Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/755a2c7b-d747-3ee9-83ab-5799ad70b4a2.roa
File:                     755a2c7b-d747-3ee9-83ab-5799ad70b4a2.roa (raw, json)
Hash identifier:          DXk8R4ijSE4aiziK5vdu+YXORzKGusHzpivc2gZcwrM=
Subject key identifier:   D6:97:B4:D9:9C:DD:5C:E8:B3:3C:F8:58:EC:F8:EA:59:DB:37:6D:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B4C0ECB66377B743B62C5680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/755a2c7b-d747-3ee9-83ab-5799ad70b4a2.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     396592
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:ec:b6:63:77:b7:43:b6:2c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=71d4702e-ac8d-4e72-8685-d3a551734e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:01:09:fa:68:90:c5:86:1e:7a:04:64:dd:f0:
                    55:e7:66:2b:2f:43:33:a5:8f:34:24:86:49:c8:27:
                    44:00:d4:bf:b3:a5:99:35:22:5c:9b:6f:af:92:14:
                    fb:38:c6:35:05:40:8c:2e:69:00:1c:bd:9a:bf:f3:
                    b7:e8:41:c0:f9:37:6d:d1:ca:64:8c:df:76:c4:74:
                    ec:44:73:c2:09:e2:82:4f:b6:ad:fa:2e:18:42:17:
                    98:f3:46:b0:78:a6:a3:59:92:5d:19:4f:6f:37:49:
                    62:0d:fd:02:74:9a:e4:de:aa:f8:ff:65:04:07:47:
                    d0:12:18:12:34:b5:8d:73:95:1e:5f:76:08:af:fe:
                    83:20:11:04:70:14:b4:eb:ea:f6:58:6e:c0:5c:e5:
                    9d:e8:0c:c7:f6:21:34:96:ce:1c:5e:99:a2:80:71:
                    29:31:04:21:77:f1:5a:c3:4f:33:a8:12:cc:56:6b:
                    41:59:a6:42:f1:ed:29:ad:8d:cf:89:a1:1a:cd:c1:
                    2a:83:28:79:6f:49:01:5a:7a:b8:7f:4b:b3:9b:fc:
                    b1:cd:21:f4:2e:06:12:7e:92:76:60:b1:d5:29:b6:
                    c6:ad:a5:11:a3:46:6d:90:56:f2:64:f0:eb:b8:16:
                    90:60:6f:22:e9:32:c1:b2:dc:99:29:36:22:9c:da:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:97:B4:D9:9C:DD:5C:E8:B3:3C:F8:58:EC:F8:EA:59:DB:37:6D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/755a2c7b-d747-3ee9-83ab-5799ad70b4a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b0:f9:9d:23:3d:49:4d:14:29:73:5a:6e:e4:a3:ed:0b:39:
         9b:c3:97:e2:69:e6:6e:10:73:9e:86:18:a4:ef:45:f0:50:13:
         62:59:aa:50:4c:d0:3a:0b:06:c1:14:54:83:c1:20:2e:28:1d:
         be:c0:e9:7e:48:8d:ff:2f:85:c2:b8:40:be:87:dc:09:a8:2a:
         3b:17:3c:43:3b:b4:43:0b:e7:94:bf:3d:a2:ca:4f:b8:98:5a:
         92:66:31:cc:db:d1:86:b8:a9:94:3d:5a:9a:da:d9:12:59:8b:
         61:a6:e4:62:a4:88:49:e5:c9:46:5c:81:0d:f7:68:6f:11:7f:
         9c:76:48:ea:82:93:d7:74:fa:45:89:53:17:d6:dc:4a:ef:03:
         bc:67:31:fe:c6:19:35:c5:cc:e9:26:95:8c:59:e0:71:9e:bc:
         d1:b9:9f:c6:ea:fb:a3:f1:02:de:37:f8:d7:d6:ee:38:d1:89:
         87:1a:89:43:76:62:5c:ef:37:ed:16:f2:ca:ac:2f:d8:80:6e:
         60:65:54:b1:75:3d:1a:6b:19:12:68:57:7b:af:89:69:66:f2:
         87:34:2a:ef:93:bf:ab:9c:db:ca:53:e1:71:0e:9f:58:f4:6f:
         e6:d8:b7:5c:e2:b6:ea:4f:9c:52:aa:2b:b2:3f:75:e3:5c:6e:
         81:81:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:48 2025 by rpki-client