Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c53c9850-fc8f-36e8-822e-73db0a88153f.roa
File:                     c53c9850-fc8f-36e8-822e-73db0a88153f.roa (raw, json)
Hash identifier:          I1Kqza5dmrZuxbeTmE2f0PIpt41jYuVVgNbwZzHSgGw=
Subject key identifier:   F1:9A:FE:53:B1:BC:6E:C7:2F:56:49:2F:85:F7:8E:9F:9D:74:94:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858494733F97E5A59B9FDA8636D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c53c9850-fc8f-36e8-822e-73db0a88153f.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     36632
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:f9:7e:5a:59:b9:fd:a8:63:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=e63714fa-0b0e-4d29-b4d5-3249142b9381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:31:b1:32:7a:71:ba:97:ef:86:ea:b4:91:
                    26:68:2d:8a:10:db:c9:b9:e5:8a:ed:11:75:c1:da:
                    71:2c:f3:0b:83:63:e3:01:c1:8b:89:d7:e3:b1:83:
                    6b:72:27:d7:04:52:28:81:c5:8f:ef:e7:4e:29:f8:
                    f6:48:da:61:6c:1f:23:d9:76:48:0c:3a:b7:42:d9:
                    d7:36:a8:42:f5:31:55:31:d2:a9:53:d7:88:ed:1d:
                    d9:7b:ea:ab:6d:a3:18:5e:01:ae:bb:99:05:85:7d:
                    80:88:5d:25:a6:09:48:c0:ee:d0:61:10:57:5a:81:
                    70:52:3b:53:05:74:bf:05:9b:cb:38:6b:33:ea:9b:
                    54:e7:2d:b0:14:40:dd:87:4a:24:af:dc:d1:2f:d1:
                    f2:9c:a9:fe:a3:a4:8b:0f:87:af:dc:fa:15:b4:dc:
                    b9:c7:1f:bb:d7:a4:1f:67:32:f9:71:f8:e2:ec:9f:
                    3b:2d:cb:f4:40:cc:8b:a5:43:83:9e:d4:55:03:5b:
                    3c:4f:4a:6e:28:74:d5:40:81:be:b3:43:5e:46:aa:
                    cc:13:a3:10:90:8a:79:40:53:90:43:20:e7:d5:d0:
                    a6:35:35:81:64:90:ab:2a:94:c3:9b:6b:6f:15:b5:
                    59:68:83:48:9f:3d:07:9b:ca:b4:e2:73:9e:fc:a8:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9A:FE:53:B1:BC:6E:C7:2F:56:49:2F:85:F7:8E:9F:9D:74:94:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c53c9850-fc8f-36e8-822e-73db0a88153f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:fb:05:3d:23:8d:aa:c4:68:8e:b9:96:df:4d:42:c1:55:bd:
         15:d0:9b:f7:f3:0e:1e:30:0e:0e:ee:09:12:4b:c9:c7:2f:62:
         b0:3c:d2:85:be:86:cb:7b:17:32:34:ac:cb:b7:f8:f6:aa:74:
         a5:99:9f:87:2f:1c:3f:0a:da:b7:9b:cb:48:b9:c3:a6:2c:53:
         db:9e:8e:b1:b1:74:4d:d1:45:61:d1:96:2f:8a:b5:95:fc:20:
         32:c7:cd:4a:24:db:af:53:89:17:80:c4:45:db:84:e6:c4:30:
         6d:b4:2d:ca:1e:59:74:51:ac:87:78:84:05:cd:d9:97:df:58:
         9a:49:cf:28:48:b3:f5:55:d7:54:16:4b:be:b5:73:c8:d3:7f:
         4b:a4:ba:11:e5:c0:5c:85:26:74:5d:b9:fc:35:7a:8c:50:bc:
         d2:3a:84:9e:0a:0e:1c:17:df:08:0e:b5:11:d2:ad:23:ab:f2:
         a8:e8:9c:78:bd:68:af:51:e3:3c:09:b1:5a:88:ab:d8:3b:96:
         46:70:71:79:9a:a7:02:2d:16:d5:f8:7c:79:5b:06:22:0f:70:
         ea:a2:61:ce:d1:81:d2:e6:d1:68:ea:c2:e1:cd:cd:87:76:10:
         19:30:b2:c4:79:82:c3:0e:f8:e0:bf:34:6f:f7:32:b5:26:25:
         78:ac:55:80
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/l+Wlm5/ahjbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZTYzNzE0ZmEtMGIwZS00ZDI5LWI0ZDUtMzI0OTE0MmI5MzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH4xsTJ6cbqX74bqtJEmaC2KENvJueWK7RF1
wdpxLPMLg2PjAcGLidfjsYNrcifXBFIogcWP7+dOKfj2SNphbB8j2XZIDDq3QtnX
NqhC9TFVMdKpU9eI7R3Ze+qrbaMYXgGuu5kFhX2AiF0lpglIwO7QYRBXWoFwUjtT
BXS/BZvLOGsz6ptU5y2wFEDdh0okr9zRL9HynKn+o6SLD4ev3PoVtNy5xx+716Qf
ZzL5cfji7J87Lcv0QMyLpUODntRVA1s8T0puKHTVQIG+s0NeRqrME6MQkIp5QFOQ
QyDn1dCmNTWBZJCrKpTDm2tvFbVZaINInz0Hm8q04nOe/Kiz+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPGa/lOxvG7HL1ZJL4X3jp+ddJSnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzUzYzk4NTAtZmM4Zi0z
NmU4LTgyMmUtNzNkYjBhODgxNTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCb+wU9I42qxGiOuZbfTULBVb0V0Jv38w4eMA4O7gkSS8nHL2KwPNKF
vobLexcyNKzLt/j2qnSlmZ+HLxw/Ctq3m8tIucOmLFPbno6xsXRN0UVh0ZYvirWV
/CAyx81KJNuvU4kXgMRF24TmxDBttC3KHll0UayHeIQFzdmX31iaSc8oSLP1VddU
Fku+tXPI039LpLoR5cBchSZ0Xbn8NXqMULzSOoSeCg4cF98IDrUR0q0jq/Ko6Jx4
vWivUeM8CbFaiKvYO5ZGcHF5mqcCLRbV+Hx5WwYiD3DqomHO0YHS5tFo6sLhzc2H
dhAZMLLEeYLDDvjgvzRv9zK1JiV4rFWA
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:52 2025 by rpki-client