Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6951c975-218f-321a-86a7-34389e4dcbd9.roa
File:                     6951c975-218f-321a-86a7-34389e4dcbd9.roa (raw, json)
Hash identifier:          rbs9xpX+R0xVIfTka4jaOGsjVE902aTgBZY0zcDA6YU=
Subject key identifier:   93:57:AD:70:F3:8D:43:6B:BF:9F:26:5C:D8:89:D7:12:6A:CA:13:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C68C647A8C35B2E3E650
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6951c975-218f-321a-86a7-34389e4dcbd9.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396549
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c6:8c:64:7a:8c:35:b2:e3:e6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=5f1ccffa-c234-421c-8d9e-d28d4027f4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:55:1f:bf:55:2b:99:59:e5:a0:d1:da:81:99:
                    86:bb:0e:f1:f5:2e:aa:26:6f:51:93:7f:50:39:36:
                    1a:b6:2b:9c:9f:fa:67:45:a2:94:ec:27:a9:a6:aa:
                    55:d0:28:ac:cf:de:32:5e:60:96:09:81:74:9f:b9:
                    ae:a8:fa:67:f9:68:06:24:a6:7b:cb:a8:0c:2b:6e:
                    bf:79:e9:92:ca:7d:d9:3d:e1:f4:e8:06:39:ea:07:
                    8b:fa:98:7f:cf:f3:46:d7:6d:5b:00:c7:b7:38:cc:
                    fe:58:75:cb:60:2f:ae:ab:04:41:6f:2e:4f:ef:69:
                    e7:33:2e:3c:4e:3d:e8:f6:18:4b:32:bc:d5:aa:de:
                    9d:23:8f:6c:19:80:86:b1:31:52:7b:71:82:fb:b2:
                    b4:c0:cf:37:83:55:56:ee:b1:81:3a:92:5f:d7:cf:
                    fd:09:0f:9f:0b:40:ce:14:95:b2:16:11:97:26:ba:
                    54:89:26:68:fa:62:e3:f7:38:c5:51:0b:c0:16:b5:
                    6f:61:c5:62:ec:88:76:a0:e5:03:05:16:b1:3c:79:
                    82:b7:ec:24:2c:f3:7b:24:0c:f6:57:e3:2e:67:2b:
                    8e:64:c4:a0:f0:46:e9:b5:1f:25:a6:79:be:56:c3:
                    de:fd:f2:d3:ba:78:52:cb:89:5b:50:07:c0:2f:60:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:AD:70:F3:8D:43:6B:BF:9F:26:5C:D8:89:D7:12:6A:CA:13:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6951c975-218f-321a-86a7-34389e4dcbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:43:6d:65:75:56:6e:c0:21:ce:c9:a8:19:43:02:c8:58:
         26:1e:69:8c:52:25:b7:6e:15:22:61:69:24:9d:5d:09:42:a6:
         c6:80:29:2e:23:62:83:96:fc:94:12:ad:40:f1:c1:e8:f2:21:
         0a:61:c1:4f:c5:32:16:b8:6c:46:0b:3d:97:b9:c8:59:de:94:
         84:98:f1:7d:fb:54:8b:a2:59:42:05:8a:e9:d5:9f:df:fc:f4:
         b8:0b:e8:d7:4f:02:49:2a:5a:ab:8c:07:bc:23:31:53:3b:8e:
         9f:d1:79:e8:90:b2:3c:34:7a:13:82:eb:96:12:ee:ff:17:a6:
         49:26:ec:e8:4e:15:8a:04:4b:cb:1e:69:dc:c8:2d:f1:09:e7:
         41:5d:a7:99:94:4c:8a:c0:0b:a2:ea:81:4b:ef:ec:a3:f1:dd:
         62:66:2c:ba:d8:06:3d:da:68:29:e0:52:fc:c9:78:e9:be:54:
         20:5b:a7:d6:62:b1:7d:2c:1b:4d:64:12:bc:cf:a4:58:aa:5e:
         a7:09:ff:90:f6:59:d5:04:91:e3:5e:62:90:81:83:b8:41:f7:
         a6:f9:04:18:32:bf:8e:bf:e9:35:81:c9:6e:7e:c0:3f:c6:a7:
         b2:f5:df:97:3c:f7:e8:b8:f1:6a:bb:00:0a:e1:dd:e8:52:43:
         3e:0a:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:44 2025 by rpki-client