Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa
File:                     89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa (raw, json)
Hash identifier:          9horvoi4gRuYsUfVpqwFiP7PXBrrdQE+gqUOVWylqao=
Subject key identifier:   5A:4C:0E:F3:6F:7E:DB:38:0E:39:DF:14:90:DE:11:24:AD:7C:6E:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3DEA9A26381EEDA1A960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     396595
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:3d:ea:9a:26:38:1e:ed:a1:a9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=e1684602-cd95-4b6a-889c-2fdd1a60d200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:b8:4f:22:8b:42:77:16:8a:74:21:48:e4:
                    9d:74:30:cd:02:3b:42:f3:5f:a6:cc:6c:2c:54:ee:
                    f7:6d:2f:14:fe:51:65:82:aa:98:1f:68:ae:63:13:
                    95:c0:e3:cb:c3:c9:3a:44:db:c3:5a:3c:ca:cb:56:
                    4d:08:65:21:99:6c:df:ae:9c:8c:cc:9d:29:5e:ba:
                    b6:13:46:56:6b:11:f2:6e:6b:65:06:d6:6b:d5:fc:
                    d7:fa:c2:48:bd:15:56:2d:45:cb:d3:6e:cd:a7:80:
                    31:09:54:02:6d:7d:d5:f2:96:c0:e6:ea:b2:d3:19:
                    b6:21:19:45:30:8a:84:6b:b3:5a:d4:92:a9:2e:f8:
                    64:4f:92:60:1b:5d:e0:0a:bc:bc:f7:63:1a:1e:4c:
                    72:55:d9:75:56:09:36:cd:c2:04:2f:d9:5e:9f:8a:
                    2e:06:bd:a2:98:1f:8b:4f:27:07:37:bb:7d:b9:1e:
                    e4:7a:69:c4:18:69:76:68:cc:72:73:5e:e0:46:39:
                    f2:83:65:f5:77:7c:c0:c6:30:04:4a:f5:22:bf:68:
                    2c:51:0b:5a:3f:54:78:5c:6e:d6:b3:d6:e0:12:1c:
                    25:3c:bf:1c:13:d8:05:0e:62:10:31:bd:39:86:42:
                    5a:e6:c1:ae:de:7a:5d:a4:5f:38:86:c5:bb:b9:27:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4C:0E:F3:6F:7E:DB:38:0E:39:DF:14:90:DE:11:24:AD:7C:6E:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ad:83:b7:5a:a2:9c:47:f4:d7:23:ce:eb:82:63:bb:54:ec:
         c7:ea:cc:a3:b4:bd:e4:2a:d7:0a:d4:d7:06:98:3c:29:a2:02:
         22:17:1f:59:23:cf:c5:b8:96:c2:12:56:17:06:d0:98:fa:f1:
         67:9b:37:77:40:36:b4:8e:41:54:d8:ce:bc:b7:5d:ae:2d:fd:
         3f:33:bf:f9:2e:c4:2d:1a:85:ab:92:f8:10:99:27:09:14:85:
         90:e5:3b:c5:91:8f:53:91:f1:47:23:b9:74:8a:b9:f4:7b:d7:
         5a:e9:7d:23:79:26:da:e3:fa:e4:47:c8:fc:09:00:3d:cc:69:
         89:f4:bb:7e:e8:bd:74:c6:f4:80:29:f8:7d:2d:a1:7b:d1:19:
         64:d3:63:12:b6:5e:6f:5b:bb:72:9e:7d:a5:52:12:f7:02:e8:
         fb:cd:da:f0:f8:90:a8:ce:19:f0:fd:3f:cf:13:38:d1:0c:f1:
         0f:f7:72:8a:7c:a9:dc:c2:40:a3:7e:16:f9:38:09:88:fd:f9:
         7b:f4:68:72:bd:5b:c0:4d:87:a9:bb:a7:89:2e:bf:36:4c:cb:
         a3:de:b3:20:ec:a0:f6:03:43:67:a1:43:b6:e4:c2:96:5a:06:
         63:c6:56:cc:f0:b0:a3:4a:05:c4:e2:78:ff:77:b5:24:50:2e:
         dc:25:47:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----