Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa
File:                     f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa (raw, json)
Hash identifier:          oX03gyCGBcPaQU+JAqCxa15msrRXSpnaz0gb2+vyip8=
Subject key identifier:   23:1F:25:90:50:BE:66:35:C2:21:A1:AA:DC:18:E7:D2:87:24:A4:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424309747D45A5E09281A180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa
Signing time:             Thu 19 Dec 2024 13:45:19 +0000
ROA not before:           Thu 19 Dec 2024 13:45:19 +0000
ROA not after:            Wed 19 Mar 2025 12:45:19 +0000
asID:                     396614
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:09:74:7d:45:a5:e0:92:81:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:19 2024 GMT
            Not After : Mar 19 12:45:19 2025 GMT
        Subject: CN=d93da413-0a6e-46ef-a684-6a6ed771ad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fe:55:39:c8:0a:28:22:5b:78:67:a2:4c:38:
                    fa:5a:09:63:26:6d:06:16:73:1f:5e:2b:25:6a:fa:
                    18:62:6a:c2:34:a2:7e:bd:65:96:1a:da:16:5b:dc:
                    f7:6a:68:87:5b:dd:b8:01:f4:ce:87:ba:f5:2d:05:
                    ac:9f:ad:d2:61:5d:b7:1e:31:a2:58:3c:de:35:ba:
                    9e:d2:ac:f4:79:be:08:af:80:5b:b2:56:42:23:4d:
                    51:8b:8d:00:5d:3c:a9:ad:b2:d8:74:bc:0c:ce:41:
                    54:1e:82:d7:4f:1c:5d:85:38:f0:37:c2:03:41:e0:
                    9b:ca:a3:cc:20:ad:e6:14:45:e4:ac:4c:ff:01:a4:
                    98:92:74:27:94:47:ae:3f:d6:69:9b:10:0f:ae:81:
                    59:33:82:1f:0a:c5:29:5d:db:0c:d6:2f:0e:49:63:
                    9b:d5:7a:d4:66:a8:62:d5:82:93:15:43:22:27:f0:
                    12:e6:67:99:92:b2:a0:47:9c:26:21:d9:91:a6:74:
                    43:b2:a1:3c:2e:e1:a9:d5:e9:22:7e:94:33:70:ee:
                    82:a7:ed:0c:bb:58:47:8f:c0:92:d7:dc:85:ce:63:
                    8d:dd:05:0f:09:e3:da:35:c3:21:f3:f3:b8:60:65:
                    f4:b2:6a:19:2b:61:6c:63:10:0f:5e:df:75:37:14:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:25:90:50:BE:66:35:C2:21:A1:AA:DC:18:E7:D2:87:24:A4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9ecd028-b40b-3070-94cc-ce9f94f613ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e8:3b:e4:db:0f:38:d0:43:9e:3b:e8:99:d7:41:a9:b9:4b:
         a9:3f:fa:5e:ec:4e:62:fe:3d:7f:2b:d6:08:9c:e6:fc:53:05:
         96:74:9e:1e:69:e2:90:06:eb:ed:18:c4:fa:88:90:7b:13:43:
         34:0d:0c:e0:68:1e:51:e4:bc:2d:ec:f7:69:35:d8:2f:81:c8:
         ed:61:1b:37:66:5a:26:8f:ec:0b:12:63:f1:2f:8d:df:4c:f3:
         df:3d:5b:33:52:c3:de:dd:a7:5d:b6:61:80:78:95:67:90:4e:
         ca:63:44:3c:41:a8:59:52:a6:22:42:d5:ca:3d:fc:3e:62:64:
         1c:2a:fb:f2:e8:6f:e1:af:83:1b:3c:78:d1:95:92:9b:24:97:
         36:0c:71:15:35:66:9b:de:a6:b3:6b:bf:65:ef:7f:51:7c:95:
         32:93:cc:18:da:51:fb:bd:83:40:8d:cb:15:8c:fc:dc:d4:7f:
         76:e2:83:6b:a8:71:32:cb:ef:d2:3d:61:58:7e:73:de:a4:0a:
         85:85:23:12:91:c7:4c:c2:ad:c6:bc:c2:df:ad:b5:02:64:04:
         51:d6:f4:5d:f7:20:e3:6c:d4:31:5a:f4:1e:dc:96:0c:f8:13:
         1e:17:6c:63:39:d9:79:00:59:db:20:9d:9c:bd:fa:4a:2d:a9:
         36:92:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----