Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa
File:                     ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa (raw, json)
Hash identifier:          oLmAWEJsBgS6DvdAk6EQfTANa02fSaA19KM5LlL/lYU=
Subject key identifier:   08:A0:A8:4C:8B:26:BD:F5:A7:22:4D:41:20:D6:58:F5:F7:B3:82:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C74294611931D1263180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396587
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c7:42:94:61:19:31:d1:26:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=6045522b-55f0-4828-a7ee-9e53daced4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:bc:68:7f:27:57:7a:ba:54:98:7e:0f:9e:
                    de:35:4b:dc:40:ed:86:c0:12:b0:81:fb:d1:1f:c2:
                    ec:36:32:28:d5:f4:27:30:b4:55:94:51:51:7a:90:
                    e9:8a:f8:5f:eb:1d:a5:ea:85:74:2f:87:86:df:d0:
                    9f:3e:74:a7:de:18:80:c7:48:7b:da:9d:a5:5f:14:
                    65:f5:0d:0e:5b:f3:26:55:24:a0:fc:02:1b:e9:10:
                    f7:52:8d:ed:fd:af:cb:da:d4:42:4c:fe:f7:9a:e8:
                    70:f1:7b:03:da:57:ca:a8:2b:27:a0:02:71:d2:7c:
                    45:0f:47:fb:7b:6c:7c:39:b2:3b:fc:c0:8a:4f:b8:
                    78:15:2f:20:e2:29:05:af:9b:a6:17:d3:9c:e4:2f:
                    6f:56:01:db:11:99:dc:a1:1a:ce:cb:3a:e7:cd:9b:
                    cd:de:14:ee:9d:96:df:ee:84:00:16:d0:6c:8c:93:
                    d9:a1:af:f1:21:f3:33:8e:9b:68:3f:3b:dc:b4:c6:
                    e4:a0:18:dd:78:f1:28:50:aa:b6:92:7e:7d:eb:18:
                    00:30:91:aa:d8:1e:7c:88:d1:5b:98:22:ee:7d:91:
                    10:39:b6:d5:6d:67:b6:a4:b4:96:33:26:e7:89:55:
                    52:03:bd:b7:fe:92:b7:31:54:b1:98:1f:97:8c:24:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A0:A8:4C:8B:26:BD:F5:A7:22:4D:41:20:D6:58:F5:F7:B3:82:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff535bf3-ea55-34a7-a7dc-ca859d1c65ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ec:6f:ef:0b:bf:cc:07:38:ca:02:74:65:2b:73:a8:c1:84:
         47:8e:8a:9c:6e:3d:46:30:a5:7b:e9:b9:85:55:46:1e:17:63:
         95:54:98:d0:7a:f5:e6:e3:02:99:fa:bc:ca:72:00:69:1b:09:
         c2:90:71:d0:99:d5:65:1d:bd:c7:cb:8a:50:58:73:95:12:a5:
         99:1e:60:4e:47:25:c3:94:74:e8:fe:9b:96:c3:a8:01:50:89:
         3c:91:d9:56:b6:bb:99:8e:3e:e1:ee:44:16:be:55:97:0a:9f:
         a4:8b:51:4f:51:7e:5d:5f:ce:e1:64:f6:94:f5:de:78:d1:76:
         e7:09:7a:ee:5d:6f:d2:98:60:cd:1e:3d:13:44:63:09:d5:b5:
         93:c6:0b:79:21:ff:49:9d:94:f2:a5:80:89:83:9a:f9:fd:61:
         a5:e3:a0:32:02:d8:5e:f0:f9:45:0a:d0:bb:b9:31:19:a7:e4:
         e5:e9:35:9b:38:5f:8c:1d:5d:53:a5:88:a0:8e:34:d0:e8:af:
         5c:e8:d1:91:08:99:f7:00:22:1a:10:78:c1:a3:5e:f8:2c:ab:
         7a:75:46:7a:10:43:49:6c:c1:4b:66:67:94:16:96:ca:a5:fc:
         24:4c:d8:d4:85:ef:dd:94:64:0b:06:74:2b:38:11:9c:bb:e0:
         77:27:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----