Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa
File:                     ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa (raw, json)
Hash identifier:          gThNJd2mDZjjWmYpkkPTXd971QHvhVNxV4Zi1HV44o4=
Subject key identifier:   AB:21:10:7E:7E:3A:DB:01:D5:30:65:28:E9:22:CE:50:DE:E5:8B:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844021AB7F840D2CF5F040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa
Signing time:             Thu 30 Jan 2025 13:46:17 +0000
ROA not before:           Thu 30 Jan 2025 13:46:17 +0000
ROA not after:            Wed 30 Apr 2025 12:46:17 +0000
asID:                     397201
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:40:21:ab:7f:84:0d:2c:f5:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:17 2025 GMT
            Not After : Apr 30 12:46:17 2025 GMT
        Subject: CN=741f4e0a-f14e-46e3-805f-194627210613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:39:11:e8:7a:d3:ca:d7:fc:dc:78:c7:29:
                    95:0a:25:8f:1b:a1:06:ed:a1:41:c3:79:55:80:7d:
                    fd:53:44:72:20:3d:f8:6e:0c:f6:07:7d:c0:e5:52:
                    fb:51:9a:59:48:24:20:1d:39:cd:42:3d:88:d3:8f:
                    ad:71:44:10:1d:69:ad:31:52:91:0d:65:a5:e7:ca:
                    6e:0b:43:46:22:3c:1c:bb:b0:76:48:cd:20:99:73:
                    5d:16:92:91:7d:83:7f:29:fd:ee:01:c7:e2:5b:ac:
                    59:e2:fd:59:38:2e:66:ea:98:59:c7:51:e7:cf:75:
                    63:57:c9:7c:fb:40:64:88:c7:5c:cd:f7:59:8c:1e:
                    e6:5d:2b:65:6b:d0:2c:03:6e:f8:43:bd:c2:be:33:
                    f4:72:9c:27:49:dd:4e:15:43:aa:90:88:1c:bb:34:
                    46:2c:1c:ed:d5:47:55:0d:c2:57:64:5b:12:fc:4b:
                    23:11:ff:11:89:e2:a9:8e:59:05:b3:03:59:4f:c5:
                    c9:90:ac:6f:3f:fc:08:49:5f:30:f4:32:6b:c2:e5:
                    c3:ad:3c:f2:3f:22:2e:86:fb:9d:77:47:b7:ef:8d:
                    84:04:72:80:cb:eb:a4:6b:d5:b4:7e:b1:0b:a9:49:
                    8a:ed:14:40:de:7b:55:7f:a1:19:93:c1:96:bd:8e:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:10:7E:7E:3A:DB:01:D5:30:65:28:E9:22:CE:50:DE:E5:8B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a9:e1:8f:47:32:37:32:3a:ff:02:ed:61:92:41:cc:6c:98:
         64:39:10:80:9d:12:f4:31:d4:91:b3:9e:76:bb:ec:2b:3f:0f:
         36:66:30:8a:6c:3f:51:30:55:ca:75:c8:9d:d0:ca:23:64:a3:
         b7:b2:32:f8:e8:04:6a:8b:40:f8:c8:38:8c:bb:05:06:58:16:
         6d:d6:4e:da:f5:83:d6:ee:60:fc:bb:cb:44:55:f9:0b:76:a1:
         5d:19:c1:55:40:e8:22:56:01:26:9e:2a:6c:30:e8:52:2a:68:
         93:14:de:d2:df:e6:cf:ef:99:bc:48:e1:1d:a7:96:14:c7:47:
         13:c6:da:f6:02:aa:9c:74:ff:73:11:9d:98:c5:b5:e6:3a:4a:
         0b:5b:2a:27:6a:cb:34:85:40:ed:85:27:db:72:79:44:c5:da:
         29:58:9e:1f:4b:40:68:6d:77:b3:15:34:2b:f1:c8:02:a6:56:
         18:2b:e0:e5:58:68:3d:58:c7:1f:d0:a5:ff:b4:71:3c:ff:9e:
         89:38:25:04:68:8c:46:31:24:6c:d6:ad:e4:ef:f5:d1:ff:4a:
         16:11:64:6b:96:af:ea:79:1f:f4:65:bf:28:25:f3:af:df:3b:
         e4:b8:0d:be:4f:f1:d9:19:fc:98:74:2e:94:8e:61:73:c1:07:
         a5:79:e4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----