Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c977ae7-9709-36ef-9741-a83ad90aa93e.roa
File:                     3c977ae7-9709-36ef-9741-a83ad90aa93e.roa (raw, json)
Hash identifier:          JOJuYw4TR+PYbmYSX9Bh2hJt6I7Wgo5I9ooLto2j6EU=
Subject key identifier:   44:91:E6:49:44:79:73:9D:CB:82:82:16:1E:12:19:2C:5C:51:88:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842432E83C63AEBE66610D940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c977ae7-9709-36ef-9741-a83ad90aa93e.roa
Signing time:             Thu 19 Dec 2024 13:45:36 +0000
ROA not before:           Thu 19 Dec 2024 13:45:36 +0000
ROA not after:            Wed 19 Mar 2025 12:45:36 +0000
asID:                     396574
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:2e:83:c6:3a:eb:e6:66:10:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:36 2024 GMT
            Not After : Mar 19 12:45:36 2025 GMT
        Subject: CN=b0c56a02-9341-4d2c-91f1-8f820366b7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:8c:e8:f3:3b:1d:b3:f1:a2:75:29:4d:e7:
                    72:07:b4:58:c9:29:db:6e:ab:b2:60:64:0c:4a:9b:
                    19:f7:15:8e:23:8a:2e:b6:ad:bd:87:71:53:d4:e5:
                    83:54:9d:05:ec:cb:33:af:ba:bc:81:e7:b6:b1:69:
                    ae:09:49:2a:e0:ae:6b:14:ea:cb:bb:39:d2:61:55:
                    79:64:40:07:80:f4:70:58:b1:a3:7b:9a:73:3d:7d:
                    0c:11:a4:f6:e8:9e:b7:34:ac:4a:0c:e0:49:88:f4:
                    57:f2:77:d3:91:7d:b4:c6:0f:4c:9f:d7:07:87:52:
                    e2:0b:55:ae:b2:60:0a:05:6e:21:68:1e:ea:b7:99:
                    23:2c:5a:f8:c5:ab:cd:1d:b0:ca:44:b0:f7:25:64:
                    37:d7:6b:1d:92:80:5f:b8:1d:f7:d9:df:88:73:d9:
                    5f:10:4d:83:d1:24:78:14:61:8e:ad:a0:c6:c9:53:
                    88:28:46:be:d8:0c:70:3d:95:be:03:fa:99:cc:43:
                    bd:e5:2e:6c:50:bf:66:bb:a0:91:6c:be:c8:5c:62:
                    bd:45:a5:03:b1:dc:5a:d5:7b:c4:65:15:11:d8:fe:
                    0d:8d:74:5e:dd:fc:9b:7e:44:29:c8:68:f4:ff:e0:
                    0b:2d:56:7d:2b:d9:01:8b:92:a8:23:42:26:44:5c:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:91:E6:49:44:79:73:9D:CB:82:82:16:1E:12:19:2C:5C:51:88:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c977ae7-9709-36ef-9741-a83ad90aa93e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:df:cf:0a:3f:d8:93:f2:16:f4:79:78:08:18:8c:4c:4f:
         8d:09:72:09:e9:25:e0:e7:db:ef:15:00:f3:be:cf:e1:6a:2c:
         53:e5:34:6d:df:da:97:cb:1c:f3:6e:96:2c:6f:f4:24:5b:a1:
         eb:e1:1f:d6:07:47:a6:51:f8:11:db:ba:ca:84:27:46:db:9d:
         09:5b:ea:b1:03:47:05:ea:be:7f:1f:7b:eb:24:2f:92:b8:6d:
         23:f1:3b:f1:90:1f:a8:0d:a0:f2:47:3e:18:0d:7e:35:f4:a2:
         db:3d:24:1f:d5:8d:47:d7:0e:5e:4f:54:d4:e8:cc:5c:a8:b2:
         b3:85:84:3c:a1:5b:a2:5a:00:e7:fe:81:a0:0c:75:cf:a7:c4:
         45:f9:46:07:c2:9f:5f:d4:d7:fb:2e:87:2e:bf:42:f2:76:e4:
         84:d9:ed:0e:1a:0d:a9:ef:08:0c:aa:4b:57:d3:d2:e5:61:a5:
         51:84:48:70:02:48:46:f5:be:5f:38:9d:cd:17:bc:1a:d3:b7:
         ef:65:21:5a:1d:eb:fb:07:a9:01:86:db:47:d8:ec:dd:d6:9b:
         10:1a:15:e8:41:44:88:21:04:60:35:40:c9:bd:74:bf:82:35:
         5c:de:1b:e8:48:b4:2e:4a:3b:b8:92:59:fb:37:0d:b4:69:f1:
         f6:cb:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:27:32 2025 by rpki-client