Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a292407e-f674-3e25-b092-5fcc284254e3.roa
File:                     a292407e-f674-3e25-b092-5fcc284254e3.roa (raw, json)
Hash identifier:          yrhMQIwVf/ri0KUdUUjkD6q6CkI7BVhPtW9Ruf49g1Y=
Subject key identifier:   5A:D3:ED:F7:44:9A:60:FB:F5:72:36:97:22:DC:E8:8D:C4:05:3C:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830BD41257FE05A231FD600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a292407e-f674-3e25-b092-5fcc284254e3.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396568
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:bd:41:25:7f:e0:5a:23:1f:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=888c2f96-edd2-4dae-8612-a72878058bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d0:72:95:28:e9:6a:48:22:c3:10:32:6c:95:
                    5b:ce:42:1a:75:be:df:8a:9b:e8:03:3d:bc:cc:29:
                    d8:91:01:e7:a1:a4:b7:06:da:b2:9d:66:96:7f:5a:
                    c2:c4:e7:70:89:b8:7c:13:f4:4c:d6:79:d3:50:89:
                    d8:38:a6:ae:8a:75:38:ab:49:e6:e0:83:95:e8:a1:
                    0b:c0:12:b3:23:66:f1:53:4e:0d:da:1b:09:a6:af:
                    41:5e:ab:c9:98:b1:43:d1:9c:ec:22:2d:c5:9a:91:
                    5e:4e:18:ff:64:c4:39:ad:cb:b6:14:12:49:33:1e:
                    bf:96:4d:6e:1b:7c:c0:08:50:b0:87:ef:0a:50:22:
                    f2:34:4c:2a:af:99:20:a4:4e:02:0f:99:7d:a7:48:
                    2f:b7:1f:4b:05:a3:bb:f8:6c:fe:eb:4f:53:12:9a:
                    a1:3e:38:3e:7e:98:d2:0a:f9:48:53:05:df:18:ab:
                    10:73:3f:31:8c:6d:23:e3:be:45:29:a9:e9:f1:1a:
                    0c:27:15:26:65:87:52:2b:3f:b5:14:f9:62:14:01:
                    5c:4d:69:2b:d0:06:dd:32:2c:c9:9f:66:82:a7:33:
                    ad:58:5c:2d:5f:04:df:c1:75:58:81:04:92:c5:1c:
                    e4:db:d6:14:d1:56:f7:48:cf:2e:26:ae:d7:93:df:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:ED:F7:44:9A:60:FB:F5:72:36:97:22:DC:E8:8D:C4:05:3C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a292407e-f674-3e25-b092-5fcc284254e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:e3:6a:55:14:fb:e9:01:3b:ed:53:2f:2c:ba:8e:f4:2e:
         4a:57:84:5c:bd:09:4d:93:02:4b:0c:b7:54:ce:7e:da:be:59:
         6b:7d:0a:9c:d0:64:bb:5f:2a:cf:be:68:1f:6d:28:d9:ab:a3:
         bc:f0:2c:39:61:c7:f2:3c:99:53:e5:bc:95:5e:a7:a6:86:22:
         eb:72:79:4a:6e:61:2f:0d:ed:dd:b8:b3:ff:8b:c9:bf:11:f2:
         8d:19:e0:fb:15:5b:96:fc:dc:23:cb:df:a2:bb:a8:e7:2d:14:
         be:6d:69:97:96:c9:8e:c4:b3:68:c5:82:40:c0:4d:e0:95:ac:
         31:0f:b1:bc:9c:e2:ca:04:ae:5a:1f:91:fb:6f:0e:1f:4b:38:
         23:40:4c:4a:93:5e:e8:69:4c:be:c0:a5:e5:75:bb:9a:55:3e:
         c8:6d:d1:75:18:58:b8:49:f8:84:f0:3c:80:be:0e:b1:8c:85:
         43:e0:9b:57:6d:34:d5:be:a1:c6:95:28:b7:06:9e:4a:2a:3b:
         a4:f1:aa:41:7a:08:e9:63:5d:87:2f:6b:96:02:71:7a:12:b4:
         61:f3:ef:80:00:3f:ca:30:a0:be:16:2c:a4:13:d5:6a:35:3f:
         69:78:e7:38:cb:ba:4b:a1:c8:aa:eb:0d:c2:8f:3c:f3:22:fe:
         5b:0c:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----