Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/527f216e-2050-3f93-8935-a4362f9d63b7.roa
File:                     527f216e-2050-3f93-8935-a4362f9d63b7.roa (raw, json)
Hash identifier:          Hpt+1jExFsOW+GadrSEdVWJZR4ePoO/pRAlayUtG+gk=
Subject key identifier:   6C:F5:46:07:68:13:57:AE:59:93:EA:CD:47:8A:AF:E0:55:27:58:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492CB23907A55AFC11BE8B6D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/527f216e-2050-3f93-8935-a4362f9d63b7.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     397211
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:39:07:a5:5a:fc:11:be:8b:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=912318d0-cc2d-4c90-8f09-d6e58fc0fa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:be:b9:5b:89:b8:97:e1:11:69:5d:4b:07:
                    42:00:33:8f:43:ad:c5:33:64:ab:82:bf:01:4e:12:
                    24:9c:f9:90:66:bd:ae:03:e9:e5:d1:ac:46:e4:b3:
                    5b:e9:22:c9:4f:e7:0c:18:3d:1a:c7:32:0c:5f:66:
                    62:75:dc:41:b0:f3:70:80:f5:be:ea:d0:79:7a:9e:
                    ef:35:56:d9:df:69:99:ba:0b:52:2d:9e:aa:98:e5:
                    1f:df:20:7a:1e:69:91:0d:5a:90:8b:7f:17:73:b3:
                    21:dd:d0:a7:02:b7:5d:a0:4e:ef:7d:6e:b1:05:68:
                    6e:5e:34:29:8d:84:6d:a1:31:19:18:47:a6:41:78:
                    81:c1:e1:4e:f7:28:fe:c2:a1:34:42:bb:bc:25:f5:
                    0f:e5:f5:b4:a6:39:fd:68:b5:9a:2b:3e:38:99:c9:
                    73:c6:80:1b:c0:af:41:36:5e:4b:c6:7b:63:46:da:
                    1b:1a:16:93:3b:45:8a:aa:a2:8a:cb:35:23:8a:62:
                    65:1d:a1:80:bb:2c:a0:ff:af:19:21:63:9e:42:4d:
                    4d:bd:71:ed:a6:7a:1f:9f:d7:bd:17:ae:95:50:88:
                    c4:4c:d1:1f:55:66:7d:cd:a4:d8:e5:46:50:44:23:
                    0b:79:ae:ac:5d:4e:5f:db:95:a7:b2:42:55:20:88:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F5:46:07:68:13:57:AE:59:93:EA:CD:47:8A:AF:E0:55:27:58:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/527f216e-2050-3f93-8935-a4362f9d63b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:b7:a9:06:60:33:b8:ff:42:0d:a6:d2:02:b7:33:78:be:
         95:4e:60:96:56:8a:43:3a:ee:ce:6e:af:03:01:5e:42:aa:4f:
         f0:5a:60:14:e0:6e:10:c3:37:95:5c:58:18:5b:8d:ef:b9:37:
         6d:7f:be:35:fc:94:b5:b4:56:0f:64:c9:b2:39:0e:10:f0:79:
         5b:83:81:4b:ec:72:ea:7f:81:0d:15:af:11:3d:e2:14:30:ff:
         39:17:ea:92:1c:46:f2:03:20:26:1b:0c:d8:a2:fc:4b:81:ca:
         ed:60:fd:34:34:31:fd:f5:dc:ad:ad:4f:91:e3:40:cc:85:97:
         45:5c:5c:55:76:67:3d:5c:44:ae:bc:34:c9:c2:ad:cc:68:00:
         ca:c8:4e:9d:d6:77:be:96:af:7f:85:58:af:9b:1c:62:14:49:
         48:f8:ca:01:b6:b6:89:bc:cd:36:0a:50:d2:07:8d:f6:3f:96:
         9f:d8:80:c1:1e:22:73:27:be:77:e7:16:8f:58:76:66:fc:06:
         ae:fa:e2:55:df:63:6d:4d:e4:b4:a9:81:16:c5:cd:c2:0a:64:
         4f:57:c5:00:25:e8:7e:b9:2e:f3:20:7d:b6:80:ec:a3:6e:93:
         a6:ab:b7:d5:15:ec:a1:08:76:2c:4c:fe:67:d0:c6:99:22:8d:
         e4:06:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:44 2025 by rpki-client