Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3acdabd-de67-395d-a125-ff8f03fad851.roa
File:                     f3acdabd-de67-395d-a125-ff8f03fad851.roa (raw, json)
Hash identifier:          bOi9nRTMORjhMLzDLh+8Ue7gwPp+axjwBGmBVwAeEog=
Subject key identifier:   AC:7E:52:D0:10:35:1D:CF:47:63:82:F4:31:B0:BB:20:21:F0:27:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858493ED3EFB268FF2BC6C7F28F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3acdabd-de67-395d-a125-ff8f03fad851.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     396571
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:ef:b2:68:ff:2b:c6:c7:f2:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=173f03f1-7cfa-422f-80a2-9bdd5b45f9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:0f:f7:20:3d:97:bf:1d:6b:10:bc:1d:d5:
                    69:35:a6:c9:f4:e3:39:6b:a5:25:bc:1b:a6:d8:4a:
                    90:e4:13:d4:99:b7:e9:56:40:09:77:c8:1a:47:92:
                    b9:eb:1e:d8:e2:9b:e9:58:6c:93:1d:4a:30:33:9f:
                    c6:e0:89:0f:b9:c6:5a:2c:68:a6:ba:d6:0b:dc:51:
                    e0:b8:c6:7b:14:0f:7a:a7:ae:8b:41:62:2a:f8:2e:
                    0c:e5:15:57:38:0b:fc:49:b6:9e:c7:b4:c6:6c:38:
                    90:0d:43:ef:f2:e9:ab:31:d3:6a:5f:f1:57:6e:ec:
                    9c:35:54:e1:da:93:a4:7f:b7:3b:e9:89:15:25:23:
                    69:38:66:eb:e9:b2:76:6c:3f:36:60:fe:eb:a1:ec:
                    fe:da:99:d1:3e:6b:ec:85:2b:c3:26:78:d1:bb:d3:
                    17:d8:cb:4d:c5:04:39:3e:0f:22:df:3b:bb:64:81:
                    7e:14:a2:48:a9:00:ed:e2:5a:5a:05:f5:16:47:d0:
                    65:22:7e:8f:4d:e1:ca:73:64:ff:2a:ff:af:c4:10:
                    8e:08:d7:ca:57:41:22:df:c6:35:9f:d8:8c:ef:b6:
                    a6:c4:c7:19:1f:f5:a7:e2:dd:d0:92:ec:f2:53:de:
                    08:d9:dd:50:d6:70:e8:4d:ca:b0:15:4e:f7:e0:58:
                    a9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7E:52:D0:10:35:1D:CF:47:63:82:F4:31:B0:BB:20:21:F0:27:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3acdabd-de67-395d-a125-ff8f03fad851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:f7:de:6e:db:b6:4b:fc:2c:4e:15:6d:67:cd:86:5b:74:83:
         d0:f8:46:f3:7b:7c:f9:c4:58:cb:7e:24:dc:ea:37:0b:18:c5:
         81:c3:90:18:0b:43:f9:ea:de:87:7d:d3:5a:a0:c6:53:db:f6:
         2b:34:ce:17:1a:95:31:c3:ab:c4:7c:53:33:4b:9c:a0:5b:e9:
         15:3c:ac:0f:c0:c2:15:c7:da:e9:86:7f:ce:4f:ce:7f:f9:e2:
         6c:7f:46:5c:9b:bc:c0:88:96:ce:63:62:0e:4a:d0:59:73:84:
         1c:90:c9:db:d3:a9:81:99:b6:83:ae:cc:a4:14:a7:03:c7:7e:
         78:60:2f:76:c3:6c:b2:bc:1c:c0:3f:99:5f:59:79:bc:39:2b:
         bc:7b:99:64:99:f7:0f:00:94:b3:3e:07:dd:34:33:f0:5a:bf:
         42:8a:52:7e:af:26:3b:c9:6b:ea:fd:a5:c6:8f:1b:3d:ab:45:
         50:f1:8e:a5:6a:cc:ec:c0:a5:78:c7:59:c0:0b:b5:2a:0b:cb:
         d6:19:67:e4:84:bb:03:ff:76:52:c9:9b:d0:79:6f:f9:63:b0:
         e0:f1:31:d1:44:cc:52:93:57:b3:56:e1:9f:8b:82:e0:03:ee:
         2c:62:f0:b8:f6:0a:27:5b:0b:d5:4a:bd:9d:d2:c2:47:43:60:
         21:2c:91:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:51 2025 by rpki-client