Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8aed41-84fc-31ef-aa48-841fce2f0fab.roa
File:                     5c8aed41-84fc-31ef-aa48-841fce2f0fab.roa (raw, json)
Hash identifier:          HMQs8oMRhv41IIjiuB7KzgPdnipewUx30OIdFfmmpGM=
Subject key identifier:   36:57:58:C1:03:CF:21:9A:03:9A:55:E2:57:58:40:3D:B8:42:8F:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F59218321FD00DF300A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8aed41-84fc-31ef-aa48-841fce2f0fab.roa
Signing time:             Thu 23 Jan 2025 13:38:27 +0000
ROA not before:           Thu 23 Jan 2025 13:38:27 +0000
ROA not after:            Wed 23 Apr 2025 12:38:27 +0000
asID:                     396554
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:92:18:32:1f:d0:0d:f3:00:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:27 2025 GMT
            Not After : Apr 23 12:38:27 2025 GMT
        Subject: CN=0b773b74-200d-411f-a0fd-2d57096e9e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:e8:d1:4a:4a:d8:5d:fe:95:65:8b:1a:f2:
                    2a:09:17:b1:3f:20:38:88:a8:39:07:5e:39:a7:5d:
                    8a:20:10:b5:e2:2d:c0:f3:75:4c:4e:3e:15:9a:42:
                    05:ce:ad:1d:c4:df:75:fa:f0:2b:6d:62:6b:ae:bd:
                    a6:cd:d2:88:e0:d4:9e:a1:2f:66:00:8a:98:a0:61:
                    04:f7:81:36:55:b9:bc:09:33:9d:e1:c4:12:56:8a:
                    23:59:36:d8:85:6f:16:26:04:41:da:9a:0e:ae:8f:
                    ab:31:90:f0:00:22:0b:a5:66:bd:ea:be:ab:9b:d2:
                    c4:4a:5d:d1:3e:d0:0d:67:7d:dc:46:d7:62:2a:fe:
                    b8:e8:06:35:60:da:64:76:17:d0:ed:fd:33:69:04:
                    ca:fc:71:ae:59:c2:f8:a7:a0:df:2a:00:a2:d6:33:
                    d3:e3:d4:ba:f3:7f:8d:b2:5a:46:bc:46:65:3e:95:
                    c0:61:e9:70:27:f8:06:30:07:79:e6:e8:0e:62:5a:
                    7b:1d:55:68:47:ef:7b:66:ba:ca:d5:78:8c:3f:a0:
                    bc:eb:bc:f2:eb:72:63:04:da:24:52:1a:be:fd:b4:
                    0b:22:01:60:84:4b:ed:66:64:84:5c:a0:68:b8:c0:
                    9a:ec:59:8b:f9:5b:10:07:83:ab:2b:a5:78:e9:09:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:57:58:C1:03:CF:21:9A:03:9A:55:E2:57:58:40:3D:B8:42:8F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8aed41-84fc-31ef-aa48-841fce2f0fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:76:cc:f4:d1:8d:c6:d2:90:ec:ce:94:79:05:58:e9:96:a3:
         db:78:d7:63:76:f9:d9:0d:34:a8:c8:3e:b1:e8:c7:9b:e9:20:
         fd:18:8c:f7:64:ce:a3:52:09:ba:16:8c:66:19:d1:d8:52:8b:
         66:e1:57:8e:e5:88:f2:01:ab:7d:4b:03:db:bf:dc:37:91:a1:
         12:f3:c0:c1:fb:fe:23:3f:02:fb:51:fa:97:c3:a0:7a:4a:e0:
         27:e2:2a:1a:4f:b6:97:66:2f:c8:bb:a1:27:aa:cb:9c:67:d4:
         58:8f:d9:77:8b:db:86:52:6d:0c:8b:ae:52:aa:36:4b:56:8e:
         6b:a8:ae:ee:a0:4f:95:57:ee:e8:a5:b9:9f:b1:07:0a:12:12:
         0a:98:c9:0b:31:6d:92:5a:b5:72:dd:fa:b3:fa:b6:7b:c6:d4:
         f3:88:91:62:f3:47:83:f3:1a:5c:fd:1d:cb:97:b0:2d:a7:76:
         85:ac:2e:e2:ec:91:a9:93:5a:7f:d4:d1:ad:8f:ed:f6:ac:19:
         4d:e8:1d:a9:6b:d6:6d:fc:50:86:d4:49:a5:0f:d4:41:9c:00:
         07:45:13:0e:42:58:28:7a:0d:a3:a9:48:52:82:e8:c9:18:da:
         1b:6d:f7:25:39:a4:1d:f8:a6:07:9d:88:a5:99:34:3e:9e:10:
         c3:0d:ee:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:53 2025 by rpki-client