Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fc2ddc3-49b0-32bf-abc4-077949f490f6.roa
File:                     0fc2ddc3-49b0-32bf-abc4-077949f490f6.roa (raw, json)
Hash identifier:          aSoz6lwc5wz1lfTqq/KADQMFLACDzeV3S+UkZ/JKJqk=
Subject key identifier:   A3:8B:70:FC:42:AF:B2:3E:70:62:5F:39:75:A1:DF:B5:E4:38:0C:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C0FC394FBBB85A000480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fc2ddc3-49b0-32bf-abc4-077949f490f6.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396614
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c0:fc:39:4f:bb:b8:5a:00:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=367cea81-b530-4ba6-8357-e24075be2777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3a:2b:31:09:45:df:49:2a:dc:a6:c9:b6:9a:
                    72:18:79:28:af:05:17:6c:97:50:03:40:ca:b6:eb:
                    b4:27:38:f4:7c:eb:14:c6:78:6a:64:b8:99:80:75:
                    d9:b3:99:ae:6c:84:55:2f:cd:82:04:b2:f0:66:4d:
                    c7:d1:5b:ba:be:3f:f0:e9:b5:f5:05:d2:93:c9:a5:
                    7d:ba:7f:93:ea:b6:b3:ce:ea:5e:a9:ef:53:f3:72:
                    ed:ae:3a:c8:2d:d7:23:06:d0:0d:9a:17:1f:93:77:
                    ce:bf:50:5b:89:2f:68:b1:b5:4c:30:3d:dc:25:08:
                    97:47:76:17:54:48:a6:0f:cf:90:05:ee:bc:99:33:
                    b9:76:92:36:43:ed:56:d5:d6:e1:ad:91:f2:91:6f:
                    70:19:51:57:ac:20:c5:5a:2b:71:9b:93:de:69:93:
                    c7:9d:6e:9e:b6:ff:59:09:3a:d3:e8:fb:3a:43:32:
                    61:85:08:8a:2f:93:42:48:dc:66:a0:18:f2:55:4a:
                    d4:63:81:94:34:52:ff:c5:98:d1:2d:08:b8:53:81:
                    d9:db:0a:b2:a1:57:21:22:32:9e:ac:7c:8a:8d:64:
                    e7:af:79:21:04:1b:c8:70:b1:54:74:a8:48:99:ff:
                    66:c9:8f:73:fb:f5:1c:07:ac:df:ed:17:67:86:bc:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:70:FC:42:AF:B2:3E:70:62:5F:39:75:A1:DF:B5:E4:38:0C:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fc2ddc3-49b0-32bf-abc4-077949f490f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:37:c8:04:69:f1:28:7c:85:b9:ff:1d:98:30:11:bd:9e:
         f0:aa:7f:a2:76:42:25:c9:81:66:e2:0e:37:b9:b8:18:2e:49:
         44:75:4e:69:c7:83:28:57:fe:c8:92:38:72:07:ce:33:11:a5:
         11:e1:4b:5f:1b:e7:86:dc:ef:a5:07:72:23:be:40:fe:0e:ff:
         88:1a:f5:df:d4:c0:c5:ce:be:04:b6:06:1c:62:b5:b6:6c:82:
         bc:c7:5a:54:19:76:0f:68:24:24:52:e4:65:96:de:0d:9e:85:
         66:bf:b7:d3:35:af:7b:16:01:41:29:60:5c:df:a5:d6:74:ad:
         bb:e8:b7:b0:5e:fd:ec:38:4f:5b:0d:c6:c3:7b:58:b6:9c:50:
         e4:8e:9f:3c:e0:c1:c6:9e:02:1c:4d:b8:0b:e5:a6:be:76:0e:
         1c:b0:13:88:d2:49:b5:07:32:8b:ea:ca:86:e7:68:24:67:0a:
         42:55:32:9a:8e:4d:a5:58:e2:ea:26:ae:74:d3:35:5f:88:f8:
         7a:93:78:94:32:ef:ab:5d:74:ee:ad:ae:b7:2d:34:8e:a6:16:
         b5:68:20:41:a5:f7:11:3d:98:4e:1b:c6:ff:30:b0:8e:78:1d:
         72:03:93:57:07:e6:bd:8e:4f:ef:d6:96:4f:f3:6a:3a:dc:7c:
         80:07:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:35 2025 by rpki-client