Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/144a7b84-10b2-367f-8ae6-599300c4df09.roa
File:                     144a7b84-10b2-367f-8ae6-599300c4df09.roa (raw, json)
Hash identifier:          fsg5ZePA0Rroh+Gzlggd00oB0H0CoHtEMj1DXFJYOfs=
Subject key identifier:   89:EE:DB:BE:7F:DB:C0:E3:50:14:62:6E:2A:ED:3A:8C:7C:88:A5:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242FD076FF176335CD4FE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/144a7b84-10b2-367f-8ae6-599300c4df09.roa
Signing time:             Thu 19 Dec 2024 13:45:13 +0000
ROA not before:           Thu 19 Dec 2024 13:45:13 +0000
ROA not after:            Wed 19 Mar 2025 12:45:13 +0000
asID:                     20362
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:fd:07:6f:f1:76:33:5c:d4:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:13 2024 GMT
            Not After : Mar 19 12:45:13 2025 GMT
        Subject: CN=5b652a31-61b9-4ee0-91a0-96f24a2d29fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:52:11:9d:46:f4:77:24:c9:5e:93:fd:81:8f:
                    fe:a7:33:e2:d5:a8:f8:80:0d:ac:8b:e5:e6:c1:09:
                    b2:2f:6c:79:50:c1:0e:60:fa:8c:14:57:e4:86:68:
                    53:c3:52:54:fb:10:69:59:a8:ae:e5:a8:2f:41:fc:
                    e1:05:ca:2f:36:91:5e:7b:fc:1a:81:63:a3:04:f5:
                    04:f1:78:03:f8:2f:f3:f0:d0:08:43:44:8e:93:b9:
                    ab:62:13:ef:af:55:12:00:4a:3b:38:a7:46:ec:b0:
                    c2:03:06:b0:02:e4:2b:60:a2:9f:e7:db:ca:13:92:
                    a8:af:65:48:49:d9:6a:75:49:3a:d9:a3:bf:97:87:
                    97:d0:47:2e:10:3e:02:28:b5:4d:6a:05:f3:cd:2d:
                    ed:25:fa:e1:ae:bf:0e:3d:f5:a2:57:92:42:cc:b1:
                    73:6f:13:3e:91:7d:75:9e:46:ac:ba:27:06:8a:aa:
                    76:6a:b3:2a:3d:d1:2a:28:02:b0:21:e6:2f:de:e8:
                    2e:2d:d1:4c:06:19:cd:e5:55:4e:6a:72:fd:f5:30:
                    9c:2e:d5:62:8f:c4:f9:d6:98:97:ed:2d:36:87:46:
                    8e:f2:54:ed:1d:15:b5:d3:0d:97:e9:24:ef:1a:90:
                    13:18:73:10:57:53:18:d1:7f:7d:fb:e3:00:5a:29:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EE:DB:BE:7F:DB:C0:E3:50:14:62:6E:2A:ED:3A:8C:7C:88:A5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/144a7b84-10b2-367f-8ae6-599300c4df09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:28:18:a0:67:3c:06:a7:4f:e0:16:b1:72:ec:05:a7:ff:88:
         04:a5:41:b8:5c:47:c4:b5:71:fa:fe:3b:75:b5:83:5f:d7:2e:
         0d:0b:3d:2d:df:eb:eb:0a:08:8f:8d:fc:cb:9e:34:ee:3b:38:
         c2:fc:f6:c7:6a:05:13:a7:36:56:f1:bd:48:45:ce:92:37:66:
         10:c5:dd:0e:d4:41:55:8a:9a:7d:ed:2b:28:11:b0:69:19:0d:
         b2:a3:ad:41:8d:89:64:e6:e9:c9:72:c7:de:60:0b:60:f9:dc:
         f4:52:7c:07:4e:7b:84:f6:c3:54:d0:db:9b:ad:1e:12:29:bc:
         15:73:09:6c:0a:df:0a:60:e8:a6:8b:c0:4f:c7:87:a8:5c:32:
         b9:a5:3e:7c:46:bb:8c:6f:38:fa:c1:df:1a:7b:07:17:52:69:
         50:32:c2:15:98:84:0b:90:18:86:6d:4a:3e:fb:05:3b:05:07:
         25:36:04:7e:d3:fa:af:0c:d3:c8:89:36:10:99:a6:57:d4:8f:
         44:b4:0f:ce:a9:06:33:ff:44:85:31:23:e8:59:ea:95:fe:73:
         00:91:a7:a7:cf:dd:fa:f7:88:f4:e8:18:f9:b0:ab:3c:2a:19:
         8e:3b:3d:68:43:63:31:b3:23:e0:5b:93:e0:14:85:45:7a:32:
         e0:70:62:8c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhCQv0Hb/F2M1zU/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTEzNDUxM1oXDTI1MDMxOTEyNDUxM1owLzEtMCsGA1UEAxMk
NWI2NTJhMzEtNjFiOS00ZWUwLTkxYTAtOTZmMjRhMmQyOWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklIRnUb0dyTJXpP9gY/+pzPi1aj4gA2si+Xm
wQmyL2x5UMEOYPqMFFfkhmhTw1JU+xBpWaiu5agvQfzhBcovNpFee/wagWOjBPUE
8XgD+C/z8NAIQ0SOk7mrYhPvr1USAEo7OKdG7LDCAwawAuQrYKKf59vKE5Kor2VI
SdlqdUk62aO/l4eX0EcuED4CKLVNagXzzS3tJfrhrr8OPfWiV5JCzLFzbxM+kX11
nkasuicGiqp2arMqPdEqKAKwIeYv3uguLdFMBhnN5VVOanL99TCcLtVij8T51piX
7S02h0aO8lTtHRW10w2X6STvGpATGHMQV1MY0X99++MAWikjCQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFInu275/28DjUBRibirtOox8iKWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ0YTdiODQtMTBiMi0z
NjdmLThhZTYtNTk5MzAwYzRkZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5KBigZzwGp0/gFrFy7AWn/4gEpUG4XEfEtXH6/jt1tYNf1y4NCz0t
3+vrCgiPjfzLnjTuOzjC/PbHagUTpzZW8b1IRc6SN2YQxd0O1EFVipp97SsoEbBp
GQ2yo61BjYlk5unJcsfeYAtg+dz0UnwHTnuE9sNU0NubrR4SKbwVcwlsCt8KYOim
i8BPx4eoXDK5pT58RruMbzj6wd8aewcXUmlQMsIVmIQLkBiGbUo++wU7BQclNgR+
0/qvDNPIiTYQmaZX1I9EtA/OqQYz/0SFMSPoWeqV/nMAkaenz93694j06Bj5sKs8
KhmOOz1oQ2MxsyPgW5PgFIVFejLgcGKM
-----END CERTIFICATE-----