Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa
File:                     b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa (raw, json)
Hash identifier:          hDpHxFpWX0KYwyg/kNESD0BwZYOxuMGgBt+YsrrfJ7Q=
Subject key identifier:   B1:F7:82:82:CD:90:37:66:55:68:80:D1:B0:6B:D7:33:33:9C:71:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F77560F9F0913C65AC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     397207
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f7:75:60:f9:f0:91:3c:65:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=040ae79f-f350-48f4-a5c6-6d6d2fcfdfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:24:2e:b1:d3:60:dc:3a:23:92:de:cd:67:
                    35:dd:31:70:46:21:ef:3a:c1:62:98:24:c4:10:5f:
                    88:d3:30:72:03:e9:0a:e0:9c:bb:9e:ff:55:02:36:
                    1b:ad:9e:c8:c5:99:54:eb:3a:02:a5:f5:cb:73:fc:
                    b8:67:53:92:9f:1b:fb:e5:ba:b5:14:b1:49:91:90:
                    6d:6c:9a:05:d5:1c:2f:39:ca:cc:32:41:83:17:fe:
                    b9:59:c1:4f:1c:2a:c9:23:19:9f:08:a3:59:0d:ec:
                    96:75:81:eb:ca:a4:9b:37:d7:2f:4d:4a:24:cc:dc:
                    aa:18:c2:37:2a:1b:88:f0:a9:01:26:37:c0:03:ac:
                    c9:5b:a9:3f:99:3d:43:f3:9e:27:73:d3:1f:57:48:
                    a8:00:fc:5f:1d:ea:0f:0d:e4:b0:82:34:a7:7c:7a:
                    fd:ed:aa:6a:71:b0:08:6a:44:9d:f3:b5:a8:90:56:
                    3a:dc:6a:6f:4d:46:aa:87:45:d0:cb:84:f1:20:18:
                    3f:6f:88:eb:64:3b:4a:27:4e:b9:7f:9a:e7:39:07:
                    f4:ab:3e:58:9f:48:9d:91:77:ec:3e:14:37:c8:62:
                    87:0e:d4:42:48:6b:1d:9b:35:8f:bb:79:c5:39:7e:
                    72:e6:a8:36:66:81:3d:d3:2e:7e:85:c0:0b:3b:09:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F7:82:82:CD:90:37:66:55:68:80:D1:B0:6B:D7:33:33:9C:71:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e0edea-1c5b-3d91-84a9-42a58c30f690.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:97:e3:58:ee:25:88:87:2c:c3:d0:ca:00:c3:4d:1d:75:96:
         a3:eb:c4:93:7b:05:b6:3d:7e:a1:8e:a5:d7:5e:c6:7a:6d:1d:
         f2:a9:af:c3:e9:aa:01:45:15:43:c2:4a:67:53:64:20:8d:a3:
         67:d3:05:ba:bb:7c:a0:f2:2e:13:5b:3a:de:5b:63:cd:f8:0e:
         06:b5:de:cd:52:25:ab:7f:9e:a2:f2:d4:4d:1e:ad:53:ab:2a:
         1e:05:0f:3f:3d:c2:d9:c6:3a:4a:e2:cd:c2:a1:54:25:0d:d1:
         52:23:45:39:7a:f2:45:ea:a0:6b:16:7e:d5:ad:31:26:53:9b:
         41:fd:26:54:99:2a:b4:b4:b7:75:c8:0c:73:db:35:a3:94:4f:
         c5:05:50:08:71:76:e5:e3:91:c6:47:c8:df:b3:10:36:18:5d:
         db:a6:09:04:c6:46:73:1f:9e:b3:de:91:38:72:07:8c:fc:2d:
         25:8e:8f:2a:b6:d2:aa:8c:4e:52:9c:c0:4b:2b:b3:b3:03:c6:
         58:2d:19:19:8a:53:ed:03:0b:b1:2e:0a:ed:9c:8e:23:30:70:
         f7:44:6f:ca:31:34:bb:72:2d:5e:7d:4c:70:de:23:44:0d:d2:
         ac:2e:ed:73:39:f7:8d:fb:be:39:47:be:88:e0:fb:7c:3d:a1:
         b3:37:c3:7f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/d1YPnwkTxlrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MDQwYWU3OWYtZjM1MC00OGY0LWE1YzYtNmQ2ZDJmY2ZkZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQEkLrHTYNw6I5LezWc13TFwRiHvOsFimCTE
EF+I0zByA+kK4Jy7nv9VAjYbrZ7IxZlU6zoCpfXLc/y4Z1OSnxv75bq1FLFJkZBt
bJoF1RwvOcrMMkGDF/65WcFPHCrJIxmfCKNZDeyWdYHryqSbN9cvTUokzNyqGMI3
KhuI8KkBJjfAA6zJW6k/mT1D854nc9MfV0ioAPxfHeoPDeSwgjSnfHr97apqcbAI
akSd87WokFY63GpvTUaqh0XQy4TxIBg/b4jrZDtKJ065f5rnOQf0qz5Yn0idkXfs
PhQ3yGKHDtRCSGsdmzWPu3nFOX5y5qg2ZoE90y5+hcALOwnl7wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFLH3goLNkDdmVWiA0bBr1zMznHErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdlMGVkZWEtMWM1Yi0z
ZDkxLTg0YTktNDJhNThjMzBmNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAyl+NY7iWIhyzD0MoAw00ddZaj68STewW2PX6hjqXXXsZ6bR3yqa/D
6aoBRRVDwkpnU2QgjaNn0wW6u3yg8i4TWzreW2PN+A4Gtd7NUiWrf56i8tRNHq1T
qyoeBQ8/PcLZxjpK4s3CoVQlDdFSI0U5evJF6qBrFn7VrTEmU5tB/SZUmSq0tLd1
yAxz2zWjlE/FBVAIcXbl45HGR8jfsxA2GF3bpgkExkZzH56z3pE4cgeM/C0ljo8q
ttKqjE5SnMBLK7OzA8ZYLRkZilPtAwuxLgrtnI4jMHD3RG/KMTS7ci1efUxw3iNE
DdKsLu1zOfeN+745R76I4Pt8PaGzN8N/
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:07:46 2025 by rpki-client