Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46804f4c-0ed5-3bcd-b0c8-abedc1c44e7a.roa
File:                     46804f4c-0ed5-3bcd-b0c8-abedc1c44e7a.roa (raw, json)
Hash identifier:          eFbuHBVGvUYwdCzmloRSXk+z/CCmJRDPcft5SXz2T5E=
Subject key identifier:   18:C2:D3:6D:C2:0F:A2:3C:BB:57:FB:23:D8:69:56:52:63:21:71:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3933E5944A1DC5D41C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46804f4c-0ed5-3bcd-b0c8-abedc1c44e7a.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     396560
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:39:33:e5:94:4a:1d:c5:d4:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=bc51cca8-6c41-4451-9c09-735b8c5979d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:07:d5:b7:9d:ba:f8:e5:af:e0:91:0f:86:
                    89:e2:95:78:41:38:40:a6:21:b4:aa:01:57:a9:04:
                    d4:ee:11:a9:d0:a5:a3:66:e3:7a:2c:00:24:f4:05:
                    69:46:f1:1a:7a:bf:03:36:08:a5:b7:7f:0b:49:ea:
                    f6:a0:16:ad:6b:82:52:94:0d:d3:d9:d3:61:f8:b7:
                    d3:dc:dd:be:12:41:4d:d6:3a:13:72:32:6c:7c:3e:
                    ee:71:ae:05:1f:fd:f5:cb:03:a3:ae:59:b5:d3:f5:
                    d7:a4:e5:ae:67:aa:ab:32:60:56:35:a8:54:b6:91:
                    54:14:b6:22:d3:13:18:a5:bd:35:c3:fa:43:6b:4a:
                    10:71:a1:45:33:ea:50:79:8f:10:33:2d:39:e7:40:
                    b5:b2:2d:16:39:50:42:c0:3c:f8:0d:d9:7a:ad:40:
                    0a:4f:ef:a6:87:b3:f4:6c:5c:54:91:79:61:f9:4b:
                    90:2a:24:5c:86:18:e1:42:a1:d2:b9:a2:1d:57:11:
                    7b:19:8a:30:17:89:99:62:50:b1:81:54:6b:4a:63:
                    78:1e:c1:a9:84:de:f8:e5:b7:21:75:8e:16:2d:27:
                    e2:b3:be:a2:bd:11:17:b4:26:24:65:25:12:aa:b3:
                    93:7c:3f:e0:b3:8e:89:ae:ef:73:4c:b5:64:9f:9f:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C2:D3:6D:C2:0F:A2:3C:BB:57:FB:23:D8:69:56:52:63:21:71:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46804f4c-0ed5-3bcd-b0c8-abedc1c44e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e1:ec:c6:41:31:e5:80:c8:14:5c:dc:07:11:dc:e2:0e:d4:
         65:4a:8f:23:b4:21:23:77:b9:55:04:b7:d1:c6:f7:7e:50:85:
         4d:b7:dd:a5:ea:9a:c6:46:7b:a4:cc:cc:6f:6f:8f:8e:33:18:
         81:55:16:36:56:c2:b7:c5:b5:42:59:8d:1e:1a:12:ed:e7:9f:
         0c:e1:6e:ba:82:0b:ab:0f:ee:d6:45:30:9d:d1:23:15:b1:df:
         ec:6a:af:24:75:1b:b9:33:98:f5:9c:4b:90:7a:11:d5:c9:11:
         ee:f2:2e:c3:59:5f:57:34:c9:e1:15:56:d8:30:29:51:83:1a:
         22:fe:5e:39:75:f0:56:b6:23:90:ee:ad:fd:ce:fa:9b:77:e9:
         1b:44:24:ab:51:0d:30:32:47:f6:54:6f:c2:f8:4a:c2:d5:37:
         40:4b:df:ab:5d:c5:bb:2f:6a:6e:4d:f8:55:a0:10:4f:b1:99:
         14:6d:9f:30:0d:ad:65:0f:51:3d:95:1d:b4:f4:b4:f2:d3:fb:
         cf:ed:9f:a4:46:e0:a7:cb:a3:cc:20:81:18:86:f4:0e:98:3b:
         86:84:4f:6a:6a:f8:1e:4a:57:49:30:20:f8:00:fd:42:d8:32:
         1a:e8:8f:98:88:40:81:44:37:4d:d4:fb:db:17:56:4b:1f:b4:
         3f:f8:05:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:26 2025 by rpki-client