Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa
File:                     a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa (raw, json)
Hash identifier:          2oXp4xFzXFwyXLLHGhAGLvbBOTMg86g+b5PX8zew22E=
Subject key identifier:   4C:6D:90:9C:10:33:41:7D:1F:C0:F6:AD:63:B3:51:28:0B:8D:02:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C13DECEF6308C49CC500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396580
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c1:3d:ec:ef:63:08:c4:9c:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=8facfcb7-a9b8-4b88-8c29-00e30a5299fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:3d:ff:ea:e2:fe:22:16:03:2b:2a:19:a9:
                    37:ad:bb:84:f0:f6:8e:35:7b:ed:a3:81:4d:40:4a:
                    0f:d4:89:e2:17:c3:40:cd:4d:48:74:f5:10:3c:2e:
                    3a:0a:f4:9f:35:a3:0d:c6:35:d5:cd:7f:cc:4f:f2:
                    9b:a0:33:8b:8f:58:ed:12:3c:9f:fe:be:4f:92:5f:
                    fe:af:8d:d2:1a:21:96:2a:ec:ac:df:d3:29:25:c1:
                    63:02:ae:a8:6a:09:c3:79:66:5d:5f:75:de:03:87:
                    18:0c:9c:01:6b:30:38:22:73:ee:a9:e3:5c:c4:f8:
                    91:5c:22:5b:88:9d:58:a4:30:c3:89:44:09:25:a2:
                    94:cf:17:7d:e6:1b:e2:e9:89:56:6a:13:52:e9:65:
                    9c:71:91:a9:f7:0a:79:1a:ed:8c:12:2b:ea:99:bd:
                    e4:54:f4:e3:7b:f6:65:82:57:da:16:c0:7d:93:a6:
                    29:ea:93:49:2c:44:2c:4b:e7:8a:85:9a:10:fc:13:
                    3b:00:c5:36:0f:c4:c4:33:fb:b5:fe:c6:01:ff:f5:
                    a1:27:ad:d8:8a:64:20:57:22:fd:94:fa:51:85:8f:
                    52:fa:1c:fb:68:db:9d:8b:f7:76:9d:ba:1c:f4:af:
                    eb:5a:60:16:e1:d4:47:2a:b2:91:63:0d:28:f7:eb:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6D:90:9C:10:33:41:7D:1F:C0:F6:AD:63:B3:51:28:0B:8D:02:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a40f5b56-0c03-3ca0-b6d5-547c3c6964f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:69:eb:50:5d:02:c7:ef:a0:98:88:51:99:7f:da:41:1f:36:
         2c:83:1a:e5:4f:32:bc:c8:68:fe:01:d0:96:bc:48:06:c4:07:
         99:d2:61:04:43:d5:bb:bb:aa:42:a2:3a:66:68:c2:75:6c:a5:
         84:a3:ce:6a:2f:0d:5e:f4:c0:c1:6d:1a:fe:8e:56:6e:92:e2:
         1f:d8:fd:52:14:6a:09:98:d4:27:76:23:db:88:b7:32:ec:af:
         51:ab:8d:7f:ad:12:62:85:19:35:66:f7:4d:f0:e8:5c:b9:47:
         c3:a4:2b:6c:bd:37:d4:93:56:7f:f3:57:84:c6:fe:c2:1e:c0:
         43:14:35:19:8f:32:ab:d9:23:4d:4a:c3:8e:cf:25:18:45:07:
         ef:1b:b7:d2:5a:01:6e:24:ea:e7:8d:d4:c1:6c:0d:05:87:34:
         96:7f:40:da:e3:9d:c9:76:d2:ac:33:96:07:06:bc:6e:dc:e6:
         3e:30:e7:b2:4b:c7:62:2a:d2:21:3a:ad:fd:13:d7:df:64:c9:
         bf:2e:3a:7c:bf:3a:da:a6:ee:0e:01:55:88:96:a2:78:67:52:
         58:39:5c:22:55:1e:77:bb:e5:7a:bb:04:ee:1b:6d:a2:99:1c:
         b1:aa:bc:12:05:c7:59:ea:33:d1:bb:8f:6c:d6:3e:e3:6c:31:
         9b:0b:9b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----