Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcefe047-ce09-3be1-ac75-23398c82af41.roa
File:                     fcefe047-ce09-3be1-ac75-23398c82af41.roa (raw, json)
Hash identifier:          H3y93rm77BveuY93KPZXl7cxs1+td3T5iy3ViRf5xTU=
Subject key identifier:   71:66:B2:43:11:05:CB:DD:A4:9C:7E:16:70:FF:85:93:F2:FC:42:56
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842430587F6F5671A3D351500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcefe047-ce09-3be1-ac75-23398c82af41.roa
Signing time:             Thu 19 Dec 2024 13:45:17 +0000
ROA not before:           Thu 19 Dec 2024 13:45:17 +0000
ROA not after:            Wed 19 Mar 2025 12:45:17 +0000
asID:                     36619
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:05:87:f6:f5:67:1a:3d:35:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:17 2024 GMT
            Not After : Mar 19 12:45:17 2025 GMT
        Subject: CN=6608971e-55f3-4bcd-bfa9-73efdba26615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:aa:0c:96:62:b9:f7:09:e1:b8:7b:3f:21:
                    8a:22:eb:d8:fb:f9:bf:b6:bb:6f:16:3d:d8:29:e3:
                    89:f3:fe:04:40:c8:b6:9a:b6:14:f9:5d:1e:c0:81:
                    ec:b0:35:36:70:eb:fa:c1:fc:7e:39:f2:ac:0a:62:
                    1a:23:d9:4c:d3:3b:d9:ca:bd:d7:67:3b:f7:b4:bd:
                    46:5f:da:27:11:8f:2a:e8:0d:d7:6b:a0:1b:b0:12:
                    c8:72:0f:6d:c3:55:d3:78:6d:9b:ee:13:02:a6:0b:
                    ef:e6:3a:e7:5e:43:03:9a:dc:09:56:9f:f5:2d:81:
                    58:16:6c:67:51:02:63:54:fd:57:6a:90:dd:dc:e9:
                    3a:50:8e:f0:d6:db:0f:1f:92:5b:a9:63:6c:3c:ba:
                    0e:e5:cd:e6:58:ec:0d:85:55:73:c1:05:e4:4e:0d:
                    84:29:5a:19:f2:00:40:b7:61:7d:27:9d:5c:52:ab:
                    71:99:dc:f2:6c:ae:d3:4d:3f:3e:de:8b:75:17:56:
                    07:ef:90:2d:6a:66:59:37:3c:3e:b7:13:2e:de:ad:
                    38:88:0e:32:7b:af:55:e5:73:b5:20:48:12:ed:f3:
                    48:ea:77:c6:7c:c1:b1:18:06:79:06:64:d7:b6:11:
                    9f:4a:f4:23:bb:33:5a:4c:0a:3d:f5:4f:ef:1d:9f:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:66:B2:43:11:05:CB:DD:A4:9C:7E:16:70:FF:85:93:F2:FC:42:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fcefe047-ce09-3be1-ac75-23398c82af41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f0:d8:34:d1:98:bd:dc:a0:a7:0a:a4:c7:7b:02:b8:df:ae:
         f0:f0:65:4e:6f:3a:b4:6d:52:94:66:7b:4b:c9:b9:62:b4:14:
         87:d8:81:44:aa:69:5f:80:6f:d6:08:68:a3:f3:60:c8:1a:a8:
         a4:b4:17:28:72:29:af:00:d9:01:2c:ca:d5:b8:12:39:99:e7:
         45:95:fe:d6:67:0d:bc:bf:a0:f6:c5:b0:5d:d0:76:a2:47:bd:
         fb:10:4b:c2:e6:d6:1d:96:08:60:d5:51:27:90:39:83:21:39:
         63:2c:85:bf:f1:e0:ba:8f:fc:5d:b7:0c:fb:63:74:08:f5:f3:
         8c:89:b2:e6:98:42:6f:83:97:4f:03:40:21:c7:e9:b5:9c:f5:
         20:92:09:c6:7e:25:1c:62:d6:c7:ba:38:e1:34:cc:7a:7b:0f:
         6a:4b:c1:e1:cd:ec:4a:47:1b:6e:8b:44:f1:9f:c1:d6:a4:54:
         37:f2:cb:36:0d:2e:f8:3e:0d:6a:4b:a5:10:0e:28:7a:f8:72:
         7b:83:3e:6d:25:8d:c4:2c:83:42:06:db:5b:2c:a3:3b:89:e2:
         18:74:61:10:90:b6:30:19:d3:d8:e6:2c:ea:de:b1:cd:18:b8:
         49:09:42:ff:b3:00:ee:4e:1b:8f:ac:3e:ca:42:d3:6c:39:46:
         4d:31:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----