Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a900516-de14-3881-8a5d-1e6978fb315d.roa
File:                     4a900516-de14-3881-8a5d-1e6978fb315d.roa (raw, json)
Hash identifier:          Q4lDnBxOymeV47wgSKrrFoOZF4Rg86kjO4hhdUqCR0E=
Subject key identifier:   62:20:20:51:04:FC:2D:28:C4:15:E3:76:F8:EC:27:85:0C:6C:72:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424339B6F3F2B0FA18A174C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a900516-de14-3881-8a5d-1e6978fb315d.roa
Signing time:             Thu 19 Dec 2024 13:45:41 +0000
ROA not before:           Thu 19 Dec 2024 13:45:41 +0000
ROA not after:            Wed 19 Mar 2025 12:45:41 +0000
asID:                     396604
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:39:b6:f3:f2:b0:fa:18:a1:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:41 2024 GMT
            Not After : Mar 19 12:45:41 2025 GMT
        Subject: CN=f53f1a91-5861-4d25-9973-471ba997270e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ba:ef:18:ac:f5:62:97:d0:15:85:1d:45:c2:
                    c6:df:73:b3:c3:c4:65:44:bc:9f:47:7c:8e:df:0d:
                    8c:e0:29:d8:c0:18:66:40:aa:c2:12:94:02:69:c1:
                    8d:87:56:fb:a1:d8:6c:52:fb:d2:9b:e9:02:f7:0c:
                    db:0f:4e:3c:29:91:19:ef:92:f4:0c:4b:b0:d5:6c:
                    08:9e:7b:10:72:cc:1e:07:d5:dd:56:cb:b7:4a:e5:
                    be:c1:b1:80:9e:aa:09:4a:11:10:b8:d8:3c:18:10:
                    22:17:db:62:40:22:8b:68:88:08:b1:4a:fd:11:be:
                    bd:be:eb:b1:9a:ac:2f:0a:c6:13:2c:be:74:c4:6f:
                    ba:9f:94:a0:e3:0e:49:4e:38:df:67:f8:c1:fc:51:
                    da:be:d6:32:bf:e4:0b:25:fc:3a:0d:f7:d5:10:24:
                    12:23:5f:f6:eb:cd:fd:0c:4f:50:9e:59:4d:92:78:
                    b9:fb:23:54:ed:ee:36:83:d0:22:e8:94:62:f6:22:
                    bf:8b:da:15:f2:39:77:63:a0:f6:8e:10:c8:65:28:
                    70:d2:9b:e0:de:55:56:67:a6:6a:1c:10:f6:ab:b4:
                    87:32:24:fc:f2:41:78:64:8b:c3:de:8b:6c:2c:6b:
                    0d:b0:e7:e3:c8:76:73:ef:a5:90:a9:49:89:89:5a:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:20:20:51:04:FC:2D:28:C4:15:E3:76:F8:EC:27:85:0C:6C:72:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a900516-de14-3881-8a5d-1e6978fb315d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:76:51:a6:fe:4b:19:12:85:3c:ee:f3:49:ab:15:3e:84:af:
         46:bd:7c:6f:5d:1d:51:a0:e5:3a:a8:90:7b:e4:37:2e:2c:ad:
         da:75:30:f1:80:81:a6:6e:c6:09:b8:39:b7:0c:a5:09:5a:63:
         2d:6a:cd:41:6b:82:5e:91:61:c2:7b:2d:50:8f:79:33:41:32:
         f7:c5:bb:8f:5d:23:6a:3c:17:67:6a:22:da:2a:4f:aa:2a:75:
         ca:8d:74:8f:91:73:5b:0e:34:4b:11:55:3e:39:1e:8c:31:e4:
         22:d0:b3:8b:73:cd:7a:9c:f2:9e:b5:7f:4e:11:74:84:08:38:
         e2:dd:cd:89:ac:d7:2c:d0:e7:53:55:f2:44:b5:ad:3a:25:1c:
         1d:67:14:58:41:ab:31:52:a8:d7:02:9d:f4:6d:a6:ae:25:5a:
         a6:a1:19:7d:17:3f:97:47:8a:99:ad:cb:d3:fc:01:b7:c0:8d:
         c6:21:21:0e:bb:a3:40:4b:21:e4:a7:fd:a4:34:8a:a7:33:43:
         26:f6:72:15:6a:b9:0a:88:b1:22:96:6e:82:19:02:07:c8:b1:
         68:3a:3e:b0:5d:82:e0:01:40:b3:76:44:bd:3a:75:d0:e8:3e:
         a1:66:27:4b:d4:7e:91:43:8e:31:0e:a7:b0:29:96:24:cf:70:
         42:fd:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----