Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/386fc557-5fdc-3211-973f-99911f9c77ad.roa
File:                     386fc557-5fdc-3211-973f-99911f9c77ad.roa (raw, json)
Hash identifier:          lb1719yL0lG1P6FTEdnDEMEpiJhev01Tm0GgybL5kYk=
Subject key identifier:   D6:96:9D:12:F9:89:2B:36:8B:16:24:1A:DA:64:56:DC:61:5D:89:2A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F5819D05A1B65F629CB600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/386fc557-5fdc-3211-973f-99911f9c77ad.roa
Signing time:             Thu 23 Jan 2025 13:38:19 +0000
ROA not before:           Thu 23 Jan 2025 13:38:19 +0000
ROA not after:            Wed 23 Apr 2025 12:38:19 +0000
asID:                     36623
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:81:9d:05:a1:b6:5f:62:9c:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:19 2025 GMT
            Not After : Apr 23 12:38:19 2025 GMT
        Subject: CN=c4134f32-5567-41d5-9baa-8ac2e49c18c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:be:35:20:e0:4b:06:7c:70:b9:3f:57:fc:
                    cc:bf:d3:2b:b8:67:76:ad:97:78:e5:4e:d6:8c:2a:
                    97:b7:eb:19:f2:50:de:0a:dd:36:57:47:78:7b:88:
                    3b:06:41:7a:e6:aa:0e:ea:3c:8a:04:5f:f5:3d:99:
                    46:85:5e:65:66:6b:fe:2a:0b:04:e9:70:cd:b9:a4:
                    4e:e1:bf:88:b3:1b:49:13:4a:33:da:41:d5:40:a9:
                    d2:d9:14:7a:79:cc:57:05:db:65:3f:91:4c:76:37:
                    98:21:c6:60:23:7f:bf:c2:01:8e:d0:91:c8:51:77:
                    fb:0a:f9:fd:ad:be:0f:77:62:83:53:26:ac:13:b4:
                    99:91:83:92:e4:ee:42:00:9d:59:25:a7:38:d9:9f:
                    7c:96:08:85:92:f9:55:c2:3d:c7:8e:47:02:94:35:
                    8d:34:78:50:b2:79:8e:43:e5:37:25:cf:4f:b6:d9:
                    83:2e:76:73:d2:54:b7:19:81:db:68:58:b4:2a:e2:
                    90:8c:81:ed:1e:af:e5:a7:ed:e5:f1:ff:a0:25:8a:
                    88:54:6d:f0:9c:5f:21:af:e8:b5:52:51:6e:a4:fb:
                    0e:48:84:38:ec:70:90:25:6d:e4:e0:b6:29:e9:13:
                    a4:f0:b4:63:24:2b:84:81:a6:fa:21:d0:c4:fb:01:
                    74:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:9D:12:F9:89:2B:36:8B:16:24:1A:DA:64:56:DC:61:5D:89:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/386fc557-5fdc-3211-973f-99911f9c77ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:43:b3:1c:78:b2:a3:38:60:5b:f1:f4:75:be:f0:a7:34:
         c5:fa:ca:d9:70:d2:fa:b5:18:03:c2:cc:35:ff:b6:91:24:7d:
         1e:e5:71:d1:d2:67:90:81:57:ab:47:eb:08:9e:c4:c5:cf:88:
         1a:bc:1e:86:2c:ce:99:87:03:18:36:16:9d:9f:46:e3:17:5e:
         89:66:8e:91:9c:14:4d:a0:45:32:fa:7d:50:30:92:b7:bf:4d:
         84:cf:31:fe:8b:6c:bf:b4:f3:c2:f0:9b:07:cc:aa:8c:2b:ae:
         23:00:62:10:96:9f:35:aa:03:37:9f:a7:a2:7b:5c:b4:0d:a8:
         7e:e4:9f:af:b7:c7:0a:87:d2:e9:6c:a2:7d:9d:d3:72:12:46:
         f6:48:66:4a:41:d4:e6:bb:99:40:7f:ee:fa:c6:c4:3e:5f:cb:
         bb:de:01:26:6a:05:20:d7:cc:53:b2:b5:02:85:6a:75:e7:c0:
         5e:5d:4d:89:6f:19:79:f8:87:34:03:cc:69:18:53:29:76:c4:
         05:1b:e4:60:49:a5:49:f2:f7:8d:da:63:34:7c:af:4a:5e:77:
         cc:8a:a5:a7:9b:91:c4:5e:04:bc:da:47:9a:92:e8:57:52:ef:
         6a:db:b3:12:b7:17:e7:02:93:e9:ca:e6:1a:18:7a:4f:9f:2b:
         27:fa:7f:a3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEij9YGdBaG2X2KctgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMzEzMzgxOVoXDTI1MDQyMzEyMzgxOVowLzEtMCsGA1UEAxMk
YzQxMzRmMzItNTU2Ny00MWQ1LTliYWEtOGFjMmU0OWMxOGMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodG+NSDgSwZ8cLk/V/zMv9MruGd2rZd45U7W
jCqXt+sZ8lDeCt02V0d4e4g7BkF65qoO6jyKBF/1PZlGhV5lZmv+KgsE6XDNuaRO
4b+IsxtJE0oz2kHVQKnS2RR6ecxXBdtlP5FMdjeYIcZgI3+/wgGO0JHIUXf7Cvn9
rb4Pd2KDUyasE7SZkYOS5O5CAJ1ZJac42Z98lgiFkvlVwj3HjkcClDWNNHhQsnmO
Q+U3Jc9PttmDLnZz0lS3GYHbaFi0KuKQjIHtHq/lp+3l8f+gJYqIVG3wnF8hr+i1
UlFupPsOSIQ47HCQJW3k4LYp6ROk8LRjJCuEgab6IdDE+wF0EQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNaWnRL5iSs2ixYkGtpkVtxhXYkqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzg2ZmM1NTctNWZkYy0z
MjExLTk3M2YtOTk5MTFmOWM3N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCdf0OzHHiyozhgW/H0db7wpzTF+srZcNL6tRgDwsw1/7aRJH0e5XHR
0meQgVerR+sInsTFz4gavB6GLM6ZhwMYNhadn0bjF16JZo6RnBRNoEUy+n1QMJK3
v02EzzH+i2y/tPPC8JsHzKqMK64jAGIQlp81qgM3n6eie1y0Dah+5J+vt8cKh9Lp
bKJ9ndNyEkb2SGZKQdTmu5lAf+76xsQ+X8u73gEmagUg18xTsrUChWp158BeXU2J
bxl5+Ic0A8xpGFMpdsQFG+RgSaVJ8veN2mM0fK9KXnfMiqWnm5HEXgS82keakuhX
Uu9q27MStxfnApPpyuYaGHpPnysn+n+j
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:48 2025 by rpki-client