Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa
File:                     bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa (raw, json)
Hash identifier:          xYNu1B+j5YD7lVr5sgKO3Frj8+v+EFWO0yls4gSlHmg=
Subject key identifier:   0E:7A:62:74:85:67:7F:55:63:30:AD:FF:25:43:54:E2:AD:17:52:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848B7844BCECACF98DFBF6D7AE8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa
Signing time:             Thu 30 Jan 2025 13:46:23 +0000
ROA not before:           Thu 30 Jan 2025 13:46:23 +0000
ROA not after:            Wed 30 Apr 2025 12:46:23 +0000
asID:                     36621
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:84:4b:ce:ca:cf:98:df:bf:6d:7a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 30 13:46:23 2025 GMT
            Not After : Apr 30 12:46:23 2025 GMT
        Subject: CN=c76044b7-b17b-473b-ac1c-6366a0436a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:b7:cb:51:a2:07:a1:b7:34:d4:c1:71:18:
                    2f:14:a9:c7:0c:f3:b0:be:ff:4a:b6:1f:a4:70:0e:
                    05:bc:61:fd:04:1c:b6:6c:68:91:7a:1e:47:3a:6d:
                    06:65:83:11:70:cd:f2:0c:19:09:45:ff:53:12:4d:
                    15:5d:7a:3d:03:cb:1e:8a:fc:8b:34:dc:a4:f1:82:
                    9b:87:d3:c1:d7:36:47:98:4c:a2:d3:73:b7:61:a8:
                    10:8f:22:2c:3f:74:fb:77:77:18:ca:99:4e:92:a4:
                    fc:0c:95:8e:9f:8c:32:85:16:f7:28:60:0e:a5:69:
                    34:26:3e:7c:d7:ef:83:8b:6b:fd:45:db:44:71:03:
                    6f:e2:ed:31:a2:e9:fd:4a:48:47:61:92:43:1e:06:
                    47:6d:86:aa:95:6c:95:9f:0f:ab:9d:52:8c:ef:d6:
                    5d:89:02:93:ff:8e:77:16:e2:8a:1f:46:22:f3:4d:
                    c0:80:57:cc:6a:9d:99:17:f5:e6:28:2b:4c:91:35:
                    47:25:b5:1f:f8:67:04:4b:75:da:e1:92:bb:da:bd:
                    09:ae:ef:b9:cd:5a:f8:89:64:4d:0d:cb:93:dd:45:
                    97:f4:a0:87:b1:7b:3e:8e:73:85:dc:0e:b1:f1:1d:
                    78:ed:f4:50:1d:da:b6:b4:88:a2:98:cf:71:ab:86:
                    b4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:62:74:85:67:7F:55:63:30:AD:FF:25:43:54:E2:AD:17:52:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd2f2a3f-6407-31e6-8478-9a7142db6ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:3d:a9:a6:08:64:d0:b9:45:ba:31:53:82:74:3c:f5:c0:ed:
         75:a8:1c:3f:e6:11:1a:77:78:74:0a:ae:fd:ec:02:f0:b8:7e:
         b5:ac:3f:65:fd:9f:d5:d7:99:c4:27:d7:18:d8:02:93:0a:5d:
         48:09:06:c1:3e:c5:7a:ea:a9:03:01:b9:2c:4a:f1:5c:6d:64:
         66:66:bb:25:a7:2d:44:ab:99:65:54:db:46:b4:fe:c6:75:40:
         67:8b:f9:69:85:04:15:5b:86:c2:36:19:cf:ab:24:28:6d:56:
         0a:70:5e:5e:50:3e:e2:20:29:34:b3:99:3a:6a:82:d2:fa:6b:
         ea:67:15:97:46:8c:19:f8:c9:af:ad:09:ba:c6:ca:17:c9:7f:
         ca:1d:8e:0a:36:6f:b0:d9:ae:9c:e9:d5:62:24:0c:cd:5d:56:
         52:5d:66:8d:db:09:ee:3b:7d:df:72:9c:3e:35:ae:8f:9e:3a:
         73:bd:1e:0b:b6:c9:9d:3f:3d:f0:8d:e7:fc:06:b8:89:ac:6e:
         c3:1b:29:4e:4e:f5:78:8c:33:f0:4c:c4:ef:9b:4b:bf:8c:75:
         ab:a5:d2:c9:07:be:95:95:89:8a:e4:29:0c:4f:24:48:7d:92:
         ec:05:75:77:77:17:fb:aa:71:68:1e:36:38:de:00:54:71:cd:
         44:35:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:54 2025 by rpki-client