Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446c912a-6cfc-3744-aba1-93d3dfa00017.roa
File:                     446c912a-6cfc-3744-aba1-93d3dfa00017.roa (raw, json)
Hash identifier:          HkjX6UsLjSn//FbVranEzwjandzEPClD9C7MdY4tEN4=
Subject key identifier:   61:FE:38:78:51:71:64:6F:64:84:AA:C8:CA:B0:F9:6D:D8:89:14:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B3E42115543E8D3D16E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446c912a-6cfc-3744-aba1-93d3dfa00017.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     36630
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:3e:42:11:55:43:e8:d3:d1:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=7974d04d-385a-48b8-bf07-b3fed204af33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:07:14:a0:6b:61:2e:8b:bb:f9:60:32:70:
                    3a:33:bb:40:9f:76:b4:73:04:88:4a:80:d5:3f:fe:
                    fc:2a:34:d8:8c:0d:b2:69:26:70:2a:a3:ec:c7:6b:
                    35:71:a3:ca:a5:30:eb:cd:9b:19:53:41:88:64:a0:
                    2f:49:e4:f5:8c:ef:3f:51:e5:da:ae:ff:48:bd:25:
                    06:3e:93:18:d3:b7:65:e2:5c:64:a1:ff:9c:07:f3:
                    02:0c:2b:b4:20:d6:78:c4:97:43:bf:db:0a:e0:8d:
                    f7:d7:10:d1:d3:02:8f:bb:3b:32:36:04:c4:76:0b:
                    ac:77:c9:f3:30:bd:41:2b:da:ad:70:c9:44:a7:73:
                    0e:2b:92:bb:3a:34:a5:d8:f2:04:87:c7:9e:7d:ae:
                    2b:2e:9b:00:f7:6c:00:d7:61:96:65:9e:0a:ac:f0:
                    50:3a:79:f7:6b:fb:a5:d4:01:ae:d5:78:e0:92:16:
                    66:9c:98:9f:a4:7c:82:92:e3:c5:ab:8c:e4:1a:66:
                    8c:e4:26:61:55:c7:5f:cc:67:d8:78:54:73:19:84:
                    6a:f3:a9:a8:df:6f:c2:63:cf:ae:27:72:5d:e6:4c:
                    27:7c:9e:ee:4d:99:e0:1c:3d:24:2f:67:6a:34:4f:
                    21:c4:09:1c:95:74:4f:73:dc:5c:2d:4d:62:bf:a2:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FE:38:78:51:71:64:6F:64:84:AA:C8:CA:B0:F9:6D:D8:89:14:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/446c912a-6cfc-3744-aba1-93d3dfa00017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:5c:e4:fa:ec:61:fe:c6:ef:be:f7:fd:36:7f:b4:e3:8e:
         65:c4:ba:6d:b0:92:9a:88:d3:93:4c:a6:a3:08:11:3f:24:a4:
         b4:07:5a:50:f1:ea:51:4e:e6:81:f9:fe:48:3b:a8:9e:b9:92:
         c2:d9:5d:13:d7:c8:4e:36:f6:49:f6:03:d7:9f:4f:0b:cd:1e:
         4f:76:d2:80:13:5b:10:e4:af:9f:a5:ad:f0:78:35:16:1f:b4:
         dd:54:68:a4:a6:4e:71:69:93:35:8c:c9:83:43:83:2f:90:36:
         4e:63:bb:63:e3:08:be:76:04:65:3f:28:7e:48:39:2f:67:90:
         9b:ba:5b:ad:99:47:c7:ac:b5:75:60:a1:04:7f:5b:6a:cd:ef:
         81:99:5a:d2:3c:4d:35:92:0a:08:35:6b:18:bc:b7:72:a4:77:
         45:a7:16:23:0d:84:39:7f:9f:f1:81:0d:6d:a7:4b:69:9b:db:
         2c:5d:c4:00:15:37:8c:d7:8b:7c:25:93:cf:48:85:47:6e:76:
         92:d2:81:28:d2:db:75:f2:df:fd:a6:62:ba:6b:a4:2a:27:77:
         6e:45:bc:1b:b0:b5:00:71:d5:f3:3f:5e:c0:97:dd:5d:13:b8:
         fc:a6:02:45:32:d2:ab:c5:6b:24:3d:2f:07:4e:23:1a:0d:f8:
         db:ad:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----