Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eddc698-a618-3844-84b1-fe01b0e30484.roa
File:                     4eddc698-a618-3844-84b1-fe01b0e30484.roa (raw, json)
Hash identifier:          qQkGCpQR/eTNrI6ffvAF32kkb4oz4wbbSpf20Hzi0XQ=
Subject key identifier:   52:40:0A:6F:54:1B:C1:C6:ED:22:0E:70:0B:52:80:BE:26:DB:BF:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183EFD6C75C299086067580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eddc698-a618-3844-84b1-fe01b0e30484.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396610
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ef:d6:c7:5c:29:90:86:06:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=706f7348-2fab-496f-8e3e-f8a9596f9bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:92:9e:ee:8d:e9:19:5e:72:b7:cc:94:10:
                    a5:35:29:b5:ff:c2:57:76:ad:92:fc:1c:3a:c4:6d:
                    29:67:97:99:64:bd:7d:93:35:15:a9:2c:77:46:a2:
                    cf:8d:1f:b6:63:8b:ad:24:a6:d0:39:5b:05:98:fe:
                    38:56:22:d1:79:9e:ab:b5:da:21:02:e1:a8:fa:93:
                    c6:48:58:0e:fe:17:55:b6:3c:f8:dc:b2:19:c3:18:
                    b5:5d:4f:b7:8d:d5:ce:16:0a:cc:e4:62:ab:55:8b:
                    3b:83:96:3b:d2:b9:74:67:6d:9e:a9:c0:55:e6:64:
                    29:79:21:20:a4:83:08:4e:b3:8c:66:8a:6d:f1:84:
                    d3:32:3b:42:46:5d:e6:ed:41:86:c9:ec:ea:ca:24:
                    86:0f:7f:bf:e1:c1:88:3c:a3:c7:f8:1c:9b:20:db:
                    0d:93:3d:14:f3:7a:71:ef:f1:e3:d7:fa:4c:aa:3f:
                    70:5b:22:16:f8:83:bf:a8:87:c4:42:9f:ff:d8:54:
                    b2:49:a5:21:9d:8f:d6:97:83:9a:78:6f:17:00:cf:
                    b6:89:d7:c4:26:6a:ee:6b:41:e2:ee:fd:13:84:1d:
                    81:f3:2e:27:95:b4:a1:2e:ff:3a:06:e4:77:f2:6d:
                    e4:ca:bd:39:5c:94:39:8a:74:e6:12:46:f6:f5:30:
                    9c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:40:0A:6F:54:1B:C1:C6:ED:22:0E:70:0B:52:80:BE:26:DB:BF:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4eddc698-a618-3844-84b1-fe01b0e30484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:45:8f:e4:de:c4:24:47:a6:88:0e:1a:7a:94:a7:57:ab:
         8c:fd:97:32:37:3b:5b:bc:ff:22:a7:fc:08:e5:e7:0d:10:4e:
         8c:6d:fa:11:e0:62:92:7a:84:03:50:59:57:3b:8e:7e:3a:77:
         ab:51:13:ff:d6:9e:b3:0b:fc:2e:9b:44:87:fb:91:0f:32:03:
         c0:61:72:7d:fb:24:a8:c3:71:27:2a:75:a3:8e:f6:ff:ae:d5:
         71:80:26:c4:9f:2c:19:2f:59:f5:dc:45:b7:a7:cb:d9:a5:f5:
         73:39:7d:af:e6:01:66:fe:ea:5c:36:f5:db:ae:d8:1c:fe:7f:
         4b:77:d3:ec:80:02:84:da:15:90:e2:b6:35:a9:5b:09:02:42:
         ea:8f:f1:ac:52:a4:42:2e:ea:36:a9:4d:0c:38:b5:1d:37:be:
         32:b6:72:6e:6f:86:62:9f:18:25:68:ea:46:01:83:80:ae:c9:
         58:c3:3c:bd:41:f0:c2:fe:19:22:36:a0:91:65:89:a6:c4:1e:
         93:69:9c:9b:71:05:b5:e6:73:2c:0d:e3:b1:20:a6:ad:23:91:
         09:30:8c:ab:af:e0:29:0f:57:04:75:df:a2:7c:9c:2a:23:11:
         3f:ce:e5:e5:0d:87:fc:f8:81:5c:38:cc:63:34:b8:4a:0d:37:
         13:d9:10:8c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg+/Wx1wpkIYGdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
NzA2ZjczNDgtMmZhYi00OTZmLThlM2UtZjhhOTU5NmY5YmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4mSnu6N6RlecrfMlBClNSm1/8JXdq2S/Bw6
xG0pZ5eZZL19kzUVqSx3RqLPjR+2Y4utJKbQOVsFmP44ViLReZ6rtdohAuGo+pPG
SFgO/hdVtjz43LIZwxi1XU+3jdXOFgrM5GKrVYs7g5Y70rl0Z22eqcBV5mQpeSEg
pIMITrOMZopt8YTTMjtCRl3m7UGGyezqyiSGD3+/4cGIPKPH+BybINsNkz0U83px
7/Hj1/pMqj9wWyIW+IO/qIfEQp//2FSySaUhnY/Wl4OaeG8XAM+2idfEJmrua0Hi
7v0ThB2B8y4nlbShLv86BuR38m3kyr05XJQ5inTmEkb29TCc5QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFJACm9UG8HG7SIOcAtSgL4m279wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVkZGM2OTgtYTYxOC0z
ODQ0LTg0YjEtZmUwMWIwZTMwNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBJLEWP5N7EJEemiA4aepSnV6uM/ZcyNztbvP8ip/wI5ecNEE6MbfoR
4GKSeoQDUFlXO45+OnerURP/1p6zC/wum0SH+5EPMgPAYXJ9+ySow3EnKnWjjvb/
rtVxgCbEnywZL1n13EW3p8vZpfVzOX2v5gFm/upcNvXbrtgc/n9Ld9PsgAKE2hWQ
4rY1qVsJAkLqj/GsUqRCLuo2qU0MOLUdN74ytnJub4ZinxglaOpGAYOArslYwzy9
QfDC/hkiNqCRZYmmxB6TaZybcQW15nMsDeOxIKatI5EJMIyrr+ApD1cEdd+ifJwq
IxE/zuXlDYf8+IFcOMxjNLhKDTcT2RCM
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:44 2025 by rpki-client