Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa
File:                     b8fd1043-04ca-38de-928c-018b86fed03f.roa (raw, json)
Hash identifier:          VrVAX81rPmnHT43CzwEmViFBQzNbrDtzxFvCGjsqKbo=
Subject key identifier:   D8:C3:82:05:8E:72:8F:4F:80:66:39:11:55:1C:17:C6:0C:87:B6:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183F77314137D2F2BC69A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397208
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:f7:73:14:13:7d:2f:2b:c6:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=6e1f0a93-85de-4bf2-8bba-9bdc6a373992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:e6:43:4a:17:48:1e:53:1b:7d:39:b3:58:
                    e2:01:6b:5d:dd:35:b2:e9:20:f7:87:44:59:54:4d:
                    05:c0:c2:2b:ad:9f:08:5f:59:41:2c:43:4a:c0:06:
                    2b:36:9f:8c:98:32:e5:71:18:f3:30:95:e3:1e:03:
                    b7:f6:f2:db:b2:a3:25:2f:49:d6:56:63:9e:cd:6d:
                    65:20:75:61:4b:2a:4d:dd:eb:a1:59:68:21:fc:e0:
                    ec:2a:84:ca:65:b2:d3:32:02:c4:9c:1d:dc:87:00:
                    ea:57:8e:3d:31:d1:36:19:9f:d0:67:fd:2b:03:8d:
                    11:30:b7:df:4a:4a:48:dd:8a:7b:f4:3e:7e:b9:b6:
                    98:61:a0:86:b1:33:1a:cd:05:7a:e3:9f:1a:11:6f:
                    a5:13:3b:86:a2:82:81:3e:3b:d4:07:1f:79:00:6b:
                    5c:58:cb:be:e8:30:72:78:61:86:ed:77:cb:76:af:
                    17:bc:45:50:74:ce:cc:63:f1:75:72:5a:30:a5:25:
                    4b:0a:f7:cc:c9:32:ae:c6:b7:b1:50:34:92:49:1e:
                    c7:f3:8c:bd:8b:01:f2:ed:a0:01:29:5c:68:97:e4:
                    69:2b:a8:48:da:5c:39:bc:21:cf:33:d3:af:76:79:
                    1d:a8:98:34:00:4d:83:42:14:0c:0a:f0:b8:a7:20:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:82:05:8E:72:8F:4F:80:66:39:11:55:1C:17:C6:0C:87:B6:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:ed:ef:dc:38:ae:cf:d9:76:71:72:f6:23:85:ae:8f:14:
         0b:dc:c2:e7:72:c7:37:da:eb:bb:77:28:34:95:77:c2:9d:9f:
         74:5c:91:db:46:8c:e7:e2:b0:c1:f0:2d:6f:5f:6d:b9:92:fe:
         69:4a:3f:39:0b:f3:c9:db:10:33:f0:7a:53:86:d6:60:a9:37:
         af:df:09:6b:88:aa:2d:5a:ac:b7:fe:8d:fd:e6:55:82:09:ae:
         a3:15:81:90:30:4c:49:eb:4c:bd:9c:9b:69:b9:ca:f6:54:97:
         c5:a1:ae:1c:83:29:52:e0:fe:72:e8:6a:65:50:2c:13:91:31:
         6c:4a:12:d0:9a:54:58:21:3c:0f:9b:aa:66:58:6f:fe:28:52:
         cf:41:28:44:03:56:24:5b:14:ab:e7:26:29:4a:88:5e:64:4a:
         48:c6:92:16:26:12:00:97:26:df:21:5b:d6:78:26:b8:96:7e:
         dc:10:58:68:23:c6:2e:22:b7:02:27:98:2d:87:95:24:80:79:
         17:f3:fc:21:7f:f7:3b:f4:2d:7e:5a:e9:0e:78:c8:cd:44:75:
         98:0a:68:ce:95:e7:fe:6f:b6:47:d7:32:43:47:9b:d8:89:14:
         b3:c7:2e:e2:c9:e3:7e:ec:90:ad:7a:f8:4f:e9:e1:36:be:c2:
         aa:79:85:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:28 2025 by rpki-client