Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b1f748-f3ec-31ae-a48f-3976f98fc592.roa
File:                     22b1f748-f3ec-31ae-a48f-3976f98fc592.roa (raw, json)
Hash identifier:          7pLDg8Jrigdi5bPuG3dYH6CS+XPUj9XDaUc6OS2B83U=
Subject key identifier:   E1:87:BE:D1:08:08:CA:EA:2E:EF:4F:46:96:96:56:3D:E6:AA:2E:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0F1AB71793ECB3228FD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b1f748-f3ec-31ae-a48f-3976f98fc592.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     397208
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f1:ab:71:79:3e:cb:32:28:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=f05cded6-9fa2-4724-913e-b092070a7035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6e:f1:10:e3:0d:15:28:47:2d:bd:d0:41:f2:
                    4a:a4:e3:7b:04:44:6d:28:0c:ac:df:e1:b8:01:28:
                    a9:46:79:ed:12:22:76:c4:c2:07:ee:0f:31:ce:d2:
                    fe:ef:e4:01:ef:cb:35:f2:bb:6e:f2:28:7b:f4:09:
                    a1:4e:31:09:c7:53:7c:5e:af:7d:ce:67:b9:c2:37:
                    54:7f:f9:96:d4:13:d8:71:c5:18:6f:77:5c:03:9f:
                    e8:86:fe:bc:f9:7f:4d:64:cb:f3:22:d1:eb:4a:a6:
                    91:0a:6b:25:13:f4:ad:df:b3:b8:3b:71:be:38:59:
                    80:df:31:e8:19:c0:68:15:e8:04:a5:1c:1a:9b:d6:
                    50:29:ee:fb:37:a6:8e:9a:81:32:20:89:e5:b6:54:
                    f0:3b:dd:76:26:43:94:cf:08:1a:d0:f2:36:50:a9:
                    66:b0:a6:95:37:36:2b:23:20:c3:37:3b:39:12:26:
                    b6:14:f2:e7:b2:7d:7c:6a:31:c4:2d:89:d1:15:9d:
                    96:11:67:d1:9d:e0:61:7b:51:82:28:7b:c8:45:63:
                    f3:fa:26:cb:5c:ae:b1:01:ad:db:a4:27:7b:ce:f9:
                    0a:32:55:c3:a7:2f:25:a6:73:97:29:1c:c0:45:75:
                    ff:52:59:0a:1e:36:13:26:81:e4:ac:7b:67:60:75:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:87:BE:D1:08:08:CA:EA:2E:EF:4F:46:96:96:56:3D:E6:AA:2E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22b1f748-f3ec-31ae-a48f-3976f98fc592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:09:22:f4:9d:c5:f1:96:76:43:1f:e3:66:17:50:11:5f:95:
         c0:9e:af:1e:ed:fa:cd:73:27:2c:84:9b:3a:a2:14:2b:fc:92:
         27:2f:58:0c:0e:3b:24:17:ed:f8:07:d0:c1:a0:0f:af:30:57:
         7a:2a:c4:c7:b0:75:de:cb:c8:14:d6:34:f2:cd:ba:54:8b:61:
         73:f9:be:98:6b:01:3d:1b:ff:94:12:4e:50:cd:3e:d1:08:f4:
         28:62:5b:38:3d:ce:74:b5:d4:c0:fc:c5:7a:95:97:87:37:d5:
         24:07:75:fe:e6:1f:4d:cd:80:d8:da:5b:eb:de:49:07:bf:7d:
         86:46:09:ed:be:be:17:56:bd:1b:04:7b:a3:f6:a7:30:06:2c:
         86:ad:4c:c7:f3:6c:ac:ca:ff:aa:52:a6:ac:50:d7:06:29:06:
         a1:75:2a:fd:02:ef:19:a9:4c:1a:1e:4f:a7:b6:39:c4:1c:66:
         43:e9:77:ac:bc:9f:c4:19:5e:02:35:c3:ca:74:36:f2:03:8f:
         34:1f:9b:8b:f5:2e:11:a7:41:25:59:b6:47:c4:b0:60:75:81:
         97:a9:61:69:10:a2:68:ad:1a:ab:4d:01:b9:74:af:cc:c0:78:
         ca:00:66:dd:dd:b8:ca:46:33:99:a4:f1:9d:7c:26:3c:5c:67:
         5a:bb:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----