Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa
File:                     a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa (raw, json)
Hash identifier:          b3E25TIzGRJc5deZFr9wPmlfosDP7Okd1mhjCl/hl9Q=
Subject key identifier:   C3:88:3D:28:C5:22:68:EB:0F:64:BA:B6:EC:E3:19:C7:8C:62:15:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3A897229CDC6573FDE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     396562
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:3a:89:72:29:cd:c6:57:3f:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=a33241f2-2f07-406b-858f-06656d7c52ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:c7:4f:32:6b:ba:af:77:28:2d:b5:22:b3:
                    0a:f7:d5:e0:98:53:e0:0f:66:7a:e4:94:bf:3f:66:
                    27:4f:72:67:2a:80:41:c4:95:02:11:51:47:92:18:
                    3b:aa:5c:bf:a3:ec:d7:78:c4:56:32:70:5a:f5:65:
                    ed:fa:66:ca:02:01:55:40:1e:99:53:8d:e9:1c:09:
                    a1:ec:9e:11:07:46:fb:d5:07:29:85:9f:52:b7:90:
                    5c:88:1f:37:8f:d8:20:e8:f9:0d:63:31:72:2c:64:
                    d9:d9:13:15:d0:90:10:c5:79:75:c7:9b:04:dc:c5:
                    a3:e4:20:10:d1:ba:26:04:72:7d:5e:da:23:3e:a6:
                    98:52:ab:21:b6:9a:a2:1b:32:8a:7a:36:32:c1:84:
                    46:e1:f8:93:d4:35:fd:d8:fc:b6:56:cd:7f:49:75:
                    a8:74:10:75:93:4e:d3:2d:11:c2:e5:20:ec:97:2e:
                    bc:be:3c:f3:94:d9:8b:c7:4e:ad:b8:67:78:c8:b0:
                    35:79:05:15:83:70:1a:b1:0b:ed:cf:c3:0a:51:64:
                    60:d6:65:5a:ff:14:6e:80:16:bb:d3:66:5a:b6:f7:
                    4c:1e:3c:9c:2f:86:80:e2:c0:c0:cb:56:7e:34:53:
                    8f:d9:47:e8:9e:79:a4:a8:19:09:56:9c:0d:1a:d1:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:88:3D:28:C5:22:68:EB:0F:64:BA:B6:EC:E3:19:C7:8C:62:15:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98f868c-7e2c-3247-9e5f-d8e16477fbbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2d:5e:ec:da:bb:b9:a2:1b:61:da:72:6b:10:bb:14:6b:2d:
         3e:f9:fe:0a:33:f4:22:58:46:f7:9f:07:e7:61:a2:f3:cd:59:
         27:e0:27:30:a2:72:77:a8:1f:64:a4:4a:9b:47:5c:fe:c5:0a:
         19:e6:25:52:75:76:58:e9:ec:4b:ee:89:e4:9f:38:fd:30:19:
         fb:6a:f0:32:e8:20:53:50:35:6a:3a:72:07:c4:bf:81:ec:6a:
         20:ee:e7:e1:28:eb:d0:d9:b6:4e:fb:24:f5:d7:59:33:d6:6a:
         01:80:6d:ae:f7:94:a8:bb:2b:16:a9:b9:2c:35:83:54:b0:b3:
         ab:ef:1e:76:7e:f7:d6:40:3c:01:69:51:0f:a1:54:91:12:38:
         f1:72:60:f8:f5:b7:3b:a5:4c:5c:a3:76:f9:59:78:7e:03:8f:
         7a:cf:80:04:d2:6c:8b:0e:0f:a2:ab:c8:2a:7c:bc:f2:a9:f4:
         71:ee:b3:f7:80:c3:56:79:c3:94:1b:e9:ea:5b:b1:3c:c8:b2:
         0d:27:00:28:03:05:f8:33:13:c9:ea:63:da:83:71:35:20:08:
         2f:20:20:4c:a1:93:fc:84:80:f6:69:f7:84:e4:2a:14:0a:22:
         2d:12:e5:c6:96:0c:f2:7a:d3:ac:c8:15:fc:0a:56:99:f6:cb:
         fc:3b:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:37 2025 by rpki-client