Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa
File:                     c2d11bd9-910a-308c-b35f-4b444c480099.roa (raw, json)
Hash identifier:          lMrFcMQ4xNWE/RrvpBKE2fnjPTLK99LSpiHDrxXKUdc=
Subject key identifier:   A7:95:B7:55:16:81:7D:59:AA:8B:18:10:84:A5:BE:07:C4:DE:38:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584953C45337EE6336DD6B70B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     396560
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:53:37:ee:63:36:dd:6b:70:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=88ede447-f609-43a8-82c8-e47b2fdc3e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:77:89:f8:b1:b3:51:01:93:13:2b:1a:80:79:
                    0b:e7:94:ef:4a:92:9b:6f:92:38:ae:ee:26:49:b3:
                    85:d5:5b:a9:a3:68:65:fd:31:e6:15:4b:a3:b0:b4:
                    40:5b:91:d4:19:e2:ed:45:a5:97:d5:38:e6:33:dc:
                    96:45:3c:b3:51:27:f5:fd:7f:29:4f:29:23:8b:1a:
                    65:83:42:91:a7:68:83:ed:bb:52:c7:31:a1:7c:5c:
                    b0:47:96:03:e7:a4:d0:f1:f8:17:21:63:21:76:1e:
                    43:32:95:76:9c:13:9a:c0:5b:aa:60:bb:80:9b:e3:
                    de:8d:64:06:35:ea:9f:5a:1b:5c:46:c5:3c:b0:c6:
                    9b:30:3e:13:3c:78:f7:1f:83:15:1c:52:66:e3:e4:
                    9f:d7:49:64:f9:ba:c5:95:bb:f7:fb:e9:24:84:f2:
                    92:24:a4:6d:9a:18:a6:13:54:7c:d5:94:e8:c9:12:
                    2b:84:b8:b5:2b:3b:d1:7e:7f:e9:ef:98:60:55:b9:
                    44:f2:71:8c:d9:c3:f8:f8:c9:22:a4:20:48:94:21:
                    53:5c:e1:93:23:50:71:9e:f0:f8:af:8e:3c:d7:10:
                    36:ea:84:c6:8a:5c:72:57:77:80:bb:57:90:c2:ad:
                    e7:8a:21:25:37:dc:4e:5a:de:ab:62:85:a0:0e:8c:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:95:B7:55:16:81:7D:59:AA:8B:18:10:84:A5:BE:07:C4:DE:38:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:31:88:b8:35:a2:f1:17:22:0e:7e:49:52:77:a6:31:cf:
         8b:99:20:eb:ed:d0:42:7f:7f:02:c3:0e:18:64:a2:71:e3:5d:
         84:8e:a4:c4:7c:f8:49:2e:c2:db:0f:73:8c:5f:44:bb:db:87:
         97:71:d8:06:bf:e7:50:30:62:a9:7b:30:b0:90:fc:21:8a:ad:
         f7:02:78:d6:e2:5b:2b:1f:22:e8:2c:2b:1a:1c:93:2c:67:37:
         d9:41:4a:f3:66:be:28:d3:48:f1:6e:ef:ce:fc:69:47:c0:13:
         f1:0d:54:d0:8a:21:f1:f8:0a:95:a8:f0:bf:db:5a:45:ad:b1:
         b3:8d:b4:43:7b:9f:b5:ef:ac:11:53:94:bc:75:67:f6:46:a5:
         c0:e3:50:8d:8f:37:67:f9:94:e3:a9:26:00:11:fc:ce:31:c7:
         4e:78:b8:03:11:ca:2e:6a:ea:96:6e:16:f4:31:d1:43:13:cc:
         2b:e2:6e:91:6c:d0:ad:1a:a9:f1:14:7b:bf:7a:30:3c:5e:6a:
         aa:11:67:85:33:a6:2e:e1:07:f1:6b:e8:8f:aa:5a:28:c7:19:
         8b:73:e8:54:85:ca:29:77:f2:c1:bf:1a:b6:f2:06:fc:b3:f4:
         dd:56:26:88:0a:5d:e5:f9:f3:b5:73:85:3c:63:dc:3e:3a:2a:
         ef:ff:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:51 2025 by rpki-client