Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26d41000-24d8-3414-a880-471448128421.roa
File:                     26d41000-24d8-3414-a880-471448128421.roa (raw, json)
Hash identifier:          MQJ6zFNCaGs3TP2FP8fSSTzgjhICHQcPCXwbRoJas5c=
Subject key identifier:   F0:D5:BC:5D:69:C8:AF:20:B8:6F:A1:2E:AF:BA:27:F2:58:EB:2C:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242E8FFB196DA9F14027F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26d41000-24d8-3414-a880-471448128421.roa
Signing time:             Thu 19 Dec 2024 13:45:03 +0000
ROA not before:           Thu 19 Dec 2024 13:45:03 +0000
ROA not after:            Wed 19 Mar 2025 12:45:03 +0000
asID:                     22547
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:e8:ff:b1:96:da:9f:14:02:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:03 2024 GMT
            Not After : Mar 19 12:45:03 2025 GMT
        Subject: CN=98f3c1c1-40cf-41f6-9e89-b5143db41507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:53:99:f2:e0:71:23:de:4d:5a:4b:69:c8:69:
                    65:ac:fc:cd:7c:2e:49:ec:e3:cc:4c:a5:5b:46:96:
                    b8:f0:91:9d:a1:36:ae:82:4c:68:b2:e1:ff:60:8c:
                    62:42:3d:fd:50:ae:84:ee:95:a9:61:b6:b0:1c:0b:
                    72:3c:8e:26:c5:67:78:ab:5b:80:a8:76:85:96:56:
                    d0:80:e5:55:91:cf:e0:b2:ca:8f:35:bc:42:94:3a:
                    fb:16:94:7a:7c:01:15:f5:3d:91:b8:08:f7:34:38:
                    e3:16:6c:a9:16:88:81:b0:77:3a:25:cd:10:b5:61:
                    8d:6b:11:37:21:4a:cc:0b:11:0f:e0:df:c0:f4:bc:
                    b8:7b:99:17:57:41:94:b5:55:8e:a6:04:7d:54:8b:
                    ab:0e:da:fa:ce:3f:62:13:25:f4:49:98:23:00:7a:
                    e3:b8:ce:dc:0b:4c:39:7f:e4:2d:fc:29:17:8b:e3:
                    02:87:c7:b5:24:c5:c2:ff:ee:70:1a:f7:23:36:1c:
                    24:60:6b:18:53:db:73:20:5c:52:5e:d8:c6:6f:cf:
                    c6:00:3c:8a:ed:2b:91:13:1a:c7:57:98:16:c8:ee:
                    21:58:20:ab:8e:a1:ac:d3:74:c1:b6:b1:1b:77:aa:
                    7f:f8:5f:3d:b6:7e:a0:45:03:da:cf:71:a1:0c:7f:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:BC:5D:69:C8:AF:20:B8:6F:A1:2E:AF:BA:27:F2:58:EB:2C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26d41000-24d8-3414-a880-471448128421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:19:c4:ae:68:44:68:40:4e:f0:2d:6d:c8:73:ed:7a:51:0f:
         d9:10:e1:a5:ed:2b:41:f8:04:1b:77:fb:d8:a4:d2:b6:99:c4:
         8b:d0:72:78:a9:73:0e:c4:b7:0b:16:12:64:55:55:14:0e:4d:
         bb:74:d1:91:ac:7b:38:05:2f:df:d5:1b:51:b5:16:59:19:e4:
         84:41:ab:fa:d5:d3:cb:e3:df:2f:ff:e1:2a:e9:21:6e:fd:61:
         0a:48:25:46:db:df:6f:26:df:c7:ca:1a:b8:c9:8f:a7:74:c9:
         a0:10:f1:f3:42:72:70:27:72:75:43:8b:b1:64:69:3c:b8:64:
         28:e6:ed:ec:7d:d2:f5:44:45:8c:3a:a5:e1:b3:51:91:27:e5:
         8e:f7:cf:6a:07:73:fb:24:4a:de:01:62:ad:2f:16:30:39:22:
         de:c1:eb:90:fc:b6:13:3a:e6:d7:34:ff:e1:fa:66:d7:fe:05:
         d2:81:2e:ef:b0:2f:79:1c:4f:4b:12:29:02:8c:b2:2e:d2:1e:
         f7:78:16:d3:d3:f8:83:01:bd:08:d9:b7:34:04:2e:32:c7:5f:
         e6:81:c1:7f:bc:26:03:9e:d2:2c:6e:b8:44:7a:2e:2f:60:5d:
         73:67:a8:91:27:6b:ef:6b:1e:a9:90:25:65:87:5a:97:4c:6e:
         04:2e:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----