Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2d30ac-aa71-3e11-871b-79c203aaf4b1.roa
File:                     1b2d30ac-aa71-3e11-871b-79c203aaf4b1.roa (raw, json)
Hash identifier:          rUjfgSii7tOzgjlV1ar426Xnh/4W76A5wNXdpks7iXM=
Subject key identifier:   A3:AC:21:BF:40:73:88:1D:2A:A0:A5:56:33:8C:EC:70:C9:6C:8E:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F4DDD6B0997914D49040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2d30ac-aa71-3e11-871b-79c203aaf4b1.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     396546
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f4:dd:d6:b0:99:79:14:d4:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=3b8e7bed-8fad-4e96-9963-fc21d7773e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:09:52:d3:5c:87:62:44:ed:b5:58:74:b8:
                    11:68:ce:82:34:20:e4:63:69:17:8b:00:3d:e9:cf:
                    ed:ce:93:26:99:9f:69:08:ce:48:11:96:a4:21:a8:
                    7a:92:01:a5:a6:04:1f:a7:fa:72:02:da:e0:93:d3:
                    57:e5:84:eb:a3:ab:03:dd:ad:bd:37:cc:bd:71:ea:
                    37:93:fb:6f:65:74:d4:a3:3d:e1:78:0e:29:3d:b3:
                    62:1b:09:1c:bf:6c:62:33:59:d4:ec:bc:ce:15:d1:
                    b9:89:2a:ff:e8:8c:21:e2:a1:9c:8f:43:b0:3d:32:
                    a5:75:e1:c7:24:1a:14:18:ef:67:a9:e5:bd:e5:88:
                    88:76:a1:c4:5e:00:ab:cf:8c:90:08:7e:42:28:c1:
                    67:5f:e4:7b:7f:6c:aa:f7:98:29:a9:50:7a:30:eb:
                    2a:b6:8f:94:f9:42:c3:62:c2:2b:fe:1b:8d:7a:55:
                    4e:14:aa:83:51:3c:0a:d6:bb:8f:6a:5b:8a:a7:1a:
                    58:c0:43:90:50:5f:6b:6d:6d:17:9d:8b:bc:ae:7d:
                    7b:81:68:aa:1a:b1:d9:36:18:72:ec:29:1b:75:4c:
                    38:1e:53:3e:e3:28:d2:b9:25:e7:93:4a:05:61:1a:
                    29:f8:2f:e3:93:f3:e6:2e:14:2c:74:b8:7b:65:32:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AC:21:BF:40:73:88:1D:2A:A0:A5:56:33:8C:EC:70:C9:6C:8E:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2d30ac-aa71-3e11-871b-79c203aaf4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:19:21:65:03:30:7f:49:61:c4:52:72:ac:e3:19:2b:99:
         13:4d:db:eb:40:c6:0a:de:7a:1c:fd:a8:9e:e9:b2:14:c9:46:
         77:d5:d6:5e:03:f7:2e:eb:e1:80:5e:2c:c7:f2:62:5e:1b:81:
         94:c7:9f:ae:a4:fc:3c:ae:d6:e4:70:ed:9f:f9:ab:4f:a2:04:
         99:3f:64:0a:25:c8:7c:83:bb:b6:7f:93:ad:4c:19:27:a2:26:
         c4:54:b0:8d:d9:2e:7b:10:80:78:d1:da:2f:c1:82:eb:2a:96:
         a0:1e:ee:1a:7b:3f:51:7d:28:7a:aa:ac:0c:82:53:c0:11:9a:
         3c:04:80:8f:5e:8a:fd:9e:12:8d:81:b5:23:91:b0:a9:56:04:
         86:4a:53:2a:3e:a2:4c:72:bd:5d:c3:38:1b:bc:8a:91:2c:38:
         93:cf:1a:d5:14:fb:99:db:cc:d5:64:de:47:f6:65:08:d3:a3:
         b3:cb:f2:23:43:98:1f:28:d9:99:4f:b8:71:69:21:66:35:44:
         6e:0e:3f:94:a3:a8:21:bd:06:f9:1c:db:aa:62:e8:65:5f:86:
         22:1a:a5:33:13:eb:ab:cc:dd:5b:23:0b:1b:01:5e:29:34:dc:
         63:f2:1f:0e:6b:09:58:f1:8b:81:49:6b:35:46:cc:ca:44:96:
         0b:18:99:b0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/Td1rCZeRTUkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
M2I4ZTdiZWQtOGZhZC00ZTk2LTk5NjMtZmMyMWQ3NzczZTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPgJUtNch2JE7bVYdLgRaM6CNCDkY2kXiwA9
6c/tzpMmmZ9pCM5IEZakIah6kgGlpgQfp/pyAtrgk9NX5YTro6sD3a29N8y9ceo3
k/tvZXTUoz3heA4pPbNiGwkcv2xiM1nU7LzOFdG5iSr/6Iwh4qGcj0OwPTKldeHH
JBoUGO9nqeW95YiIdqHEXgCrz4yQCH5CKMFnX+R7f2yq95gpqVB6MOsqto+U+ULD
YsIr/huNelVOFKqDUTwK1ruPaluKpxpYwEOQUF9rbW0XnYu8rn17gWiqGrHZNhhy
7CkbdUw4HlM+4yjSuSXnk0oFYRop+C/jk/PmLhQsdLh7ZTJOWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKOsIb9Ac4gdKqClVjOM7HDJbI7vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWIyZDMwYWMtYWE3MS0z
ZTExLTg3MWItNzljMjAzYWFmNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBPeRkhZQMwf0lhxFJyrOMZK5kTTdvrQMYK3noc/aie6bIUyUZ31dZe
A/cu6+GAXizH8mJeG4GUx5+upPw8rtbkcO2f+atPogSZP2QKJch8g7u2f5OtTBkn
oibEVLCN2S57EIB40dovwYLrKpagHu4aez9RfSh6qqwMglPAEZo8BICPXor9nhKN
gbUjkbCpVgSGSlMqPqJMcr1dwzgbvIqRLDiTzxrVFPuZ28zVZN5H9mUI06Ozy/Ij
Q5gfKNmZT7hxaSFmNURuDj+Uo6ghvQb5HNuqYuhlX4YiGqUzE+urzN1bIwsbAV4p
NNxj8h8OawlY8YuBSWs1RszKRJYLGJmw
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:39 2025 by rpki-client