Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a4c7021-b327-3053-bb35-ceece7ef2004.roa
File:                     6a4c7021-b327-3053-bb35-ceece7ef2004.roa (raw, json)
Hash identifier:          jleNkD5u/WsdNqsjJN5Isdf8xXJumZLuxj1R9UCEslc=
Subject key identifier:   6D:57:D1:A2:48:6E:6B:B7:59:91:68:31:82:C2:65:06:99:47:A6:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584894A5DF2992452FC986148E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a4c7021-b327-3053-bb35-ceece7ef2004.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     36627
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:df:29:92:45:2f:c9:86:14:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=f8a05031-5c23-4afb-aae4-b21124a80bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:a6:e4:a0:aa:c9:c6:4c:18:6c:48:78:f7:
                    49:cd:81:3b:c3:47:95:32:12:58:d8:ef:83:a2:f9:
                    54:6c:c0:1b:0a:cd:6f:ba:5e:e4:3b:9d:0a:d0:c7:
                    d5:02:c0:4c:84:79:3d:55:93:ad:a3:d3:4a:07:cd:
                    19:64:66:4a:ca:ce:94:12:60:a1:11:fc:39:10:a6:
                    b9:f1:be:18:3e:c8:c9:35:de:51:8d:63:b8:40:bb:
                    15:57:92:dc:13:09:c2:3e:de:1f:22:11:d7:13:b2:
                    29:05:5a:7b:79:3b:7f:0d:eb:ea:1a:35:16:e9:e1:
                    22:3b:eb:de:6d:2b:61:8f:20:cf:79:25:f5:7e:c3:
                    67:af:84:53:d5:6e:66:12:e4:d4:04:cb:3d:4d:5a:
                    2d:74:1d:3b:3e:46:7a:b3:ad:3d:b4:5d:fd:6e:f6:
                    b9:95:95:9e:71:ea:03:42:e4:39:d5:6a:49:9d:5c:
                    b9:80:f0:96:95:cb:a7:c5:71:e3:b6:5f:be:f6:5b:
                    a3:41:e5:3c:da:bf:8b:23:da:52:e1:b4:24:c4:4a:
                    a9:ae:d3:ff:cd:a2:19:b8:68:90:b4:28:52:bb:99:
                    af:f4:e7:6a:bd:2f:a9:ac:b9:b9:39:38:5e:60:d9:
                    34:6a:4f:af:f0:1f:68:12:87:29:78:e4:6f:98:72:
                    c6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:57:D1:A2:48:6E:6B:B7:59:91:68:31:82:C2:65:06:99:47:A6:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a4c7021-b327-3053-bb35-ceece7ef2004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ed:0a:9e:ac:2a:c4:24:7b:0b:9d:bd:52:7a:61:74:2c:c5:
         a9:d6:3b:75:8d:71:db:20:96:e8:0b:c9:ae:dc:be:7d:46:68:
         dd:0a:56:d9:53:32:8b:4d:ba:5a:50:56:34:09:a6:27:70:c2:
         87:78:95:c8:6a:0c:98:f5:a4:81:3b:ef:3b:de:d0:69:e7:ad:
         d3:b5:d6:c4:45:eb:08:a2:db:a9:2b:2b:98:ed:1b:2d:ca:15:
         02:da:da:bf:8b:5d:12:12:6f:81:cd:f4:07:13:39:cc:a1:f7:
         25:db:19:d3:bf:07:5c:78:77:e1:bc:ae:31:e0:b3:b0:26:3d:
         bd:a1:88:53:7a:af:57:1b:03:42:9c:bf:43:9e:65:85:40:c2:
         8d:61:48:f2:d3:83:45:d1:6c:e1:2f:22:90:ed:e3:fe:f1:be:
         7f:a3:88:64:ba:79:39:c9:81:89:23:c4:76:f1:07:08:9d:db:
         a4:2b:59:cc:44:04:e7:b0:ec:67:5d:a8:04:db:0d:a5:cf:ce:
         13:bf:92:06:3d:e1:38:da:51:c6:13:10:eb:f3:f0:21:ab:9e:
         93:0e:9b:92:83:c7:11:d8:ba:52:99:ca:82:78:6a:cc:47:e7:
         bc:f4:ca:7d:4d:28:7a:0e:02:18:b5:03:0e:33:00:33:49:16:
         e1:d8:d2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:49 2025 by rpki-client