Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4ab7de-df16-31a9-8864-8b3baccb9f1a.roa
File:                     0e4ab7de-df16-31a9-8864-8b3baccb9f1a.roa (raw, json)
Hash identifier:          0eIjHi5aNpvtLPG9egVIm9/eepxORdy3klTTthnlCGA=
Subject key identifier:   24:02:CE:AB:AB:60:D9:79:CB:D7:40:F2:E4:7B:E0:6F:15:C5:69:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C3EB8A8DE6A1B67B25A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4ab7de-df16-31a9-8864-8b3baccb9f1a.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396570
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c3:eb:8a:8d:e6:a1:b6:7b:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=a98d20a8-e2b0-4a68-915f-0a8f33a789d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:68:f2:8e:f4:16:1b:2f:cf:9d:67:68:d3:
                    94:bd:74:71:24:cf:0d:bf:8f:ae:a4:68:fe:f8:e5:
                    7e:85:4f:3b:73:0d:db:01:5c:50:27:72:ab:42:1f:
                    2d:33:35:68:be:d4:cb:64:04:33:2d:21:dc:bd:be:
                    24:28:e1:da:6a:ab:c9:ba:58:9d:df:2c:82:51:cf:
                    53:3b:04:0d:f6:3f:0a:64:69:81:9a:9d:cd:86:04:
                    1c:50:ba:ff:1b:11:bd:51:26:49:67:40:c1:ca:c5:
                    fe:de:cb:5f:2d:3c:eb:67:94:dd:3b:14:11:06:74:
                    fc:e6:92:45:09:bf:88:5b:f3:bf:fd:9e:c5:a8:80:
                    f8:be:fb:f3:96:6b:5e:ec:00:81:58:0f:90:2f:53:
                    75:55:40:82:58:8f:4d:70:03:2f:89:19:36:48:b3:
                    45:af:f9:32:dc:94:8f:0e:53:97:ab:b4:65:b8:4c:
                    8b:30:cb:5f:ee:09:50:ae:8d:7c:ff:3a:b0:0d:f1:
                    8c:4e:7d:2a:02:15:90:9d:5c:c6:e0:fe:0a:7f:51:
                    53:30:ea:64:57:b1:85:eb:67:42:29:0e:ad:99:46:
                    67:d2:42:ab:46:ff:3b:3a:9f:64:d2:b6:ef:c3:27:
                    42:76:91:4e:10:ae:b7:1c:c7:b3:ef:13:5d:d9:79:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:02:CE:AB:AB:60:D9:79:CB:D7:40:F2:E4:7B:E0:6F:15:C5:69:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4ab7de-df16-31a9-8864-8b3baccb9f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:43:91:70:53:d0:4c:43:3a:d6:ad:19:84:51:b7:73:ee:ee:
         81:45:57:41:9d:c4:87:91:42:e9:b0:a1:61:e8:7d:30:8f:f3:
         9c:ad:ee:ba:fa:5c:ee:27:aa:63:2c:5e:de:6b:07:bd:e1:11:
         65:bf:f6:45:e4:09:6e:4d:74:e6:25:c8:7b:15:f1:88:8a:b8:
         06:26:fa:57:9d:54:f2:f7:e9:3c:a6:14:bc:d2:65:3a:90:35:
         05:8e:2b:39:cb:79:c9:fe:f8:eb:0e:36:a9:8d:2f:40:07:51:
         f8:c7:3d:38:0a:92:54:2d:44:7a:cf:cc:a6:73:05:bc:35:4f:
         b6:a2:02:ba:22:ef:e4:4b:32:f4:dc:35:c5:3d:f9:aa:dd:94:
         6e:80:38:89:32:2a:f9:68:d9:c9:05:06:41:cc:be:b9:78:24:
         13:f0:c6:67:25:b7:43:30:63:6c:73:09:0c:61:8e:41:a6:06:
         92:97:4f:5f:7f:7e:5d:a4:45:93:cd:f4:5c:f4:88:4f:12:bb:
         1c:1c:7e:39:82:50:ff:00:c0:a9:15:a8:65:3d:88:8f:6d:72:
         8f:de:b1:f2:39:09:3e:86:12:ac:bf:42:16:3a:fb:9e:23:0c:
         77:e6:f2:e8:6a:32:01:2d:b1:fe:71:24:c1:f2:c8:45:17:52:
         33:e7:22:de
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhA5cPrio3mobZ7JaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
YTk4ZDIwYTgtZTJiMC00YTY4LTkxNWYtMGE4ZjMzYTc4OWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG5o8o70Fhsvz51naNOUvXRxJM8Nv4+upGj+
+OV+hU87cw3bAVxQJ3KrQh8tMzVovtTLZAQzLSHcvb4kKOHaaqvJulid3yyCUc9T
OwQN9j8KZGmBmp3NhgQcULr/GxG9USZJZ0DBysX+3stfLTzrZ5TdOxQRBnT85pJF
Cb+IW/O//Z7FqID4vvvzlmte7ACBWA+QL1N1VUCCWI9NcAMviRk2SLNFr/ky3JSP
DlOXq7RluEyLMMtf7glQro18/zqwDfGMTn0qAhWQnVzG4P4Kf1FTMOpkV7GF62dC
KQ6tmUZn0kKrRv87Op9k0rbvwydCdpFOEK63HMez7xNd2Xn+twIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCQCzqurYNl5y9dA8uR74G8VxWmlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGU0YWI3ZGUtZGYxNi0z
MWE5LTg4NjQtOGIzYmFjY2I5ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC8Q5FwU9BMQzrWrRmEUbdz7u6BRVdBncSHkULpsKFh6H0wj/Ocre66
+lzuJ6pjLF7eawe94RFlv/ZF5AluTXTmJch7FfGIirgGJvpXnVTy9+k8phS80mU6
kDUFjis5y3nJ/vjrDjapjS9AB1H4xz04CpJULUR6z8ymcwW8NU+2ogK6Iu/kSzL0
3DXFPfmq3ZRugDiJMir5aNnJBQZBzL65eCQT8MZnJbdDMGNscwkMYY5BpgaSl09f
f35dpEWTzfRc9IhPErscHH45glD/AMCpFahlPYiPbXKP3rHyOQk+hhKsv0IWOvue
Iwx35vLoajIBLbH+cSTB8shFF1Iz5yLe
-----END CERTIFICATE-----