Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05fda8ad-06fa-318d-aef8-6fb290a62f3e.roa
File:                     05fda8ad-06fa-318d-aef8-6fb290a62f3e.roa (raw, json)
Hash identifier:          Gj1JV81UenA9ER/3zLekfsRBYKmmOeCpfBGf4DYKBPk=
Subject key identifier:   48:07:E7:47:24:9C:4A:D7:53:AF:E0:F5:C5:46:66:A2:65:15:DE:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858486695CB351071DDB287C59D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05fda8ad-06fa-318d-aef8-6fb290a62f3e.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     396566
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:cb:35:10:71:dd:b2:87:c5:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=30e7ecdc-7318-47b6-aa12-2030a83f9293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:34:bb:8c:60:b4:a9:9c:ad:fc:96:4c:4a:
                    ed:9f:f4:4c:33:d2:f3:f5:1b:8a:2c:a7:50:33:18:
                    eb:9a:5e:52:3b:42:1b:1a:10:5f:cc:13:62:37:a0:
                    cd:b0:35:eb:d1:a6:e3:d3:71:70:01:81:f9:23:3e:
                    d3:99:18:ed:53:42:a4:6b:42:6a:15:a0:7f:ab:85:
                    b1:6a:04:28:70:03:a9:5f:87:35:2a:19:3e:11:1e:
                    6e:21:93:9b:ba:96:d2:00:c0:fc:fe:f6:70:bd:dc:
                    5c:2a:45:2d:77:7c:b5:9d:9f:f9:8e:2f:2c:09:57:
                    25:6d:89:e3:e7:98:4a:f6:cd:48:a2:91:51:e1:ab:
                    29:15:90:37:9e:2b:23:67:5a:54:61:84:57:99:40:
                    98:52:02:7f:b7:65:98:01:95:40:3f:a4:07:f3:57:
                    de:6d:fa:ce:6b:ff:a2:ee:db:9d:f4:7d:aa:a1:46:
                    91:86:16:e8:e3:07:52:0a:89:ee:d9:a6:c8:ff:af:
                    e3:3f:ee:b6:f5:51:88:ec:e3:5b:ff:51:f5:9f:c4:
                    d8:a3:a0:2c:0d:9b:48:c7:e6:35:6a:fb:0f:83:5d:
                    96:9e:84:ed:3a:99:b3:d0:9a:40:d0:cb:1e:34:81:
                    00:52:63:a4:60:ba:2d:d3:2d:74:7c:92:3a:b5:71:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:07:E7:47:24:9C:4A:D7:53:AF:E0:F5:C5:46:66:A2:65:15:DE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05fda8ad-06fa-318d-aef8-6fb290a62f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:12:21:4c:22:c4:4b:12:44:bf:fd:ef:05:ae:0b:a8:ec:
         84:0f:16:93:a2:10:34:36:eb:68:fb:de:5b:e4:06:8a:8e:5d:
         19:e5:e8:1d:97:e6:5d:dc:1a:07:f8:05:44:67:d6:de:1f:cd:
         62:1c:9c:8e:95:55:c7:06:ba:58:5a:57:2a:d6:9c:de:ec:db:
         3e:15:7a:02:83:b2:c8:23:02:09:f5:33:87:22:58:d5:b9:02:
         02:26:03:ec:0c:83:ab:16:7e:da:6c:aa:d6:17:57:6a:96:55:
         0c:1e:b4:06:52:8d:b5:83:a2:01:87:6b:a7:ae:b3:82:b3:fe:
         69:4e:90:94:4b:9b:bc:06:03:ad:ac:ff:b3:48:f8:45:ae:74:
         bb:2b:4e:27:5b:7d:32:6d:b9:67:ce:af:ee:bd:6e:07:ea:37:
         f9:8d:02:6f:f1:1b:2b:20:5b:af:50:61:b0:6c:0a:dc:82:99:
         02:0c:7a:c0:31:f5:97:4d:13:dc:be:b9:7f:a4:c1:da:4c:1c:
         ac:54:ed:b9:35:f9:f6:a8:39:d6:7d:f5:67:a2:9f:1e:77:87:
         09:d4:74:14:15:d6:2a:0b:2d:33:e5:39:25:c4:b5:b6:f8:e4:
         ab:f7:8c:4c:22:4d:75:b3:55:5f:00:12:49:b4:9d:dc:73:95:
         5c:59:24:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:00 2025 by rpki-client