Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e5213-5133-3be6-a6d8-6e7c19349de3.roa
File:                     e58e5213-5133-3be6-a6d8-6e7c19349de3.roa (raw, json)
Hash identifier:          1Tft7lO8/9n2QRj847WH58kQE0ZjJBfT3arLVFxvViU=
Subject key identifier:   FA:0D:AA:DE:2A:D1:35:F7:B9:8D:36:F2:AC:AF:32:E2:8A:93:E9:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B3C588C9FE0A88068D740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e5213-5133-3be6-a6d8-6e7c19349de3.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     396573
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:3c:58:8c:9f:e0:a8:80:68:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=eb05836d-7267-46aa-9bba-6f7b0e35993e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ac:14:2f:e2:91:9a:cb:95:dd:a1:d9:26:b1:
                    57:ff:e2:3c:51:72:8b:d1:60:dd:84:f1:05:d4:c7:
                    7b:10:f6:3b:8b:6b:86:3e:c5:5d:52:55:31:91:49:
                    6e:db:37:90:03:4b:79:3e:ac:3b:04:94:13:31:7b:
                    e9:13:5d:10:bf:22:a6:3f:17:dc:bb:1a:16:c4:85:
                    95:9f:16:a0:55:ad:24:cd:14:e3:81:2c:d6:c6:45:
                    89:8f:35:54:ef:d7:2d:95:1d:dc:fc:4b:77:8d:2d:
                    ba:6d:9e:b8:04:97:7d:66:bf:05:35:81:18:36:64:
                    5f:bb:9e:4e:63:69:ec:3a:94:bc:a2:fb:c9:77:36:
                    e1:01:a6:14:c3:d8:3c:da:1f:4d:e4:33:df:3f:79:
                    5c:e4:ac:fc:01:23:77:b2:32:27:2c:d8:e6:a6:5f:
                    79:5a:9e:2c:d3:08:00:98:40:e2:49:d5:b3:a1:36:
                    d3:cb:bd:a4:fb:e3:b8:82:4e:c5:aa:1e:97:13:57:
                    83:1b:ed:de:92:63:16:54:40:5a:9e:90:1a:6c:0e:
                    f7:1c:98:5c:63:50:3b:18:4a:1a:49:01:bc:42:70:
                    e1:cf:da:e8:c7:cb:92:94:60:02:4e:dc:17:15:98:
                    1a:3a:1f:74:b9:e6:ec:ac:aa:af:cd:9d:9a:76:87:
                    5d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:AA:DE:2A:D1:35:F7:B9:8D:36:F2:AC:AF:32:E2:8A:93:E9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e5213-5133-3be6-a6d8-6e7c19349de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:89:ae:4b:22:4e:33:c9:f2:18:93:45:9b:bb:95:a7:45:d8:
         be:29:5c:f6:e8:49:27:26:af:6a:bb:0d:46:60:31:03:a9:c7:
         83:7c:f8:56:76:e5:d1:b5:29:94:69:4e:0b:7e:af:4d:f5:c1:
         4e:58:fe:30:50:2e:63:67:fe:42:60:bc:88:ce:f9:53:a2:81:
         7d:e7:62:cd:a9:43:9f:7a:c6:2b:c8:a3:d2:ba:0a:cd:f4:b3:
         ca:8d:a4:83:c8:3b:0d:d5:6b:07:d2:8e:52:dc:c4:ec:e8:ed:
         55:18:50:3a:c9:bf:f5:72:fb:80:79:28:35:dd:41:2b:6f:ab:
         7d:11:09:c2:27:4d:2a:ba:5d:1e:1c:74:07:44:dc:21:cb:77:
         70:d1:d1:30:16:b2:08:1f:70:42:04:d5:67:76:c3:39:f2:5a:
         47:a1:e5:12:c0:1d:ff:7f:fc:ff:05:b4:2f:7c:66:ae:5d:cd:
         01:3d:80:b3:ad:87:cf:36:53:3c:b3:f3:e3:2e:9a:ac:aa:7c:
         40:71:ad:ce:86:68:ae:d8:18:d9:ec:46:2d:8e:a2:ae:c4:95:
         1c:6a:7a:d6:fa:f5:32:70:5d:1a:64:b0:a7:fb:14:05:f6:9d:
         2e:f9:96:57:a6:6c:f6:61:4d:15:91:08:0f:56:21:ba:bc:10:
         a0:5e:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:34 2025 by rpki-client