Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa
File:                     7795ffee-b76b-3a10-b1a3-007f64432e56.roa (raw, json)
Hash identifier:          sTQej+wkmqQ3Iw3Mml+DIm60RmPdDojG/O77EgyYbOA=
Subject key identifier:   E3:5B:BC:21:32:C6:68:B9:CF:C7:02:7C:70:AC:B5:5A:C9:22:25:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F541914D983A6A4C98D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396613
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f5:41:91:4d:98:3a:6a:4c:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=4813c4f0-c629-4be8-a571-49688ac427ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:53:5c:3d:2f:f9:62:89:83:5e:40:6f:16:
                    ed:12:ec:ab:eb:2e:36:3d:e7:4e:a5:3a:4f:06:36:
                    bb:52:9d:b1:9e:15:d6:ad:a5:1f:ae:59:1d:1f:27:
                    df:12:8e:40:0f:c0:15:ef:f7:20:52:c3:79:db:73:
                    83:d4:6b:a7:29:ed:52:13:8a:7b:b7:2b:6e:27:41:
                    e8:17:4e:c1:4d:10:7b:ca:e1:00:0e:a0:f6:8b:a0:
                    c5:8c:43:16:df:4e:49:c7:b5:97:3a:7c:09:18:c0:
                    82:b6:d1:bc:06:ea:91:e1:21:3b:e2:a6:ea:ec:8f:
                    c1:82:89:75:67:bd:da:1b:d2:85:22:38:42:9f:d6:
                    0e:9b:50:38:06:cc:d9:ab:df:ea:17:86:37:ad:1b:
                    78:a7:e4:11:fa:73:d4:db:78:7b:51:43:32:2b:33:
                    0b:89:cd:16:62:48:56:46:38:4a:4d:2d:f1:98:6b:
                    12:db:73:72:6f:f6:64:16:95:a7:74:57:b4:b4:36:
                    13:88:40:de:9a:83:3e:e1:38:3c:ce:e8:f0:98:98:
                    ca:93:35:05:7c:86:04:e6:1b:3a:23:21:e5:0e:6b:
                    3d:e7:89:0b:5f:3c:44:b3:ed:d7:cb:83:95:94:31:
                    ec:88:67:f9:93:a7:57:75:d4:67:99:7e:1c:19:2d:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:BC:21:32:C6:68:B9:CF:C7:02:7C:70:AC:B5:5A:C9:22:25:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7795ffee-b76b-3a10-b1a3-007f64432e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:35:75:02:54:65:9a:a7:06:06:9a:2c:46:98:07:1a:92:96:
         05:ca:4d:a8:11:6d:b0:ec:a4:ee:29:ca:2d:71:95:0c:25:56:
         7b:8e:86:35:10:13:cf:54:7d:a5:40:70:6e:f6:2c:19:cb:11:
         25:ac:39:8f:9a:30:ef:ad:e5:0b:62:df:45:8e:52:07:77:18:
         0e:82:a7:32:3a:33:e6:82:37:2c:3f:b9:5a:0d:c8:e4:e8:12:
         ff:f4:00:0d:17:3c:b4:7f:57:13:b1:1d:9b:29:35:0b:ec:a5:
         92:82:5d:93:26:1b:8c:12:7c:8f:12:7a:3b:28:25:ec:40:48:
         35:4c:37:1c:28:bc:8d:df:f8:97:81:53:28:f7:1b:e7:20:08:
         68:2c:43:e5:ab:8d:7f:d0:3b:b0:b0:b0:43:61:0a:cd:3a:6c:
         cd:fe:97:b0:53:a9:f3:c3:54:3b:e9:a2:b2:42:f7:b7:72:2a:
         9f:16:19:96:3a:28:cf:5a:6d:c6:63:e7:5f:ae:fd:70:80:f1:
         09:ed:af:ab:0c:eb:fa:9d:24:87:4f:f7:13:08:8f:4c:36:e9:
         f4:16:22:6b:16:32:40:b1:0b:42:57:2a:8e:28:c3:89:d3:1e:
         02:09:ad:d1:9c:75:cc:d5:38:1d:d0:2c:88:5a:a1:a4:f2:fe:
         1d:31:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----