Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/4d1e73e2-ec50-39d0-87f3-df015035691e.roa
File:                     4d1e73e2-ec50-39d0-87f3-df015035691e.roa (raw, json)
Hash identifier:          07j6kJ9exEuuP6ZnoJvqx1Ywph9uA48/QaZ3/rPUivo=
Subject key identifier:   04:A0:7C:33:EB:96:72:5D:8E:B7:1F:C7:98:F8:95:E2:BA:6D:79:EA
Certificate issuer:       /CN=fc3262f6-73f3-433b-ba28-112a484fec8a
Certificate serial:       010D0C9F43285848C84BA19AD95C4F1CC2F95100
Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/4d1e73e2-ec50-39d0-87f3-df015035691e.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        168.225.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:a1:9a:d9:5c:4f:1c:c2:f9:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=4e3142c3-0476-4ca9-8828-34c65ca2de75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:d5:5e:11:4f:ca:c7:9b:db:58:f1:20:7f:
                    e3:a1:a2:f3:dc:2e:2e:ab:51:16:8a:67:c7:a0:4c:
                    d2:fd:34:b1:35:7c:c8:30:8e:bd:13:d5:c3:4b:59:
                    cc:0e:7a:6d:3d:4c:49:af:19:3d:ea:e7:49:26:91:
                    54:48:89:f3:f5:ec:f2:3c:15:f5:d9:9a:5b:86:06:
                    1a:33:8e:34:98:52:62:94:3a:a5:4f:ad:52:3b:7e:
                    f1:6e:e3:c8:29:13:a9:0d:7a:72:74:2d:2a:fd:66:
                    fc:b8:dc:3d:84:e2:c5:ea:76:01:5a:fb:ab:1b:84:
                    7d:8e:5b:0f:05:01:a1:47:a0:4f:1f:6e:27:78:dd:
                    06:b2:cd:65:04:37:4a:cd:8a:e1:87:49:cf:22:5b:
                    d3:58:34:99:db:fb:f8:2c:ae:49:aa:0c:fe:47:62:
                    1d:98:8d:00:c5:39:80:bf:92:3a:e0:f4:6c:d6:e9:
                    ef:22:24:81:2a:cb:ec:7b:57:b9:cc:78:27:97:a3:
                    f1:06:9d:c3:45:7a:60:2f:93:e9:c7:25:9c:0d:de:
                    83:02:14:12:95:7d:17:8a:bf:85:64:51:53:12:6a:
                    07:c3:89:e0:18:33:c0:a3:39:68:b9:9d:56:2c:ca:
                    81:4d:b6:10:c5:e6:2d:4b:cf:5d:93:3e:2c:46:33:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A0:7C:33:EB:96:72:5D:8E:B7:1F:C7:98:F8:95:E2:BA:6D:79:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/4d1e73e2-ec50-39d0-87f3-df015035691e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl

            X509v3 Authority Key Identifier:
                keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.225.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:c6:6b:cf:e4:98:0d:0d:72:cd:df:75:99:fe:91:34:18:
         6c:8e:d7:7a:21:3e:b8:61:b5:67:91:43:6a:23:c1:d5:d0:a1:
         76:0c:ba:0e:3e:2b:73:e4:cb:43:62:08:78:fd:f8:e3:d0:36:
         bd:f3:bb:32:4a:38:f1:57:7f:bb:43:22:8d:61:73:8d:e1:7e:
         e8:06:16:82:f2:f9:34:06:32:30:88:16:59:e3:2a:3a:ba:a0:
         eb:7a:42:8f:cc:8a:9f:0e:4e:00:0c:a2:69:c8:04:a6:cc:c6:
         e0:26:ff:63:4c:93:2e:c5:85:e8:f9:b8:24:85:b8:86:04:c4:
         07:89:5f:07:e1:3c:1c:b3:05:28:75:80:ba:27:10:30:b2:31:
         47:62:7a:0b:62:fc:df:c2:85:2a:1f:2e:6d:88:e7:12:77:8f:
         14:74:79:2f:05:55:9d:2f:97:e3:13:f3:bb:9c:d8:45:63:df:
         51:b0:02:ce:cd:1d:a6:9c:ef:a1:0a:5c:15:d0:d0:a4:b0:cb:
         d6:db:be:06:99:99:59:39:f0:52:94:cd:8a:5e:6c:28:6b:dc:
         b9:a9:05:8d:da:25:68:19:31:36:54:e1:28:7a:e5:38:d6:96:
         62:eb:94:79:98:90:fa:e9:de:d2:e3:69:d6:36:3c:5b:c2:44:
         bc:8c:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:23 2025 by rpki-client