Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0069028c-f6be-39d2-bb35-9551d895db25.roa
File:                     0069028c-f6be-39d2-bb35-9551d895db25.roa (raw, json)
Hash identifier:          zk61Gyw6+542+/B6VGRgfyxL0+a0Z7mXzFygBf1sFlY=
Subject key identifier:   9D:FA:A4:63:8E:96:37:95:EE:53:4B:6F:71:5A:B6:97:86:1E:23:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B78446A04F5AFB774D730980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0069028c-f6be-39d2-bb35-9551d895db25.roa
Signing time:             Thu 30 Jan 2025 13:46:20 +0000
ROA not before:           Thu 30 Jan 2025 13:46:20 +0000
ROA not after:            Wed 30 Apr 2025 12:46:20 +0000
asID:                     396552
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:46:a0:4f:5a:fb:77:4d:73:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:20 2025 GMT
            Not After : Apr 30 12:46:20 2025 GMT
        Subject: CN=f0db2994-3079-4e77-adea-14fb7f53c694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:be:05:13:1e:65:ea:73:a7:f7:8c:8a:19:
                    6b:50:7d:3d:7d:ca:90:f8:20:ad:a1:06:ef:e0:c3:
                    44:88:4d:1d:60:f1:d9:34:75:d7:76:fb:cf:bb:59:
                    2c:d8:25:32:e9:e1:b4:ef:04:58:e8:7c:c7:5e:ed:
                    e4:a3:6c:b2:86:79:7b:61:4a:57:f8:41:fe:bc:bc:
                    45:b3:5b:50:20:44:50:29:9e:d8:39:b2:c3:86:41:
                    d3:e2:9f:0b:be:cf:d2:3b:4c:14:d5:1c:38:cd:58:
                    c0:28:74:63:73:12:75:37:38:7c:eb:d5:1f:4f:97:
                    df:d8:72:7a:d4:9d:c4:c0:78:67:8f:51:19:c9:b5:
                    c4:3d:c5:3b:6c:9e:9e:d7:a2:23:dd:5a:71:bc:84:
                    dd:c6:30:73:b4:8e:55:81:d8:52:54:20:db:ad:5a:
                    c2:ff:1d:d1:87:9c:7a:cf:4b:9d:94:ae:36:c2:34:
                    29:20:3b:cc:7c:03:01:30:43:a4:5f:9c:e0:5c:12:
                    e6:25:fa:0b:44:fd:f7:2a:42:06:30:41:29:b7:39:
                    42:e8:d3:3e:2c:df:04:c1:f1:36:1a:30:6a:8f:49:
                    86:7e:b7:a5:9c:0f:8f:e6:73:fa:05:b1:77:4d:56:
                    20:28:28:cb:a3:fe:3e:83:36:d5:8f:e6:68:39:63:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FA:A4:63:8E:96:37:95:EE:53:4B:6F:71:5A:B6:97:86:1E:23:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0069028c-f6be-39d2-bb35-9551d895db25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:80:86:bf:35:36:b8:58:ac:ab:19:3c:4c:07:a3:0c:6b:7c:
         7d:c4:2e:7e:58:b4:b5:22:e7:a9:9f:16:ec:c7:f4:73:ce:c0:
         dd:2c:ed:da:12:05:ac:30:23:87:0c:bd:fa:84:1e:50:11:18:
         54:8c:74:88:8e:58:2b:30:23:2e:2d:dc:03:03:ac:c2:c1:a8:
         b8:fb:1b:ad:81:c4:26:3a:fd:48:ee:4f:eb:3f:9b:4e:83:8a:
         9c:01:11:94:d0:d9:62:5a:f4:48:ff:aa:76:6c:3d:00:f2:60:
         35:c0:56:8d:d2:b3:d8:71:9a:b4:49:ed:2d:26:15:96:e0:8a:
         09:e9:95:c2:76:c2:45:ce:23:8e:3d:d5:d1:6c:52:16:1f:28:
         a6:74:a2:ba:21:d1:ee:dd:dd:eb:64:6b:28:2a:ac:68:8e:61:
         d0:29:32:eb:fb:e6:9a:b3:57:0d:2a:43:a9:56:50:46:66:6b:
         78:a4:f4:76:40:56:80:c8:77:ed:ec:35:85:be:ba:1b:c0:af:
         5f:37:5a:f5:68:53:43:15:f4:bc:35:24:47:75:9a:d1:4f:3f:
         7a:8d:b4:71:ac:7e:79:b0:c0:13:ee:db:69:61:81:5f:8c:c7:
         80:8f:29:f1:da:c8:e4:79:ce:36:53:31:30:08:eb:12:3f:76:
         0d:8e:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:26:52 2025 by rpki-client