Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7009ff81-7d8c-3d45-9ff2-ed833878cf12.roa
File:                     7009ff81-7d8c-3d45-9ff2-ed833878cf12.roa (raw, json)
Hash identifier:          fSdOmFVfiqFS6tiCLYdMB1PrzONPtrO06c0UiEXpteQ=
Subject key identifier:   E7:A7:29:D4:38:80:8C:89:7D:7D:07:1D:76:E4:36:60:CC:CA:68:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0F30802E9DD0048ECF7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7009ff81-7d8c-3d45-9ff2-ed833878cf12.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     396605
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f3:08:02:e9:dd:00:48:ec:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=eafa8aab-989d-4b64-a950-70742749706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:e2:ed:9e:69:b5:28:91:00:98:86:37:13:
                    fc:d6:fc:70:3f:13:98:8d:ef:68:8e:1e:c9:70:df:
                    a5:6a:8d:42:f4:b3:b3:60:b5:21:79:59:64:ea:23:
                    1f:61:70:3a:45:ee:4c:25:b6:62:f1:ea:fe:17:1f:
                    af:0e:a4:3f:4d:61:d2:a2:07:fe:43:71:59:e2:95:
                    be:dd:b8:23:ab:fc:f4:30:2f:b2:95:f2:7f:1a:38:
                    46:93:99:c5:3a:e2:53:a2:2b:e5:82:2a:9b:d1:39:
                    3f:0d:c5:5d:bf:06:01:ac:3c:ea:f8:ea:f5:94:e6:
                    57:e3:39:e0:bc:15:a3:bf:0e:77:73:6b:e2:64:b3:
                    b5:ea:a8:fd:60:19:3e:02:10:a7:eb:a4:c1:48:b7:
                    f6:53:f6:a3:18:68:70:65:e0:0d:0c:b8:2d:ca:e6:
                    05:fa:68:6a:8a:76:16:5a:71:e4:d4:dc:b9:89:d6:
                    b0:e0:88:24:6a:eb:60:b5:0f:7e:7e:fa:25:41:14:
                    6b:42:fd:df:79:ee:5f:6e:84:55:24:a5:a7:43:97:
                    cf:7f:76:84:f6:9c:45:eb:62:2b:7d:c7:18:73:18:
                    16:12:61:4d:e4:a0:46:73:29:c6:3b:ba:5a:b4:33:
                    08:c3:c0:bb:0c:f5:74:36:64:c8:15:4b:68:bb:87:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A7:29:D4:38:80:8C:89:7D:7D:07:1D:76:E4:36:60:CC:CA:68:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7009ff81-7d8c-3d45-9ff2-ed833878cf12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:4b:30:89:22:ca:b5:79:86:1e:d4:4d:fe:7a:4f:d8:b9:
         35:54:63:09:be:cc:7b:55:c9:39:a5:c7:21:87:9e:55:b6:e4:
         6c:98:e9:f7:0a:04:69:6f:d1:e5:bb:09:86:2a:f7:4f:c8:78:
         a5:d7:a2:57:c5:f0:8b:ce:6d:79:39:e9:2f:84:fd:24:52:a7:
         20:f6:b3:4f:f1:05:dc:1a:71:06:5e:0b:89:07:bc:36:1b:1c:
         c0:f6:f5:df:90:50:20:7f:77:bd:62:0a:7e:dd:3d:6b:6c:34:
         7b:aa:bf:6b:13:46:76:92:70:1c:94:ec:31:22:f1:77:d7:7b:
         61:e5:90:9d:85:f5:d2:bf:f6:33:cd:db:2a:31:4e:3f:05:e6:
         45:f4:2b:1f:fb:bf:29:92:40:b0:3e:9b:9e:a4:b3:b8:e5:78:
         22:41:9d:fa:87:82:ca:17:6e:a3:f1:35:40:a0:5b:05:a9:7a:
         7e:83:22:38:4e:75:41:03:b7:2c:51:cd:2c:79:6e:e4:b8:19:
         53:78:66:7d:e9:ec:d9:21:3d:20:7c:db:78:3c:1f:5e:8b:21:
         cd:24:4e:2e:30:47:6e:63:d0:39:8f:b8:cc:30:f3:72:24:49:
         d4:ad:80:e4:fb:c7:52:3c:22:69:dc:ac:74:b5:74:5c:84:0e:
         24:85:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:47 2025 by rpki-client