Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d752c8aa-6cbe-3bb4-8b50-2dec51d10f45.roa
File:                     d752c8aa-6cbe-3bb4-8b50-2dec51d10f45.roa (raw, json)
Hash identifier:          aAoi/Z84xOdpts99fGP7FqDcKnaL1LIhxUoaa7rovcY=
Subject key identifier:   0D:4E:17:D1:0C:E8:3B:52:90:6C:CE:35:ED:49:90:F5:B0:DE:3E:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B3D4F3285FB1251C9AD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d752c8aa-6cbe-3bb4-8b50-2dec51d10f45.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     396566
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:3d:4f:32:85:fb:12:51:c9:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=6025bbd5-3f53-4c06-87d8-b960f42ff4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:92:27:4f:43:dc:80:fa:61:65:f5:58:0e:
                    5c:76:43:54:d6:be:6b:69:69:6f:f5:ea:b1:17:4e:
                    46:a5:a5:f3:db:08:a0:18:07:01:20:17:55:98:8d:
                    d9:a1:74:b4:e3:60:25:21:5f:74:fc:40:da:21:aa:
                    d8:cd:29:57:a9:e0:6b:be:5a:b3:d7:ce:45:29:88:
                    c8:19:95:5c:d1:fe:9a:1d:fd:d3:49:da:f2:7b:bd:
                    d8:42:1e:0f:d0:b4:c5:70:3b:6b:7c:5b:24:39:db:
                    c6:7d:24:d7:b8:e6:5d:be:be:9f:1a:2b:c5:d3:d5:
                    f1:02:de:b1:0c:8e:79:bc:6a:16:d5:f4:86:31:c3:
                    14:d8:a4:f0:80:64:e9:28:ad:8b:2a:cd:96:66:aa:
                    45:db:39:07:f9:89:03:32:66:a5:a9:64:19:0a:f9:
                    e4:2f:9f:01:1f:cf:5b:6b:14:11:1f:69:01:a4:05:
                    29:89:df:bd:0d:ec:a2:03:61:98:58:c6:31:97:f9:
                    bd:e0:e5:07:1c:25:fd:20:f3:46:fc:17:9c:74:c9:
                    50:89:76:7b:16:a2:96:e8:d3:30:0e:03:e0:a4:90:
                    e6:a5:24:57:1f:7d:c3:8f:b7:ea:c5:aa:e2:70:33:
                    f1:42:52:5d:1b:8e:65:0b:6e:9f:15:ff:fe:2f:3c:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4E:17:D1:0C:E8:3B:52:90:6C:CE:35:ED:49:90:F5:B0:DE:3E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d752c8aa-6cbe-3bb4-8b50-2dec51d10f45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:aa:af:03:34:ff:ab:a9:fe:32:50:68:6a:26:66:e5:70:49:
         20:ef:c6:f1:7f:d8:ea:fa:20:e7:3a:b4:52:1f:38:bc:16:39:
         b6:47:21:6b:0c:99:d5:91:d4:64:e2:41:ee:57:2a:b2:3f:61:
         28:d5:0f:36:3c:0c:6c:2c:e1:c1:ac:d2:86:cb:c5:f6:c4:1e:
         91:7d:14:b0:f0:ea:f2:69:d8:4a:c4:c8:1d:1c:a0:5c:e7:79:
         ca:0b:d0:c1:30:f0:9b:4d:5f:94:6e:47:36:57:b2:25:11:fa:
         53:2b:c4:57:78:2e:df:0b:45:7d:c1:5e:f0:c0:33:0d:b5:68:
         f6:ad:83:08:1a:a5:df:7b:6b:4e:ab:6a:2e:e7:65:2b:f8:cc:
         7f:c8:f8:86:cb:56:a5:5f:08:da:ea:41:99:53:56:28:32:e7:
         bc:55:e5:77:54:cd:a7:1b:6e:dd:28:d5:8b:83:93:9b:4f:84:
         da:07:22:4e:88:4e:72:51:91:67:7a:96:74:be:20:c0:de:9f:
         21:39:ef:bc:0e:0f:b1:1d:8f:06:80:73:d3:14:ad:65:4d:11:
         38:b2:02:f5:18:3e:e3:b2:24:93:c1:69:a8:eb:fc:8d:db:b2:
         7a:a4:be:8a:80:5d:b5:19:20:e2:a7:1b:c2:98:a6:b0:81:79:
         d2:fa:e0:ce
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiFSz1PMoX7ElHJrUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NjAyNWJiZDUtM2Y1My00YzA2LTg3ZDgtYjk2MGY0MmZmNGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopiSJ09D3ID6YWX1WA5cdkNU1r5raWlv9eqx
F05GpaXz2wigGAcBIBdVmI3ZoXS042AlIV90/EDaIarYzSlXqeBrvlqz185FKYjI
GZVc0f6aHf3TSdrye73YQh4P0LTFcDtrfFskOdvGfSTXuOZdvr6fGivF09XxAt6x
DI55vGoW1fSGMcMU2KTwgGTpKK2LKs2WZqpF2zkH+YkDMmalqWQZCvnkL58BH89b
axQRH2kBpAUpid+9DeyiA2GYWMYxl/m94OUHHCX9IPNG/BecdMlQiXZ7FqKW6NMw
DgPgpJDmpSRXH33Dj7fqxaricDPxQlJdG45lC26fFf/+LzzTzwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA1OF9EM6DtSkGzONe1JkPWw3j4dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc1MmM4YWEtNmNiZS0z
YmI0LThiNTAtMmRlYzUxZDEwZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC4qq8DNP+rqf4yUGhqJmblcEkg78bxf9jq+iDnOrRSHzi8Fjm2RyFr
DJnVkdRk4kHuVyqyP2Eo1Q82PAxsLOHBrNKGy8X2xB6RfRSw8OryadhKxMgdHKBc
53nKC9DBMPCbTV+Ubkc2V7IlEfpTK8RXeC7fC0V9wV7wwDMNtWj2rYMIGqXfe2tO
q2ou52Ur+Mx/yPiGy1alXwja6kGZU1YoMue8VeV3VM2nG27dKNWLg5ObT4TaByJO
iE5yUZFnepZ0viDA3p8hOe+8Dg+xHY8GgHPTFK1lTRE4sgL1GD7jsiSTwWmo6/yN
27J6pL6KgF21GSDipxvCmKawgXnS+uDO
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:16 2025 by rpki-client