Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505375a7-d429-3b61-8236-58fbe79e5d5a.roa
File:                     505375a7-d429-3b61-8236-58fbe79e5d5a.roa (raw, json)
Hash identifier:          YlnluqRqkMsHsnOf3lbnvOFREdQaEA6LSZY2aTXkLNU=
Subject key identifier:   88:3A:78:05:07:41:C5:02:B9:BE:E6:C4:E1:96:7D:38:29:C4:8B:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493ED3F4019E2FDBED5B33D700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505375a7-d429-3b61-8236-58fbe79e5d5a.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     396826
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:f4:01:9e:2f:db:ed:5b:33:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=e670258d-564a-44e4-8a28-ec1f307cdea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:f9:ed:bc:3f:9c:0b:4a:95:04:f8:af:1d:
                    31:fb:d2:2d:88:82:1f:9e:b0:a9:e1:70:e0:3a:83:
                    f1:3e:3e:ba:be:2d:e3:b4:20:71:16:b4:f5:bf:c4:
                    79:6a:09:8e:a2:a4:ea:7d:a8:61:a1:d2:bc:9d:31:
                    25:1f:5a:39:5d:48:37:4d:6f:76:73:35:29:54:24:
                    8f:9b:0e:e4:e8:45:01:3d:7a:aa:62:33:ef:df:e8:
                    8c:ea:ea:a8:f1:62:f9:8d:09:0a:f2:1e:81:55:b9:
                    e2:41:47:0d:88:e9:15:93:8c:dd:83:75:4d:11:cd:
                    9d:6d:ed:62:c4:cc:79:7a:27:f4:c7:4c:ec:9b:84:
                    bd:1e:42:fc:a5:a3:f9:b9:c4:10:b7:83:23:b3:ee:
                    50:0b:ac:cf:ed:f7:a5:67:25:ac:40:c2:c1:05:3f:
                    8e:11:bd:3c:ad:22:e9:c2:02:bf:aa:05:5e:69:9c:
                    f1:42:93:31:7f:61:59:05:8d:30:bf:a4:da:74:49:
                    0b:5e:fd:49:0d:70:8d:ba:e7:08:63:55:87:66:ca:
                    d3:f3:0a:3b:5e:b9:b4:bf:f0:56:f3:79:dc:57:2d:
                    8e:bf:11:ee:0b:b8:18:42:56:3a:49:9b:25:15:e0:
                    e6:34:99:f5:fc:2b:1f:67:92:b3:61:c4:68:0c:dd:
                    d0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:78:05:07:41:C5:02:B9:BE:E6:C4:E1:96:7D:38:29:C4:8B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505375a7-d429-3b61-8236-58fbe79e5d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a6:61:43:cb:bd:e5:6a:b8:f0:d1:a9:0e:36:0f:05:1e:6a:
         ae:88:95:bc:15:2c:3a:ad:a6:31:9d:6d:db:91:d4:bb:fb:c9:
         dc:7f:49:f6:e6:88:1b:a9:42:1d:23:a9:47:77:b7:55:6b:06:
         d2:83:b0:e8:ff:3c:61:d9:1b:3b:1e:87:cc:47:b2:d8:a9:36:
         7c:d9:f6:6b:7b:55:4c:84:ac:ec:04:8c:9b:f7:e8:46:2e:d5:
         c6:ca:d7:78:2d:73:67:3c:84:f7:7c:ee:0e:15:c4:8d:e8:bb:
         a6:08:67:e2:d4:69:5c:71:76:7e:f4:06:d5:55:61:ac:f7:18:
         7d:6c:15:02:f5:80:1c:d5:10:c5:34:27:7f:0a:62:35:b5:69:
         f6:89:42:1a:5b:72:7e:ae:15:5a:ce:94:6a:ef:83:f7:cd:3c:
         78:6c:c7:7c:a8:8b:19:de:f0:88:92:e5:e3:c4:5d:fc:ca:76:
         40:d1:96:26:97:ef:9e:69:14:1f:19:b9:40:92:ec:73:a9:a4:
         92:27:39:83:9c:79:a6:d7:f2:d1:b4:4e:9f:23:49:c8:0e:38:
         20:1c:b0:d1:29:a2:b8:0b:e0:06:2b:42:25:96:af:6e:75:68:
         c9:ba:9a:79:2c:6a:c0:6a:b1:35:e4:19:98:53:bb:ed:7e:69:
         67:2b:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----