Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa
File:                     e5c4247d-264e-3042-a3cf-05f008187a28.roa (raw, json)
Hash identifier:          3ByxUG8+GMx4cAqHTthhmXd6qqS5jIA2bJF9eA0UA+M=
Subject key identifier:   1A:E4:A0:EC:92:41:75:18:FC:59:9C:A4:1D:32:30:C3:3B:C6:F7:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3AF5DD2314625F1E2980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     396576
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:3a:f5:dd:23:14:62:5f:1e:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=6ae67c5c-c134-428f-b916-000233e209df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:d5:a2:de:22:97:9d:d2:e0:3d:39:c3:92:
                    1d:25:c8:86:56:56:1b:c8:68:44:87:b0:5e:0f:96:
                    0b:0c:5c:a9:7d:c2:a3:35:68:f9:d9:a3:dd:10:12:
                    55:fe:d7:99:4e:97:50:1c:8f:6c:e8:2e:fc:85:ec:
                    a2:94:be:3e:f3:22:ae:89:8b:7b:0f:be:07:b1:5a:
                    ca:bb:83:3c:ab:2b:33:b7:ef:56:9b:4a:fa:df:fb:
                    08:4d:88:17:c3:08:01:eb:b5:c0:94:c4:7f:9b:28:
                    06:48:78:75:70:be:b9:30:49:ee:48:0a:e5:7b:48:
                    4a:c4:4e:72:89:c6:39:7b:eb:b1:7b:79:fc:b2:ee:
                    6e:07:7f:65:11:84:44:9c:a9:ea:4e:16:65:c1:af:
                    3e:4c:fc:8f:81:74:00:54:30:5e:3a:2c:a4:77:2a:
                    d5:9c:66:48:ff:cb:ac:2d:de:b8:8a:20:17:4b:a8:
                    06:ba:c1:8d:1c:c4:5a:48:3c:f1:19:4e:11:a9:03:
                    69:d9:c5:6e:e2:9b:79:77:07:7c:e8:0a:88:13:18:
                    24:86:4c:c1:97:83:00:22:8a:bb:9c:e4:ff:ae:e3:
                    e3:d3:b8:75:50:54:cc:1f:a7:a9:67:d4:50:ce:80:
                    b6:ad:3b:59:bc:ba:60:40:a0:67:98:95:e6:37:aa:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E4:A0:EC:92:41:75:18:FC:59:9C:A4:1D:32:30:C3:3B:C6:F7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5c4247d-264e-3042-a3cf-05f008187a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:52:67:a9:57:b2:6c:c4:6a:a9:98:e2:1f:b9:59:7c:66:aa:
         61:42:0e:2b:48:a2:13:0b:2a:cc:5f:15:14:45:da:9e:2d:91:
         ce:a5:ea:a2:a6:4f:ee:7e:87:b2:4d:07:af:3b:f6:f9:bd:67:
         aa:04:1a:a5:9d:14:e7:aa:fe:d7:97:e4:9f:24:6d:02:cc:ee:
         0a:d3:b3:08:a2:2f:f1:d2:46:42:23:9c:d9:f0:12:22:a7:1c:
         74:5b:a4:cc:2c:b3:e7:42:20:aa:47:48:08:43:1e:43:b5:25:
         e7:de:6e:e5:77:2f:32:b7:a2:74:4f:10:89:b0:52:5b:f1:f7:
         45:29:0e:ab:15:bf:7e:53:ab:f3:10:80:04:fa:ca:83:22:8f:
         92:a5:fd:2e:73:f7:61:8f:ec:9e:c5:9c:33:9a:8d:b1:e0:83:
         86:83:00:e9:c7:57:8b:96:99:27:82:65:2c:34:66:e8:f5:73:
         c1:1b:5a:72:fa:b0:ef:30:fb:5d:42:94:dc:28:65:37:c5:8d:
         a1:df:59:df:14:0b:6c:c9:a6:fd:50:37:41:87:60:66:e1:9c:
         8e:ee:2e:85:a7:8d:1b:58:62:11:3a:2d:1a:69:69:de:62:ff:
         84:30:02:72:d7:59:71:53:14:29:58:31:90:3d:13:c3:1d:cb:
         11:8c:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:41 2025 by rpki-client