Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34fc9ac7-d094-3eb3-a1c4-8899c2574ce5.roa
File:                     34fc9ac7-d094-3eb3-a1c4-8899c2574ce5.roa (raw, json)
Hash identifier:          aP1S9i7+5AE7DD501fpi+ZrSrHvlCN0ueD+InPeE2Pw=
Subject key identifier:   ED:A4:62:0E:E2:30:B3:80:D5:AA:99:D4:D1:8D:C2:B2:77:19:ED:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C1F2DEE3125EEA1A7580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34fc9ac7-d094-3eb3-a1c4-8899c2574ce5.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396576
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c1:f2:de:e3:12:5e:ea:1a:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=04ba957a-9225-4510-a904-e4a63559f2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:06:b1:5f:99:60:02:d5:8a:a6:88:83:63:46:
                    ac:11:e5:cc:2a:dd:fa:a2:b1:28:14:ab:c0:98:4d:
                    56:65:18:47:f9:d9:22:7e:2d:98:50:c4:bc:f9:55:
                    bb:4b:84:24:a8:cf:b7:07:9e:b0:71:8c:7d:23:dc:
                    74:f4:e5:32:12:a8:a0:f4:73:b3:ad:85:59:fb:ae:
                    62:82:e2:c7:40:48:b9:22:aa:20:2f:55:d6:b2:99:
                    fc:9d:b4:c1:10:85:84:1d:c8:98:2d:a7:1a:92:b9:
                    c8:81:6f:0a:f1:38:fa:a2:26:4e:9d:3c:d0:de:13:
                    67:80:77:70:52:19:22:bb:75:4d:5b:d6:b6:52:3b:
                    39:6f:9a:be:ab:33:c9:5a:67:38:c6:1b:a6:57:7b:
                    c8:33:23:b7:02:54:7c:ba:b2:d5:7b:9a:1c:b9:15:
                    46:47:cb:4e:23:b9:b0:c3:c2:e5:54:fa:6a:4d:69:
                    48:13:ad:9b:a3:88:e9:55:d7:8a:f1:be:b2:c2:ca:
                    5b:76:f9:e6:44:09:13:4f:3e:73:bf:e8:61:bb:44:
                    6d:48:16:4c:ee:26:ca:36:fa:cd:e9:eb:ab:1b:89:
                    02:35:6e:c2:e6:44:b8:f3:12:14:00:9e:bf:4e:14:
                    a6:ca:a7:ff:bd:a5:dd:31:7d:4b:93:f7:7d:5c:21:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A4:62:0E:E2:30:B3:80:D5:AA:99:D4:D1:8D:C2:B2:77:19:ED:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34fc9ac7-d094-3eb3-a1c4-8899c2574ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:f2:81:79:b9:fd:f7:02:0d:7f:fc:54:4b:51:92:39:ab:
         f4:57:08:a7:a8:ac:a4:cc:55:25:24:de:7f:3f:0d:48:ae:11:
         f7:19:0c:fe:ce:84:9d:19:6f:62:4e:7a:3f:b5:76:87:dc:13:
         2e:d7:e6:d3:f1:17:97:6a:fe:38:4d:7a:44:36:0b:59:da:1d:
         27:a8:83:a8:87:5b:92:0b:0f:a6:b5:01:5a:cc:e7:5e:74:14:
         1c:4b:f3:1a:1b:dc:a2:31:9a:56:6d:af:de:a0:46:32:94:88:
         66:5a:ea:25:4e:11:d8:62:46:b0:94:c3:68:9d:fd:3f:a2:ee:
         99:fe:a7:b4:cd:3f:bf:a8:dc:1a:ef:3c:5b:24:5a:cb:ae:19:
         f5:ab:62:3d:a9:d6:28:1d:af:f3:0a:40:96:d4:3e:57:df:53:
         ea:19:8a:da:d5:3f:de:3c:c7:cb:68:d5:42:4d:93:ed:8d:52:
         00:85:d8:7c:0e:6d:d2:77:51:17:5c:0a:0c:4e:c4:1a:59:3a:
         36:34:df:56:3a:1e:74:39:9d:36:b7:42:66:c0:ba:ec:bb:d8:
         bb:64:7d:00:ca:fa:e2:04:71:cf:2c:1f:73:7a:c2:98:34:00:
         e1:27:70:a5:9c:e5:df:cf:82:0a:d9:08:30:a4:42:e9:ed:70:
         da:00:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:17 2025 by rpki-client