Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2731af8c-ffff-3560-8d14-412ae557a927.roa
File:                     2731af8c-ffff-3560-8d14-412ae557a927.roa (raw, json)
Hash identifier:          wOkOOMg1XWbVNZAauuLzldE866G/bgxdMfvR+QXeE1k=
Subject key identifier:   09:CB:8E:AB:7B:FE:82:89:44:27:87:95:76:05:2A:D7:09:22:84:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C046A05BB306890E4B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2731af8c-ffff-3560-8d14-412ae557a927.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396559
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c0:46:a0:5b:b3:06:89:0e:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=8392aee1-78af-4261-836c-6052e326bc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:fb:56:94:3a:39:68:3b:0f:79:63:44:33:
                    00:71:1d:1e:42:fe:07:94:40:15:a1:2b:94:94:0e:
                    f0:e2:76:53:ea:b5:b6:23:e7:b1:bf:a0:dd:bd:9f:
                    dd:c1:9f:9d:14:f1:ba:b8:64:b3:d2:c3:0c:c1:04:
                    4c:8f:d6:40:e6:19:dd:7d:97:5a:19:a9:11:77:71:
                    45:51:04:ea:1e:2a:bf:dd:fa:cc:7e:63:f5:15:49:
                    17:08:50:16:a9:39:dd:21:ab:9f:b3:c3:41:81:4d:
                    31:be:5d:a7:f6:9d:da:c3:38:e6:48:d5:ce:4f:30:
                    fe:ca:97:41:32:74:a0:82:d1:92:1d:5d:0c:59:ec:
                    7c:2b:54:51:2b:30:19:1b:a8:47:c4:0d:6d:d5:91:
                    ef:55:e7:27:fd:2d:a2:80:68:9b:ff:71:0a:da:a3:
                    f7:2e:ca:46:95:f0:e5:5c:1c:8f:52:e9:7c:19:69:
                    d8:1d:de:96:86:6f:37:71:4c:b3:48:d4:7a:8a:2e:
                    5b:e0:db:f1:6c:5a:6a:a5:8f:9a:26:4d:b9:53:6b:
                    60:66:8c:1a:39:de:62:5c:9f:0f:cd:3b:e1:0c:5f:
                    ff:d8:0c:c4:5d:16:ab:d9:04:8b:ff:ac:d5:13:a8:
                    39:05:0b:d5:a3:fc:62:df:48:3f:ff:a5:76:46:09:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:8E:AB:7B:FE:82:89:44:27:87:95:76:05:2A:D7:09:22:84:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2731af8c-ffff-3560-8d14-412ae557a927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:d7:64:6c:4f:9c:99:7c:1d:94:c1:f8:8f:ac:06:41:cc:
         c5:bb:18:a3:7f:17:34:bf:c0:d8:10:d6:b9:33:bf:0b:75:10:
         0f:70:3a:e2:8f:93:16:f4:d1:b4:cf:d0:0b:fe:70:f1:b2:28:
         20:f0:6d:5a:bf:c2:cb:e6:8c:59:cc:27:44:44:6f:cf:01:bd:
         72:ff:6e:c3:cb:49:0d:c8:e0:b7:0e:2d:87:76:20:92:3c:1f:
         d0:ec:be:b9:17:55:b5:4e:8a:a1:6a:7b:b6:5c:67:7c:1b:a7:
         4e:37:05:17:1c:39:80:e9:e7:68:45:a0:9f:79:45:f1:63:88:
         e3:28:92:f3:f8:e1:dc:35:9f:c6:cf:5c:1a:6d:81:00:ee:3b:
         1b:c1:45:58:14:a7:80:b7:ec:32:5c:d7:b4:e7:44:93:92:db:
         9d:af:ae:b8:5f:9a:da:95:7c:32:a2:01:3d:06:56:cd:57:75:
         fe:ba:0d:d2:e2:d0:ed:bd:3e:e1:ed:8f:0a:63:2e:a8:07:8a:
         ed:2c:ec:00:6b:38:37:c3:4b:9b:e4:80:9a:c3:fa:3b:0c:68:
         30:20:7d:5a:a1:8c:45:4c:a5:2a:b9:ea:a4:eb:31:23:db:44:
         c5:75:fc:2f:81:95:39:cb:4e:34:fa:20:6e:c9:7a:e6:34:36:
         44:7e:89:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:04:23 2025 by rpki-client