Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a2081a3-8aeb-3cc9-a2bc-6cb8f7e7425e.roa
File:                     5a2081a3-8aeb-3cc9-a2bc-6cb8f7e7425e.roa (raw, json)
Hash identifier:          Df35CL25VX9YO1jJrxj1KRIr2/iAEQ+4LSXmR+twkeM=
Subject key identifier:   0E:BA:D6:C6:97:0D:F5:6F:6D:D0:95:47:53:5C:94:E4:3B:35:36:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DB90AADB570D1F89B988
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a2081a3-8aeb-3cc9-a2bc-6cb8f7e7425e.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     19836
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:db:90:aa:db:57:0d:1f:89:b9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=e8264dc1-0aaf-4774-86b7-f0ba61b64988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d4:19:84:82:e7:50:76:bf:3f:9c:b8:df:21:
                    98:cf:68:27:e1:3a:cb:80:a5:5d:71:38:d1:f6:79:
                    61:c1:08:85:f8:a8:ae:84:eb:9e:ce:c7:31:a1:b3:
                    58:4d:f2:c9:ff:f6:35:26:17:c9:ce:0b:65:46:e0:
                    27:17:2b:b9:ef:aa:99:5c:98:32:50:e3:c9:a1:0b:
                    c7:a7:37:c4:ee:15:39:01:f7:46:96:5d:d0:9d:27:
                    45:01:43:33:a3:58:11:7c:60:c9:00:bf:6a:91:81:
                    c8:3a:20:1b:95:e0:a5:99:6b:e6:a1:6c:0e:4b:5d:
                    66:95:a8:6c:bc:87:16:51:ec:27:f8:53:10:c0:e3:
                    3d:f4:21:1f:3e:fd:2d:a8:51:05:00:fd:ed:fa:19:
                    38:62:d6:c3:7d:31:70:97:84:07:6a:4c:80:71:b0:
                    d8:8c:10:c6:de:af:4d:2d:2f:65:09:62:82:d5:a3:
                    6b:b9:01:51:4f:cb:89:2d:78:fd:4a:5b:40:23:7c:
                    b9:1f:17:a2:39:76:2b:3e:ca:c2:19:74:b7:25:dd:
                    4e:78:79:74:65:cd:66:3d:16:83:26:56:c5:13:38:
                    97:03:0b:8a:9d:a2:58:8e:6b:61:ea:94:32:fe:83:
                    2f:e5:94:3a:25:5b:7f:16:ee:3a:30:68:87:9e:b7:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:D6:C6:97:0D:F5:6F:6D:D0:95:47:53:5C:94:E4:3B:35:36:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a2081a3-8aeb-3cc9-a2bc-6cb8f7e7425e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:cf:9e:2d:19:a9:39:a4:5d:40:57:cb:13:ab:b2:ff:64:5f:
         b4:fb:85:b6:56:1f:2d:6c:5f:eb:55:2c:74:5e:90:31:e1:f5:
         04:4e:5a:0f:29:b0:ba:7e:53:0b:91:92:48:8b:ce:77:1d:88:
         61:59:4f:d8:86:da:aa:49:14:0c:cb:a9:9d:62:b6:35:c2:76:
         f5:66:e5:1a:3a:99:49:48:ca:83:0e:67:14:4c:df:9b:68:9f:
         56:28:7f:4d:74:87:f2:70:04:ab:67:38:96:f1:1c:6b:e2:34:
         ac:94:24:73:68:d2:fd:f7:b8:db:ba:7b:62:1a:ca:dd:28:d6:
         2b:f1:d0:af:22:38:05:17:f9:05:cd:f7:6d:e3:fe:1f:46:d6:
         46:55:2f:44:78:04:c7:04:b8:6d:5e:a6:1b:ba:53:21:0d:c2:
         ab:88:fc:52:d1:bc:7e:b9:be:0c:b3:d4:91:1f:7a:32:d7:3b:
         10:66:bf:26:78:51:e1:e5:f4:fc:03:70:23:91:4a:d2:0a:f3:
         1c:c2:c3:ab:51:38:f4:61:7d:ac:5f:42:7f:32:01:b0:35:cc:
         05:02:aa:39:ca:91:a1:59:6e:8e:a2:8e:d6:ff:19:12:f5:8a:
         67:cf:29:9a:b1:98:13:77:50:4c:d2:76:17:8a:12:89:7e:df:
         80:2f:46:07
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkhg9uQqttXDR+JuYgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
ZTgyNjRkYzEtMGFhZi00Nzc0LTg2YjctZjBiYTYxYjY0OTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dQZhILnUHa/P5y43yGYz2gn4TrLgKVdcTjR
9nlhwQiF+KiuhOuezscxobNYTfLJ//Y1JhfJzgtlRuAnFyu576qZXJgyUOPJoQvH
pzfE7hU5AfdGll3QnSdFAUMzo1gRfGDJAL9qkYHIOiAbleClmWvmoWwOS11mlahs
vIcWUewn+FMQwOM99CEfPv0tqFEFAP3t+hk4YtbDfTFwl4QHakyAcbDYjBDG3q9N
LS9lCWKC1aNruQFRT8uJLXj9SltAI3y5HxeiOXYrPsrCGXS3Jd1OeHl0Zc1mPRaD
JlbFEziXAwuKnaJYjmth6pQy/oMv5ZQ6JVt/Fu46MGiHnrfqJwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA661saXDfVvbdCVR1NclOQ7NTboMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWEyMDgxYTMtOGFlYi0z
Y2M5LWEyYmMtNmNiOGY3ZTc0MjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC7z54tGak5pF1AV8sTq7L/ZF+0+4W2Vh8tbF/rVSx0XpAx4fUETloP
KbC6flMLkZJIi853HYhhWU/YhtqqSRQMy6mdYrY1wnb1ZuUaOplJSMqDDmcUTN+b
aJ9WKH9NdIfycASrZziW8Rxr4jSslCRzaNL997jbuntiGsrdKNYr8dCvIjgFF/kF
zfdt4/4fRtZGVS9EeATHBLhtXqYbulMhDcKriPxS0bx+ub4Ms9SRH3oy1zsQZr8m
eFHh5fT8A3AjkUrSCvMcwsOrUTj0YX2sX0J/MgGwNcwFAqo5ypGhWW6Ooo7W/xkS
9YpnzymasZgTd1BM0nYXihKJft+AL0YH
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:58 2025 by rpki-client