Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48745a94-99c4-3773-961c-105707f9eeea.roa
File:                     48745a94-99c4-3773-961c-105707f9eeea.roa (raw, json)
Hash identifier:          8JZS5pyx7q6ka2WQkCIg8MfRwd2eJurBeGJNzmbTS2Y=
Subject key identifier:   B3:A6:4F:02:34:47:C6:D6:A8:5F:0B:2F:6A:EF:EE:7E:D8:0D:EC:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484D75A3119F44C338657BCA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48745a94-99c4-3773-961c-105707f9eeea.roa
Signing time:             Mon 23 Dec 2024 14:00:51 +0000
ROA not before:           Mon 23 Dec 2024 14:00:51 +0000
ROA not after:            Sun 23 Mar 2025 13:00:51 +0000
asID:                     396569
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:75:a3:11:9f:44:c3:38:65:7b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 23 14:00:51 2024 GMT
            Not After : Mar 23 13:00:51 2025 GMT
        Subject: CN=05d3f62b-363b-4fcb-a3a4-94ed0538574f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:63:46:c3:2e:a5:36:58:93:57:ed:4b:aa:
                    85:92:41:62:bb:0d:07:7e:7c:b2:33:a9:c3:05:38:
                    d7:46:db:27:28:ba:32:7a:26:ae:6d:1d:2e:a3:fd:
                    ee:bf:ca:f6:97:fc:cb:66:8b:2d:3d:69:ef:9d:da:
                    a5:1a:0f:95:aa:16:73:db:30:ec:e4:27:39:f8:82:
                    58:5c:49:4c:fa:cf:47:67:1b:60:7c:27:45:57:36:
                    d5:1e:0d:c0:37:97:32:6c:a6:f7:ce:37:17:a2:f6:
                    ca:ef:b2:18:f3:6c:9f:b8:cd:27:1a:f1:fa:f6:6b:
                    cd:a0:c0:68:1c:46:0c:55:3a:13:0f:ca:ae:82:b7:
                    46:d6:62:95:9b:17:da:b3:12:e7:0d:1b:0c:42:d4:
                    c3:fa:d3:b2:75:74:87:c3:4f:f6:39:6c:f0:06:e3:
                    42:98:b5:9f:cd:a1:d2:a7:c0:13:f1:e3:f0:1e:1e:
                    24:f6:35:bb:81:10:25:d2:54:ec:fa:83:06:a7:7e:
                    75:d9:69:0b:b1:00:55:f0:af:fd:54:86:c2:9b:0b:
                    de:f7:1d:45:2c:c7:a6:96:5a:5f:40:2a:d6:44:b0:
                    57:49:03:9f:35:7d:d7:55:81:34:8e:15:5b:9c:a8:
                    15:a8:94:7f:59:7e:ac:1a:1f:53:27:68:74:2e:b2:
                    be:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:4F:02:34:47:C6:D6:A8:5F:0B:2F:6A:EF:EE:7E:D8:0D:EC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48745a94-99c4-3773-961c-105707f9eeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:32:7b:57:d4:af:dd:40:ff:cc:64:1c:e1:c0:de:30:df:
         ac:17:8c:91:7d:7f:16:f9:97:7e:f9:e3:19:99:be:bd:70:cf:
         68:d8:18:a2:bd:18:a9:38:0e:ae:b3:d2:03:e2:96:1f:77:a3:
         f9:1b:ef:95:e0:31:09:fd:8b:6e:02:0e:ad:d3:6d:cd:c4:f1:
         88:dd:51:ce:b0:5a:07:ab:b2:75:c5:8a:df:08:07:d0:05:87:
         de:25:04:af:c2:d4:b0:0c:0b:8b:a9:dd:c1:40:8f:99:75:94:
         9e:fc:f6:63:fc:b4:4e:08:2c:c2:84:6a:ec:2f:35:86:21:22:
         14:32:f1:85:1f:e7:5a:f2:b5:2b:7b:b5:3c:bc:b6:31:5b:06:
         1f:5a:8e:d7:2a:15:50:f4:98:e4:bb:6c:16:ec:31:82:7c:ef:
         d7:3b:13:57:ba:17:74:61:eb:de:3b:cf:31:32:2b:89:4e:5b:
         37:9a:49:06:33:d6:ab:c1:d0:a6:63:dc:94:d8:ca:28:d5:0c:
         07:13:61:a9:25:16:00:c8:a6:1c:b2:7f:26:fd:0e:ce:ae:b0:
         4a:1e:2a:c8:85:54:b4:99:c2:10:2e:36:fa:0c:74:3b:c4:94:
         00:20:23:a5:d2:50:3c:26:e0:c1:80:ab:b4:1c:66:35:25:99:
         29:fe:5d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:39:52 2025 by rpki-client