f:28:3c:40:db:a9:6e:8f:cd:c8:
                    ef:b5:2c:3e:80:ca:16:ad:03:32:1f:8b:b8:c8:f0:
                    85:b1:7a:c0:9a:9b:45:db:d8:40:88:11:38:82:ad:
                    99:87:14:6d:16:fd:18:90:fc:a6:12:e8:d5:3f:14:
                    b1:d9:bf:64:3a:7f:df:53:9f:73:79:80:b2:d4:8e:
                    5f:18:a9:88:6b:1b:2d:be:e8:b5:a1:c4:c3:4d:a3:
                    ff:16:f0:01:28:32:2e:86:76:7c:0e:ba:ac:37:84:
                    02:1f:88:dd:2f:e4:8c:49:59:34:b1:55:a1:d4:65:
                    e4:a3:f8:31:c3:da:62:04:2c:48:91:c2:fd:8f:52:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5A:09:16:03:DE:35:C2:CE:FF:58:2C:F1:8C:D1:A9:B0:E2:39:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d1d0ef8f-0fdb-34e8-ae7c-7215d35e3e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c7:92:37:50:39:78:7b:a5:06:a1:cf:ef:c9:3a:1d:14:95:
         0e:e7:68:41:55:8f:14:be:54:eb:50:85:2a:d5:50:ca:32:1b:
         a0:b9:f2:f5:35:d5:c7:f7:8d:02:65:c2:17:d4:fa:7e:e0:92:
         f4:e4:d7:ee:60:70:f2:fa:7f:17:c5:93:da:12:b2:1e:9a:59:
         40:79:39:3b:02:df:9f:46:55:83:f8:cf:1b:b9:e7:5a:fd:61:
         33:f4:9c:27:dd:1d:23:26:59:d8:70:ea:28:a3:04:8b:13:f8:
         9b:f5:99:26:f2:c5:ef:cb:5f:5f:2c:b7:0e:ee:83:3a:84:d0:
         90:37:e8:a5:28:29:58:3f:14:1f:ff:42:39:46:66:2d:89:57:
         2c:ad:8d:74:66:eb:73:a4:e4:19:47:cc:fa:ba:ef:e8:4b:24:
         73:4e:43:60:99:ba:c0:d0:3d:06:c0:0f:4a:9d:7e:1e:b8:a6:
         69:6c:c0:bf:b2:ec:30:38:5c:c5:7f:94:2a:e4:97:87:56:66:
         a6:7c:ca:de:a9:b0:ff:12:17:89:19:70:6e:32:bf:65:1b:a3:
         cb:e3:dc:31:e9:7a:dc:37:ca:3c:69:02:b2:d4:21:d2:82:85:
         a0:b7:d7:6e:e7:ea:3f:13:da:37:61:72:80:1b:80:79:11:94:
         26:8d:08:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----