Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea46789d-c22e-383a-8b94-687ea000ed88.roa
File:                     ea46789d-c22e-383a-8b94-687ea000ed88.roa (raw, json)
Hash identifier:          UAIanu1VBONnCMffE9pUT0ImD9KMQXJjAI0CdDwrH78=
Subject key identifier:   64:AD:B0:F1:FE:D4:C2:49:60:5F:2E:9F:A8:7B:54:B5:E6:99:C7:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858482C1B938AD0D57E1CA6D9FBE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea46789d-c22e-383a-8b94-687ea000ed88.roa
Signing time:             Wed 11 Dec 2024 15:18:01 +0000
ROA not before:           Wed 11 Dec 2024 15:18:01 +0000
ROA not after:            Tue 11 Mar 2025 14:18:01 +0000
asID:                     396587
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2c:1b:93:8a:d0:d5:7e:1c:a6:d9:fb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 11 15:18:01 2024 GMT
            Not After : Mar 11 14:18:01 2025 GMT
        Subject: CN=e27d5149-eed5-4c63-82be-dca7d4b18127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:9e:fc:ba:81:d5:db:3b:a6:76:0f:b5:27:
                    1f:29:40:d6:1c:ac:5f:c0:ce:87:5b:88:81:ec:d9:
                    ca:2e:a7:83:88:5f:26:10:c7:38:2f:57:9d:ce:6f:
                    0a:57:a5:8a:0d:fa:24:80:0c:4c:93:f1:3d:09:f9:
                    f6:5a:39:8e:16:8e:2c:66:36:11:71:b6:72:22:64:
                    96:eb:01:b7:33:eb:3a:48:41:f2:a5:7a:91:09:b0:
                    0a:44:38:6d:f7:40:0c:cb:2a:47:b2:f0:e7:89:7c:
                    5c:23:82:1f:69:09:d3:e7:2b:4c:24:48:e4:a3:f6:
                    73:df:0d:65:11:4b:ab:c2:8e:94:63:5c:ac:5b:2c:
                    5c:98:a3:14:c6:d7:8e:83:dc:0b:95:dd:fc:e0:12:
                    c0:86:a8:b1:c8:a6:c7:e2:a9:43:9c:2e:b8:33:61:
                    d1:3e:17:01:f6:71:95:ef:08:cc:68:c3:de:f8:86:
                    c6:80:12:1b:d1:47:f0:05:1c:66:4f:f8:08:10:1d:
                    b0:46:d4:56:ba:7c:8a:a6:52:fa:b6:62:19:4b:2c:
                    d2:aa:1b:22:f2:47:fd:9c:c1:88:f7:fa:1b:6b:34:
                    86:d6:29:43:96:ac:59:26:22:14:77:2e:a3:45:cc:
                    29:5d:ed:c2:27:bc:25:1b:a9:79:df:07:9b:a1:ed:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AD:B0:F1:FE:D4:C2:49:60:5F:2E:9F:A8:7B:54:B5:E6:99:C7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea46789d-c22e-383a-8b94-687ea000ed88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:01:60:08:e6:89:d2:73:ed:17:d8:29:80:35:61:09:ea:86:
         2c:ad:bc:5e:aa:ea:69:10:1a:65:63:bf:a4:09:98:4a:29:4b:
         27:c2:fe:7a:47:61:57:88:e3:82:cc:9d:5e:4a:a7:51:55:11:
         dc:40:67:68:61:6f:56:5b:67:dd:ea:e3:2e:76:48:39:15:b2:
         df:83:22:18:da:9f:02:42:b0:2d:af:35:fc:f6:7a:4c:ec:e8:
         7e:d2:11:14:ec:ca:cd:5a:51:3d:de:7c:bb:4a:fa:cf:f0:a5:
         02:58:f1:a2:70:c0:6e:c6:54:ba:0d:2a:ba:68:1f:4b:05:d5:
         53:3c:6d:13:eb:77:2c:90:6d:6f:96:7e:d3:32:63:75:77:77:
         1f:b1:99:da:f8:dc:67:06:95:00:8e:2f:b4:f4:bc:25:9f:14:
         60:56:57:d0:b5:02:c4:f9:f7:e9:1d:77:7d:7b:8c:79:da:6c:
         a7:62:af:c4:6a:da:bd:54:ab:f0:c3:28:d5:c4:eb:89:1e:9b:
         2b:38:1d:e9:ec:47:4b:c7:67:bc:6b:8a:69:7f:a0:b2:d2:2c:
         d4:93:5d:ab:e4:7a:2e:7a:d6:fe:dd:16:c3:71:dd:17:94:cd:
         40:74:63:4c:7f:65:dc:41:cf:0d:45:f6:94:9e:17:41:88:72:
         a6:e4:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----