Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a15dab8-f929-3c24-b2c8-f01107dc71de.roa
File:                     8a15dab8-f929-3c24-b2c8-f01107dc71de.roa (raw, json)
Hash identifier:          knIlukJO0d1weSqDYTA7RJj8jaVgGQ6RM++pI3URxRI=
Subject key identifier:   CD:46:97:DA:2F:72:C8:F8:7B:47:76:D8:D2:9D:E0:22:18:C4:95:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B3AB2CAB9173522ACCAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a15dab8-f929-3c24-b2c8-f01107dc71de.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     396569
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:3a:b2:ca:b9:17:35:22:ac:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=a6a78986-43ae-4f58-9572-1caa8b75d9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cd:0f:0c:8e:0a:2b:cf:20:44:de:60:f7:57:
                    dc:44:f7:b4:80:f4:a3:c9:9b:3e:b3:f7:fb:87:e6:
                    17:93:e6:46:d2:eb:5f:8d:c8:34:c0:37:87:51:7e:
                    30:67:82:74:79:73:42:98:a8:c6:f3:f2:45:7b:b9:
                    84:a4:cb:48:5b:4d:fb:d2:fa:a8:d3:23:95:95:c0:
                    32:14:ed:ce:45:73:68:79:44:a5:61:57:db:7b:ba:
                    10:14:5b:cb:b8:24:ee:b5:c7:71:e4:15:a9:d5:5d:
                    6d:52:b9:51:69:a9:85:02:d4:a5:3b:af:36:33:65:
                    53:2f:fb:af:c2:61:6b:d3:da:d1:98:3a:93:cc:06:
                    da:94:2d:c8:4a:0e:50:34:fd:d3:b8:44:c0:e8:f0:
                    6c:5e:5c:6c:ed:cc:6e:33:aa:ef:e7:60:4a:fc:45:
                    06:5a:71:00:49:0d:cb:52:e8:33:ea:08:63:16:bc:
                    08:a4:e8:bd:cd:68:f8:5b:11:fd:97:4e:98:ee:fd:
                    a2:9b:46:8b:73:a9:30:5b:8d:b9:cd:88:ae:b0:ff:
                    11:70:3e:b2:91:88:8d:c5:8d:65:c3:b1:c0:4f:28:
                    1b:26:21:7b:e8:ae:3a:a3:2a:5d:09:c4:23:66:9e:
                    cf:da:01:e2:63:06:4f:99:e1:c6:16:80:9f:2f:c2:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:46:97:DA:2F:72:C8:F8:7B:47:76:D8:D2:9D:E0:22:18:C4:95:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a15dab8-f929-3c24-b2c8-f01107dc71de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e3:63:8d:b1:b4:b8:f0:ef:04:d0:dc:f1:37:eb:d6:da:8d:
         4e:29:d1:93:10:b3:ce:a6:2d:1a:39:67:cf:d0:05:7e:63:44:
         cb:c9:c9:61:bf:ff:28:6e:bc:df:fb:ec:d5:b0:ea:09:0a:db:
         90:c6:fd:df:64:09:49:85:2b:d2:a2:6e:db:35:ed:d5:b8:0b:
         9e:d2:d0:c3:58:30:b3:c0:76:d6:c8:50:da:0e:1c:20:b1:0e:
         1d:f7:b2:4d:d0:9a:e7:3c:cb:47:1b:76:eb:04:68:19:24:ee:
         5d:4d:31:f1:8e:42:34:18:c7:f2:ab:22:36:14:78:4c:a4:0e:
         d0:12:0b:48:1f:cf:01:92:31:de:dc:5f:0b:76:c8:86:c4:70:
         6e:51:2b:d1:4b:dd:ea:7c:0e:48:d1:93:01:bb:ed:b5:b4:2f:
         80:f3:d8:ff:83:d4:86:10:28:cb:37:90:73:94:ac:4d:49:09:
         ea:eb:10:8e:be:26:33:8e:f2:90:75:ab:60:e8:3d:e1:c1:53:
         b9:92:00:6c:4e:e5:ca:15:24:a4:94:65:bf:6d:52:13:6f:cb:
         d3:27:3a:66:81:3c:5d:25:8a:f8:10:cb:49:e5:fa:ef:96:c2:
         07:1b:99:76:5e:9c:4a:5e:e9:77:f9:95:0e:02:cf:9e:27:e0:
         a6:f5:fc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:35 2025 by rpki-client