Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9156a6f4-91bc-3a10-8346-02b18f956ccf.roa
File:                     9156a6f4-91bc-3a10-8346-02b18f956ccf.roa (raw, json)
Hash identifier:          Eq4uxaHy0Oae/aYse3rQFynkULyjGngey/0LncjAddw=
Subject key identifier:   BA:48:58:19:4A:68:3E:29:80:DC:6F:D6:42:1E:B1:0A:03:8A:44:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830BAEB2BE4D6FB4811C3F0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9156a6f4-91bc-3a10-8346-02b18f956ccf.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     20431
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ba:eb:2b:e4:d6:fb:48:11:c3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=937b51ee-3cb7-4ca2-bae6-f5b91ea2c40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:64:b4:49:9f:bf:be:2a:e8:2d:f7:b0:79:1b:
                    c3:40:5b:9f:28:5c:2e:90:8b:b1:9a:1e:51:77:bd:
                    12:57:31:40:62:8c:98:fc:e2:4a:48:50:48:5a:be:
                    12:96:24:39:17:50:6a:a1:2d:c2:d2:81:5f:a0:77:
                    77:70:e4:ad:a8:aa:6b:37:1d:4e:6d:a3:e7:73:34:
                    76:bc:54:ef:5b:0d:e5:5a:57:15:cd:79:ae:6c:6b:
                    77:97:22:f4:c1:fc:28:8b:64:16:ff:78:12:50:e1:
                    47:74:0e:bb:f8:2b:a5:d8:e6:9e:b9:30:76:a7:a7:
                    91:ad:c6:fb:2d:d6:34:68:71:7f:76:03:99:5b:59:
                    ef:2c:a0:b5:c7:b9:6e:6a:27:a9:28:67:72:bd:ce:
                    0c:dd:70:75:df:5a:4d:36:de:9c:b9:d5:bf:42:81:
                    9e:24:d3:42:5d:7b:5a:78:38:41:af:34:35:a1:ec:
                    e6:fd:eb:fc:c4:d5:11:e6:d8:76:56:ba:01:81:a1:
                    c1:ee:33:c3:4d:07:d8:4c:41:b7:0c:f2:74:55:38:
                    51:33:dd:50:19:e9:08:2d:e5:d8:01:ef:44:26:0b:
                    0f:8c:05:33:e6:5b:40:56:30:21:4b:45:d5:41:51:
                    f2:89:90:01:a2:9f:67:14:cc:63:24:24:84:a4:db:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:48:58:19:4A:68:3E:29:80:DC:6F:D6:42:1E:B1:0A:03:8A:44:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9156a6f4-91bc-3a10-8346-02b18f956ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:5b:3e:4d:75:c2:eb:f2:ec:86:ef:eb:85:74:4c:e6:fa:
         e1:8e:bc:e4:4a:61:ec:df:ae:c1:d0:d3:4e:9f:c3:5b:85:26:
         97:ec:88:63:0f:89:9d:56:e5:3d:0c:cb:24:66:2b:22:51:67:
         94:02:62:df:29:f0:2e:cf:83:57:1d:72:d3:42:38:92:59:24:
         fe:b8:06:f3:ab:0f:ce:50:7d:b4:1e:e3:43:56:cf:41:d1:f8:
         45:0e:fc:84:30:7c:5a:cf:4b:f1:6e:e7:fd:3e:bf:f9:1a:96:
         ad:4d:99:d1:13:6e:29:9b:3c:64:74:a2:19:1c:89:e4:1c:78:
         58:d1:1b:cf:8f:11:75:c3:82:c1:59:48:96:07:2e:89:51:fe:
         dd:f9:b7:2f:ca:77:bf:71:98:6a:5e:72:d3:c9:f3:65:d9:84:
         ed:68:36:dd:1d:35:51:30:b2:93:df:e6:d6:35:c9:e8:47:1f:
         39:0c:e2:61:32:b2:40:27:48:29:39:a6:ae:cb:e4:a6:0f:72:
         93:69:a4:09:8d:c3:a9:0d:d8:c0:72:77:d4:9e:f9:85:79:ee:
         fd:da:d8:b4:12:17:57:27:fc:d3:07:02:11:e6:60:04:dc:ed:
         37:55:9a:91:16:e6:f8:9d:45:18:c6:47:4b:c1:41:eb:4d:1b:
         47:54:54:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:08 2025 by rpki-client