Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35eb53fb-0ef5-3862-83a1-2b4406c803bb.roa
File:                     35eb53fb-0ef5-3862-83a1-2b4406c803bb.roa (raw, json)
Hash identifier:          9pP9/GX5IyIJUSMOsuQ2W4rSf850pNCYFYlZQp1+xyk=
Subject key identifier:   CD:17:A9:DB:A4:BB:48:E8:36:A4:24:70:17:D5:E3:ED:D5:41:24:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584840E5C62F0E7100BFC2848AE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35eb53fb-0ef5-3862-83a1-2b4406c803bb.roa
Signing time:             Thu 19 Dec 2024 02:00:39 +0000
ROA not before:           Thu 19 Dec 2024 02:00:39 +0000
ROA not after:            Wed 19 Mar 2025 01:00:39 +0000
asID:                     396580
IP address blocks:        192.34.234.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:e5:c6:2f:0e:71:00:bf:c2:84:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 02:00:39 2024 GMT
            Not After : Mar 19 01:00:39 2025 GMT
        Subject: CN=8d724643-87e6-4510-857b-f32e6953fb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:16:ee:f1:8f:d1:cf:19:dd:2a:d5:b8:0f:ef:
                    2c:79:d4:f0:d3:34:de:88:6c:e3:47:87:c0:82:f4:
                    bd:c6:d0:ec:0f:ee:03:25:0e:72:58:a6:db:b2:d2:
                    08:52:9a:32:7e:3e:9b:0d:58:db:75:7c:24:67:e4:
                    aa:87:b0:9e:78:07:bd:a3:c6:20:66:88:e9:33:01:
                    32:02:e7:c2:a2:3f:05:6b:bb:25:f0:ba:c1:4a:4f:
                    25:83:57:a5:99:9c:81:af:57:c7:e0:c8:6b:9b:40:
                    7d:68:1c:3b:6b:4d:f2:1b:3d:49:04:57:5d:3e:8c:
                    d0:c5:cc:43:b5:15:b1:4b:05:17:fd:fa:cc:0d:68:
                    bb:d9:c8:91:f1:fe:94:68:04:4f:43:de:7c:85:1b:
                    2d:0c:de:c2:c1:de:20:81:da:7b:a9:72:b0:ef:4c:
                    ca:4b:03:7f:5b:50:6b:09:c2:6e:6a:25:89:47:bb:
                    34:78:4a:b8:54:8b:57:cb:10:97:76:cd:c0:23:89:
                    ff:3e:f9:00:62:42:a9:12:f8:fd:bc:1c:22:82:38:
                    57:70:f2:59:de:b8:67:9f:e6:8e:97:ce:6a:66:62:
                    e8:b8:de:77:83:90:79:d9:58:e6:70:80:a0:8a:99:
                    2d:ca:8f:1f:3a:cf:a2:eb:15:d3:a0:ab:fa:f7:86:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:A9:DB:A4:BB:48:E8:36:A4:24:70:17:D5:E3:ED:D5:41:24:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35eb53fb-0ef5-3862-83a1-2b4406c803bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:8a:2f:12:f2:cb:e7:c9:74:de:61:43:74:f6:7a:d5:eb:3f:
         18:3a:2e:d8:e5:dc:8a:c9:54:02:bf:67:e0:15:a0:fc:33:8b:
         79:3b:cc:3b:40:9a:c3:fb:25:46:dd:ca:bd:fc:67:96:e2:ed:
         cf:99:54:d9:27:dc:6c:34:46:b8:b1:21:94:e2:62:31:52:f8:
         70:af:48:c5:21:a3:7d:61:60:d9:dd:4a:00:a4:4a:06:f0:27:
         32:98:c4:ed:1f:98:d7:85:54:8e:c5:23:89:f9:b5:73:31:62:
         1c:9f:2d:64:1e:88:2d:5d:95:58:b7:da:2e:ef:84:07:d5:e4:
         e3:94:da:de:27:a9:ab:5e:f6:02:7f:e1:d7:ad:e9:d7:b1:d7:
         47:87:2a:63:05:d4:d4:c3:fb:71:08:60:96:c4:6b:5a:49:d9:
         b4:d0:0f:b8:8e:b8:bf:96:fe:0d:3a:75:dd:ae:bd:4c:5e:75:
         2c:da:02:30:c1:e0:64:04:14:09:f0:bc:2f:e8:c8:0b:90:fa:
         b4:fb:c1:61:7e:01:6f:31:01:bb:3e:8f:b2:06:76:91:99:a7:
         8e:bc:b8:02:a8:ed:5d:da:97:d9:68:11:14:88:ac:e9:bd:fc:
         e1:51:65:ff:12:3b:8f:e2:1a:27:3b:6f:21:36:ac:77:12:bb:
         8d:61:5f:f9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhA5cYvDnEAv8KEiuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
OGQ3MjQ2NDMtODdlNi00NTEwLTg1N2ItZjMyZTY5NTNmYjA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxbu8Y/RzxndKtW4D+8sedTw0zTeiGzjR4fA
gvS9xtDsD+4DJQ5yWKbbstIIUpoyfj6bDVjbdXwkZ+Sqh7CeeAe9o8YgZojpMwEy
AufCoj8Fa7sl8LrBSk8lg1elmZyBr1fH4Mhrm0B9aBw7a03yGz1JBFddPozQxcxD
tRWxSwUX/frMDWi72ciR8f6UaARPQ958hRstDN7Cwd4ggdp7qXKw70zKSwN/W1Br
CcJuaiWJR7s0eEq4VItXyxCXds3AI4n/PvkAYkKpEvj9vBwigjhXcPJZ3rhnn+aO
l85qZmLouN53g5B52VjmcICgipktyo8fOs+i6xXToKv694aDaQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM0Xqduku0joNqQkcBfV4+3VQSRhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVlYjUzZmItMGVmNS0z
ODYyLTgzYTEtMmI0NDA2YzgwM2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC3ii8S8svnyXTeYUN09nrV6z8YOi7Y5dyKyVQCv2fgFaD8M4t5O8w7
QJrD+yVG3cq9/GeW4u3PmVTZJ9xsNEa4sSGU4mIxUvhwr0jFIaN9YWDZ3UoApEoG
8CcymMTtH5jXhVSOxSOJ+bVzMWIcny1kHogtXZVYt9ou74QH1eTjlNreJ6mrXvYC
f+HXrenXsddHhypjBdTUw/txCGCWxGtaSdm00A+4jri/lv4NOnXdrr1MXnUs2gIw
weBkBBQJ8Lwv6MgLkPq0+8FhfgFvMQG7Po+yBnaRmaeOvLgCqO1d2pfZaBEUiKzp
vfzhUWX/EjuP4honO28hNqx3EruNYV/5
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:02 2025 by rpki-client