Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa
File:                     f3e54935-87ab-3337-b0a3-815b6773e535.roa (raw, json)
Hash identifier:          alhUO4BEnSwT29+xQ+S3FZOUbT03D99f6VbLqzF0J8U=
Subject key identifier:   69:8C:10:B2:01:1B:1A:D7:CC:4B:DC:D6:44:3B:2B:62:66:BB:5F:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A830C208A7B525D42CBF9E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     396611
IP address blocks:        192.68.126.31/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:c2:08:a7:b5:25:d4:2c:bf:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=8fbe02c8-01ee-4443-89be-7c0a79cebdc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:0a:63:2c:a8:bf:68:0e:95:71:ca:b4:dd:
                    89:37:9c:3f:f6:f2:9f:90:59:e4:9f:95:ed:fb:c1:
                    8a:63:00:fc:42:eb:7c:0c:c0:93:a8:bb:c6:fd:56:
                    1e:01:78:43:68:0c:79:dc:1a:f8:b0:4c:c0:3e:89:
                    c6:5b:f8:74:de:98:40:2a:71:e1:51:dd:b3:26:81:
                    5c:6b:e9:ad:a8:d1:f9:18:a6:77:7c:07:a0:9d:54:
                    43:8f:f3:d3:24:7f:5a:96:41:65:a9:42:ca:fa:90:
                    9a:40:61:41:04:e3:b7:80:0a:c7:6a:16:6a:e5:90:
                    d6:9c:c1:f9:62:a0:e8:94:fa:dd:6b:df:73:19:d7:
                    cd:4b:f5:75:7c:22:3d:9a:0f:e2:b9:5c:03:d6:2b:
                    cd:c9:b5:bf:9d:0e:1e:f9:5c:22:87:a5:03:49:ad:
                    03:08:22:48:64:77:ec:fa:d0:b8:0e:78:b7:7b:aa:
                    5a:e1:d6:88:d6:8b:81:31:bb:9a:66:97:43:3f:f2:
                    8d:de:ad:8d:d6:74:8b:56:5c:da:14:1e:1a:d9:e8:
                    ed:6f:0f:b6:59:cc:bd:8a:a2:1f:ae:65:6d:10:99:
                    e2:bb:cf:32:89:8b:91:68:de:11:7c:2b:30:00:ff:
                    66:f6:d9:4f:fc:ff:7e:62:bb:ab:0d:06:61:82:6d:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8C:10:B2:01:1B:1A:D7:CC:4B:DC:D6:44:3B:2B:62:66:BB:5F:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3e54935-87ab-3337-b0a3-815b6773e535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.31/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:17:75:95:f0:2b:ca:35:e4:09:23:0c:a2:ff:5a:08:e4:
         18:b6:80:87:9f:2f:fe:24:97:21:2f:fd:95:88:1e:25:d2:aa:
         56:5d:38:11:e9:c7:0a:41:f7:ce:ad:82:c4:c6:24:93:77:9c:
         89:ba:1d:75:38:04:94:7a:8b:a7:04:20:a6:6c:c2:60:d6:1a:
         3e:12:b4:eb:bb:5b:ef:80:12:39:53:53:15:1c:d4:08:3a:cc:
         72:ea:b5:5d:0d:e2:e9:a1:af:84:83:08:4f:49:76:21:af:9b:
         2a:84:a8:e4:88:57:bf:c4:ee:b8:af:43:da:c3:65:9e:2a:cb:
         16:62:03:66:82:c1:e6:58:71:ed:b5:07:a8:c9:60:65:b3:14:
         23:72:b8:43:22:2d:ff:af:5a:68:f5:48:c3:2d:a6:83:45:7a:
         2d:33:84:b5:9c:64:87:64:30:61:5e:1a:f7:9e:a2:75:47:58:
         12:44:55:f1:4a:22:66:35:60:7f:3f:89:a6:6e:11:18:22:57:
         77:6a:e1:a5:ee:50:be:fb:00:f0:5c:87:3a:ad:67:69:dd:cd:
         f3:2b:1d:f1:d7:b3:b4:4a:d0:00:da:b4:97:30:a3:cf:d7:16:
         12:c5:62:b3:23:ce:f8:99:9e:d0:0e:bc:a6:30:ab:d0:87:3e:
         a5:70:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:04 2025 by rpki-client