Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1a4602-a5c2-30e6-9767-5f99215e8207.roa
File:                     ee1a4602-a5c2-30e6-9767-5f99215e8207.roa (raw, json)
Hash identifier:          BkD/0+VesjKO1NioU0ZrnLUmIQ4DeGDvCEqetj5QnBw=
Subject key identifier:   71:9A:25:FA:58:93:8F:A5:AD:6A:F6:AC:D6:06:2A:3F:92:A1:39:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F8550BF15F506C2CAA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1a4602-a5c2-30e6-9767-5f99215e8207.roa
Signing time:             Thu 19 Dec 2024 13:45:10 +0000
ROA not before:           Thu 19 Dec 2024 13:45:10 +0000
ROA not after:            Wed 19 Mar 2025 12:45:10 +0000
asID:                     397195
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f8:55:0b:f1:5f:50:6c:2c:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:10 2024 GMT
            Not After : Mar 19 12:45:10 2025 GMT
        Subject: CN=fe25875a-5068-4383-ba21-d5d8257eafe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:64:c8:c9:ad:e5:a4:9f:b4:74:91:a4:fa:d9:
                    61:08:5b:5f:4a:13:2a:3e:4f:bb:8b:28:ef:52:20:
                    92:7f:42:93:51:29:ec:eb:1e:85:78:6e:3a:79:f2:
                    b5:8f:69:79:cc:80:8f:b2:4d:25:de:ed:a7:b0:6a:
                    fc:03:d4:e9:40:aa:e0:66:ff:4e:d9:85:cb:a9:e6:
                    21:5e:e9:f8:72:65:7a:08:69:4a:05:1d:64:a9:72:
                    7d:6c:01:a7:df:98:47:4f:21:34:6e:03:7b:26:11:
                    3a:fa:99:9e:57:da:6c:04:4d:87:36:d8:47:30:56:
                    cb:2b:b6:16:a2:ae:cf:7f:fa:21:34:9c:93:58:0f:
                    62:df:5b:46:18:35:03:c8:f1:5a:e8:6a:e5:5d:b9:
                    2f:2f:09:6d:39:3a:73:21:76:2d:75:83:56:58:68:
                    ea:a8:3b:db:b5:f5:69:f8:96:bb:7a:55:4c:f0:66:
                    80:d2:cd:0f:b4:8c:e3:fd:62:fe:70:57:a3:68:a6:
                    c8:c5:a1:0e:6c:46:07:d2:ee:ba:90:01:c7:22:fd:
                    70:9c:d3:5d:6e:5b:e7:91:3f:56:17:f9:69:4d:b4:
                    ba:f7:c2:4d:5c:6c:ec:fd:a0:ca:67:63:dd:19:01:
                    56:70:ff:34:cf:47:b1:b1:d5:bd:af:d3:61:71:83:
                    b7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9A:25:FA:58:93:8F:A5:AD:6A:F6:AC:D6:06:2A:3F:92:A1:39:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee1a4602-a5c2-30e6-9767-5f99215e8207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3d:fd:7d:92:64:58:af:ba:79:dc:31:f0:38:a1:ab:30:cc:
         7b:ce:8b:4a:bd:08:f1:09:0e:39:df:67:7e:31:97:c0:9b:31:
         42:87:6a:0f:74:10:8e:28:65:7a:03:7a:b3:9f:39:44:f7:2e:
         80:0d:4f:46:92:9a:45:5d:e5:23:26:67:2b:6f:10:b4:12:47:
         3f:21:c5:d3:42:59:8d:ef:62:c4:38:aa:9c:c7:9f:21:77:29:
         a1:92:6d:bd:d9:28:9d:ee:60:f7:11:c6:34:a8:63:a0:89:8c:
         1c:d5:3a:94:17:eb:53:e0:6e:c0:64:ad:24:40:bc:cc:3d:35:
         ec:35:7d:50:25:d1:7c:a2:b1:26:5e:c2:87:17:f6:4c:0d:9f:
         03:5a:13:75:cc:a2:e9:da:28:89:f3:85:cf:af:e9:c4:28:77:
         c4:b8:d6:f9:f2:2f:46:1e:c7:e4:df:83:a0:14:b9:be:28:f2:
         33:a5:57:eb:e2:dd:2c:73:86:9c:ae:8f:5b:65:98:e2:aa:a5:
         b1:5e:06:bb:25:37:cc:e0:f3:5f:f1:0d:8c:83:5d:b1:fb:96:
         44:a1:71:44:ed:52:6a:1a:59:f1:85:8e:21:a8:35:e6:a4:51:
         f2:e0:e0:ca:35:fd:44:59:f0:ed:40:45:46:b3:fa:c1:5e:c4:
         52:f5:3c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----