Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac705bfe-3c6b-337c-bb75-0401a41fc910.roa
File:                     ac705bfe-3c6b-337c-bb75-0401a41fc910.roa (raw, json)
Hash identifier:          WZoRWrxsd2Dg6cXKHqI4fQZtsh9y9ZgVfM1moFoXlJs=
Subject key identifier:   0E:25:C1:A0:96:91:88:B8:6D:4C:A2:53:9D:42:72:FF:4A:DE:E5:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183ED371FCE73E0C9323C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac705bfe-3c6b-337c-bb75-0401a41fc910.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396592
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:ed:37:1f:ce:73:e0:c9:32:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=cd6ac1aa-9e22-4156-bfa9-c30e11633cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:78:dd:d4:e5:8f:d7:01:35:f5:0c:e2:9d:
                    80:ca:ae:81:ec:f3:63:b2:d6:12:59:06:8b:ed:53:
                    57:21:23:50:54:04:39:20:19:0e:a8:93:b3:88:17:
                    34:a0:91:76:39:19:a4:05:98:9b:e1:4c:8a:a2:3c:
                    0a:17:7c:b8:09:11:02:f0:70:9d:92:7a:82:d8:6f:
                    43:4c:c4:20:ca:6a:e5:41:c6:33:74:b0:70:99:93:
                    01:2f:4c:78:96:fa:a9:d0:66:33:e7:4e:b9:24:24:
                    b7:58:2b:a5:55:64:99:e5:3f:90:5d:98:52:76:da:
                    a9:24:c2:60:1c:f0:6e:de:29:80:d6:db:f6:af:47:
                    27:5f:be:cd:57:1e:5c:d9:9a:2b:f8:a1:f4:14:00:
                    23:49:42:7b:ef:2c:99:8b:96:e8:0c:47:8e:4b:60:
                    1d:de:4d:7b:7f:cd:4d:d4:87:47:45:b3:0f:fe:1b:
                    4d:84:12:7e:2c:af:19:14:8e:9b:c7:5a:d6:22:bf:
                    5b:58:2e:a7:d4:80:cd:e7:f8:e1:ae:ce:e9:ca:e1:
                    7a:3f:ed:6a:9f:8a:ea:14:d6:65:3f:97:25:4e:22:
                    82:9f:96:a9:6e:df:08:7c:25:13:ba:5a:38:6c:f4:
                    db:3d:cc:a9:3f:62:94:47:7a:8d:65:da:83:48:08:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:25:C1:A0:96:91:88:B8:6D:4C:A2:53:9D:42:72:FF:4A:DE:E5:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac705bfe-3c6b-337c-bb75-0401a41fc910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:67:12:7e:7e:ce:2a:73:dd:ef:db:37:66:b0:bd:12:44:ac:
         08:0a:d0:f5:2d:2b:96:a7:9e:f2:04:14:94:92:dd:29:6f:8b:
         00:9a:2c:ba:a4:e9:c4:4b:60:62:83:1d:85:85:f4:84:79:e4:
         36:2a:c0:ae:2e:ef:be:1b:21:e6:28:34:87:c9:52:a6:f7:03:
         f5:1a:73:91:18:0d:d4:47:28:97:12:38:f1:7b:b3:37:d7:ec:
         2e:40:f9:e1:ca:da:33:2e:cb:bb:7a:11:40:1f:96:e5:2b:fe:
         96:c5:65:3e:ca:ef:e6:af:5c:a0:45:f1:8d:59:47:75:a1:9a:
         1f:a5:c9:94:ff:07:83:ad:45:dc:03:73:95:a6:24:00:36:3e:
         6a:2b:01:dd:51:69:36:f9:fb:f7:f4:32:18:8c:f7:f8:e9:6b:
         c0:a1:00:c7:f5:be:25:66:b8:e1:b5:da:60:2e:ff:73:b0:de:
         f3:3a:74:2f:9f:82:fd:70:3d:f0:a8:25:c9:3b:8b:2c:79:9e:
         38:ae:08:5c:8d:d7:3f:59:01:19:d0:c7:26:a9:be:3b:ad:f6:
         bf:a4:30:ea:03:3c:ad:7a:77:da:e1:5a:d3:35:8d:56:38:3c:
         77:87:fe:c5:43:7a:39:48:68:e7:9f:b7:3f:b1:03:be:0e:9b:
         5a:8a:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:06 2025 by rpki-client