Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3149dff3-d406-3e36-90b7-615d22e75c87.roa
File:                     3149dff3-d406-3e36-90b7-615d22e75c87.roa (raw, json)
Hash identifier:          bigCA/1AL8Ao9NDAAOjWRNtn94tSDdroOP7px8YSyoI=
Subject key identifier:   98:9B:EC:58:D0:71:F5:57:35:AF:CA:8B:C7:F7:17:7B:BF:33:E4:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492CB2366DF5F7351FD1066980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3149dff3-d406-3e36-90b7-615d22e75c87.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     40647
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:36:6d:f5:f7:35:1f:d1:06:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=76f97e54-01ff-49ec-ac50-b64c9ae5d264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:b5:e1:08:e4:e0:e3:1c:53:bf:02:db:b3:
                    0c:ff:8d:6b:af:b0:f4:7a:62:7e:2a:40:7d:bd:1a:
                    a1:b3:7b:b9:50:c9:63:52:f4:6e:18:12:1f:d6:48:
                    ae:33:58:18:96:ca:e6:71:e6:99:9d:49:42:ee:3c:
                    df:24:d7:5f:82:9e:1a:85:54:86:16:7e:43:6c:33:
                    ba:a3:aa:25:8b:1d:46:4e:07:be:29:2b:3d:ba:46:
                    b4:47:20:a6:fc:d5:92:44:a2:eb:29:87:e1:a0:aa:
                    b9:7f:4c:b9:aa:3b:f2:74:a5:0f:e7:03:80:f9:9e:
                    47:66:8a:73:9b:d6:ca:da:bc:cd:2a:f8:6e:04:36:
                    83:fb:78:53:4d:a8:b2:ea:f1:27:45:bc:c6:15:b7:
                    65:8c:8b:43:0b:cf:a5:65:3c:43:0d:ee:20:b9:9c:
                    53:de:7b:33:f0:24:0e:c6:d5:81:fb:20:25:bc:ee:
                    5e:8f:28:03:58:5e:b2:6c:74:f6:39:80:e3:a9:69:
                    c4:26:b3:7b:41:76:fa:fc:59:81:8d:df:92:29:e5:
                    43:74:c9:ce:ad:33:7a:a7:fe:f2:a7:a2:d1:df:37:
                    5a:37:78:b3:f4:3d:b1:2c:a2:a9:82:b0:68:b2:99:
                    9e:a3:20:0f:21:cd:bc:19:bb:ad:75:f4:1c:d5:f5:
                    8f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9B:EC:58:D0:71:F5:57:35:AF:CA:8B:C7:F7:17:7B:BF:33:E4:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3149dff3-d406-3e36-90b7-615d22e75c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:ac:0d:d7:92:09:88:74:55:8a:95:ab:de:27:97:d4:d2:
         87:9b:c2:09:14:9b:92:17:31:9a:6f:ee:43:3c:b3:ae:22:72:
         79:a8:91:6e:19:8e:6d:ce:cd:72:4d:ec:fe:8c:7c:5b:b5:19:
         82:28:3c:4d:f7:07:a1:47:1b:9d:9b:d3:60:d6:e7:45:cb:ee:
         2f:0a:d8:57:7c:57:c1:0c:8d:3d:b5:35:cd:f9:52:92:b1:a3:
         ab:86:2c:97:39:94:58:0b:bc:93:2a:ff:7c:8e:12:26:8a:e6:
         d7:79:9c:ce:1d:1f:44:9b:ec:4d:ac:d2:2f:d9:55:6a:68:98:
         7e:4a:63:35:71:93:e0:5f:2f:da:b2:6d:c6:c1:69:33:18:7a:
         92:93:0f:ec:95:55:9f:32:43:4e:21:98:f9:a0:5a:a5:6e:02:
         e2:67:67:bc:e5:97:50:12:e6:4e:84:6b:4b:68:5f:a5:62:e5:
         b2:6e:d7:df:bc:04:34:be:54:92:b2:29:9a:31:ca:fe:ef:1d:
         23:9c:0d:dd:3d:14:3c:55:77:7d:73:a0:e4:d8:cc:0b:95:49:
         c2:c4:e2:ec:8b:60:2c:27:2f:57:08:eb:49:70:13:34:97:b7:
         e0:69:65:29:79:b0:b4:48:2f:e7:26:5e:eb:25:4f:30:6c:7c:
         11:23:11:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----