Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d66455c-df12-3b81-968e-da47313aca58.roa
File:                     5d66455c-df12-3b81-968e-da47313aca58.roa (raw, json)
Hash identifier:          E5W8HPopIoB4Nnm1+NR3IEFxb8DHCWf1XVc9FIXxGdk=
Subject key identifier:   C2:34:52:51:69:BF:1F:5C:DD:C9:F9:59:4A:67:2D:26:89:AA:D8:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F5C5502BEE8528916640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d66455c-df12-3b81-968e-da47313aca58.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     397195
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f5:c5:50:2b:ee:85:28:91:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=a9f4a6d4-562e-4cd4-a59b-7b1f656aa647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:c8:c2:f1:9f:df:f8:1b:9e:be:31:b0:2c:
                    f2:de:23:b1:a5:1b:fd:c4:0b:ef:18:05:a8:e9:4c:
                    1f:2d:99:4c:9f:62:7a:17:87:46:a6:25:63:6f:13:
                    fe:32:bd:13:f0:14:ad:18:0d:19:4d:10:fe:a2:d9:
                    52:c4:9f:d2:f4:84:ae:22:59:b1:fb:11:20:f0:d1:
                    9d:c7:1b:a7:4f:84:31:11:47:55:93:79:8a:21:40:
                    2a:08:5f:15:56:30:06:61:60:b2:95:ff:6b:b8:ac:
                    0e:bc:33:2a:97:75:81:9f:ec:0a:f8:35:b9:4c:9d:
                    2d:c6:bc:24:a6:f5:23:99:c3:57:a0:e5:90:73:95:
                    3a:fe:60:2b:71:0c:d0:05:b6:9d:a5:3c:22:6c:d6:
                    36:7e:a9:4a:c9:b2:0c:44:45:5d:a1:47:c4:2f:f6:
                    97:62:e8:eb:6c:f1:48:fc:f2:fe:0f:1f:bc:1d:de:
                    de:6f:dc:4f:1c:b0:04:aa:b1:17:88:e4:b0:80:6a:
                    cd:7f:e3:0a:14:5b:90:66:67:b0:e1:ac:ff:69:31:
                    ec:2a:7d:58:23:68:1b:ee:ac:1f:25:c1:d8:21:3c:
                    3e:86:4c:79:72:81:be:af:dd:5b:0f:83:4b:41:d0:
                    e2:61:ac:88:1d:e1:23:2f:08:15:a4:9c:86:68:98:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:34:52:51:69:BF:1F:5C:DD:C9:F9:59:4A:67:2D:26:89:AA:D8:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d66455c-df12-3b81-968e-da47313aca58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:f5:be:d7:0f:de:4d:01:8f:a6:0e:93:42:da:df:ac:02:a8:
         7d:12:ab:36:e5:87:26:2d:51:2b:03:fc:8b:aa:c2:8e:57:c6:
         e7:13:b4:52:fb:89:ed:b8:97:10:6f:26:88:d2:57:3f:9b:53:
         74:3f:7f:01:6c:4e:44:be:33:7f:a2:29:01:d0:b4:37:3f:8f:
         69:83:b6:db:af:24:29:0d:53:b9:d6:e7:3e:c8:d3:4c:d0:60:
         e0:47:b3:e7:b4:d1:02:ad:67:98:8f:97:ef:93:66:df:4a:6a:
         24:b6:d2:ab:36:6d:3b:9e:5a:53:d9:fe:98:26:d7:23:fa:2b:
         d5:8c:d3:64:b5:91:d8:db:e6:1b:dc:30:e4:e2:0d:ac:d2:64:
         e9:9b:61:69:57:89:39:2a:e9:75:36:86:c1:bf:6d:eb:5a:c2:
         78:0e:d0:42:dd:58:cf:b5:33:ad:0c:46:b8:e3:38:2d:10:4c:
         22:af:e7:0e:7c:70:94:e4:c8:f4:ab:64:5a:7d:43:30:04:fd:
         97:b2:c2:ac:17:69:c0:ad:33:57:a4:70:12:08:95:bb:26:44:
         3e:3c:f4:7d:ba:4e:d3:52:99:a5:b9:a5:ba:9e:45:0e:7f:97:
         43:28:d3:27:d9:f3:3a:14:86:bb:37:4c:3f:b2:d8:19:44:45:
         6b:e5:2e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:31 2025 by rpki-client