Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5266dd01-b014-37ec-a81b-88d83d8166da.roa
File:                     5266dd01-b014-37ec-a81b-88d83d8166da.roa (raw, json)
Hash identifier:          KSPy8u/lhkaHGPp1RmcnA5JpMnQhj0uTh4slR5wQ8TE=
Subject key identifier:   E2:D9:9A:14:41:4C:9F:09:DE:81:82:5F:C4:2D:AD:5C:BF:24:41:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C0D3A7716463A3A5DC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5266dd01-b014-37ec-a81b-88d83d8166da.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     397206
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c0:d3:a7:71:64:63:a3:a5:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=ad1e7ecc-162f-4fcf-b0bc-f4c851c55a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:27:af:d3:df:32:2e:f4:b3:5e:89:ec:a6:
                    e5:66:ed:e3:6f:d1:c3:03:16:70:ec:10:e1:41:25:
                    ee:b0:84:c1:18:e3:5a:5c:8c:85:2d:46:26:a0:a7:
                    ab:17:0f:76:cf:4d:a3:f4:f6:d5:df:b4:92:0c:3c:
                    2c:db:45:d9:15:46:0b:e4:4d:70:38:dd:32:c9:0f:
                    02:d5:92:61:0c:5d:7f:e7:54:41:8d:bb:19:55:a8:
                    0f:e6:a4:ea:7a:0f:7a:69:1c:56:28:7f:fd:4d:a2:
                    b2:f3:e3:5a:aa:a3:aa:bc:97:f0:30:93:20:91:72:
                    b2:50:8d:0f:44:ab:e5:34:ed:ab:83:50:8a:95:5d:
                    d2:a8:3f:b8:dc:8f:b3:e0:be:34:f6:03:a8:f2:d1:
                    78:eb:7f:7d:f1:59:1f:bc:cc:7a:4c:26:a2:0b:11:
                    ef:61:a2:69:a6:8f:c2:41:ca:e0:90:83:81:34:d5:
                    0e:ff:22:db:5b:91:4e:3b:d2:75:59:78:23:44:b6:
                    99:1e:8f:79:2a:1e:70:8e:f0:da:b1:01:45:48:73:
                    46:7d:27:b1:53:7f:9a:24:c0:c1:b4:42:4d:31:63:
                    25:80:96:ba:c6:49:47:8d:f0:25:79:03:62:61:18:
                    98:5c:fd:2e:9f:b4:a9:20:ac:ab:72:5e:89:8e:e7:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D9:9A:14:41:4C:9F:09:DE:81:82:5F:C4:2D:AD:5C:BF:24:41:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5266dd01-b014-37ec-a81b-88d83d8166da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:47:96:da:df:cf:cc:54:20:92:25:f0:35:b0:e6:01:4c:82:
         6c:f6:4f:a1:dd:bd:a5:de:cb:ef:51:db:d8:7d:e9:06:94:ce:
         c0:c8:0b:2e:49:e0:78:01:fd:bf:7d:fc:e7:39:b2:15:59:0d:
         22:1d:74:44:9c:ff:e6:4b:a4:bc:ef:cd:27:79:39:ad:14:77:
         b3:a4:b5:cd:1a:3d:ab:d3:3d:5d:57:36:08:8d:fb:6e:f0:f3:
         f6:59:f8:a8:b7:d3:0f:5a:6b:30:54:ae:9e:52:ed:ee:80:e2:
         79:ab:ba:b5:69:70:4f:22:03:bf:89:9a:34:7a:c0:0a:1b:8e:
         a1:c7:07:f8:f8:93:c1:9e:a0:99:01:92:a0:f6:9d:06:46:98:
         da:46:06:bc:47:f2:ec:24:98:63:1a:89:f3:f3:0d:9f:29:84:
         2a:2d:51:e0:d1:7d:62:ca:e0:e7:8d:e8:a5:b4:6d:11:f6:1b:
         ad:ba:90:d4:00:85:14:4e:f7:16:c5:07:06:a3:56:65:2c:48:
         ab:33:62:35:7e:58:57:33:53:cb:01:d4:dc:81:05:1b:41:b5:
         48:d2:56:43:8d:b7:c2:5f:7e:ca:05:d1:95:0b:5b:5f:5c:50:
         03:cb:f4:8a:bf:b6:c1:2d:01:01:65:04:ba:9d:0f:80:b1:8a:
         63:09:97:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:12 2025 by rpki-client