Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/150844da-b9be-3c2e-9013-7bb26e09a415.roa
File:                     150844da-b9be-3c2e-9013-7bb26e09a415.roa (raw, json)
Hash identifier:          B7Z3uMV6osuJf0P5UUCdSEW/w4S7Wo0lVOLLMEY7hHI=
Subject key identifier:   63:70:28:09:40:AB:8C:AD:04:BD:4B:87:AE:91:B8:D6:92:75:94:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858486695CEEC6EE886EB8F2EE0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/150844da-b9be-3c2e-9013-7bb26e09a415.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     396608
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:ce:ec:6e:e8:86:eb:8f:2e:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=b9fadb77-8c78-403f-bd16-cd3873a54ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5f:f8:da:4c:f6:f2:f1:01:24:2a:1f:49:8a:
                    e7:75:d5:9c:51:aa:b3:36:21:5e:b6:53:64:13:3c:
                    ba:f6:be:a4:40:af:17:12:88:65:b5:87:38:a3:fb:
                    34:b8:9f:b0:bf:f7:37:d4:44:d2:4f:b5:b9:28:f9:
                    da:3f:7a:6f:be:04:be:07:18:3b:aa:3b:3e:df:52:
                    80:a7:84:9c:c1:36:2d:4e:63:bd:d4:45:ca:42:28:
                    49:59:0f:65:44:f2:75:f1:7f:bd:54:ea:84:74:f2:
                    41:5e:5d:ff:b8:57:49:10:f2:be:66:63:fa:d9:0b:
                    f3:80:8e:ee:89:2e:8c:69:00:30:94:02:91:88:c7:
                    18:15:cb:d8:63:5b:b2:6a:3b:5e:e9:48:d8:3a:27:
                    01:e9:81:cb:90:54:af:47:6a:b7:d0:cb:50:53:24:
                    9b:f8:65:a8:0d:f8:f7:1b:cc:0b:f5:11:b7:08:96:
                    93:62:61:29:eb:cc:08:4e:e3:26:4c:1f:cd:19:91:
                    e6:0a:b7:e1:df:ec:7b:fe:ba:e9:e2:d0:48:f4:e6:
                    c7:b4:90:98:d3:00:0c:da:0a:74:c0:59:b7:aa:bd:
                    84:73:de:72:b0:8e:72:51:0e:15:24:22:95:b4:02:
                    a2:13:93:4c:df:d9:fe:7d:df:d4:fc:91:fd:49:19:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:28:09:40:AB:8C:AD:04:BD:4B:87:AE:91:B8:D6:92:75:94:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/150844da-b9be-3c2e-9013-7bb26e09a415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:46:64:b4:92:45:7e:7f:cd:ad:17:3a:f1:da:85:fc:55:
         59:42:e6:52:5a:0a:33:f0:de:0a:9f:02:bf:39:b1:6f:b7:4c:
         df:77:90:88:21:bd:94:5f:70:26:93:52:36:98:06:fe:23:aa:
         86:38:b4:56:51:d1:3f:9c:5e:34:b8:6c:1e:f5:bd:91:fa:91:
         84:85:ef:47:9b:5d:cb:d8:72:78:7e:2f:c1:2f:b8:b9:08:f1:
         ed:3c:71:31:d0:c1:39:43:03:bd:b3:48:db:1c:f5:34:f7:b6:
         d4:ae:49:49:8f:01:d2:59:4b:8b:e4:b3:f8:02:cd:b4:9d:19:
         a1:ce:c2:15:f9:3d:c6:e7:fd:5b:1e:fa:6f:56:d0:1d:78:b4:
         c1:57:b3:5d:87:55:55:20:e6:9b:4f:0e:4b:59:6b:48:fd:ff:
         c5:12:77:65:ea:25:e4:dc:cc:42:4b:c0:a3:70:d8:ee:14:f3:
         81:c6:27:5a:09:66:d9:d7:fd:16:4a:d1:2d:5a:1a:ff:38:06:
         25:cd:2e:1a:0a:06:05:d4:8c:69:08:2d:09:f2:a9:c2:55:ff:
         48:b9:06:da:e8:d3:6d:42:b8:10:99:c1:f9:26:bd:11:96:c1:
         34:9a:9a:35:ea:c0:47:40:e9:f8:b8:dc:32:1a:59:f0:15:7d:
         7d:04:af:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:25 2025 by rpki-client