Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b5dcefd-bd8a-367f-888b-19b8b280330b.roa
File:                     5b5dcefd-bd8a-367f-888b-19b8b280330b.roa (raw, json)
Hash identifier:          AHH8+U4ajJKEa7uuE6vttDgX4FgCnlKkwvgUHtUcIJo=
Subject key identifier:   BE:3C:4F:E6:41:DE:26:CE:7A:A5:D3:67:19:0C:91:FB:A8:A4:5A:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484242F7575687D6991E9A74C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b5dcefd-bd8a-367f-888b-19b8b280330b.roa
Signing time:             Thu 19 Dec 2024 13:45:10 +0000
ROA not before:           Thu 19 Dec 2024 13:45:10 +0000
ROA not after:            Wed 19 Mar 2025 12:45:10 +0000
asID:                     396600
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:42:f7:57:56:87:d6:99:1e:9a:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:10 2024 GMT
            Not After : Mar 19 12:45:10 2025 GMT
        Subject: CN=e201310a-68f5-403c-8b65-f7c019d41b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:83:13:25:88:0e:7c:fc:bb:56:98:08:0c:
                    bb:e7:71:5e:11:69:58:68:20:95:0c:c5:58:d3:af:
                    d0:45:2d:26:6c:56:88:91:3c:2b:a5:e9:49:7c:23:
                    45:33:c0:43:d7:9f:75:99:6c:9d:c7:1f:c8:c3:ac:
                    aa:52:54:14:6f:36:4a:ec:51:a3:c3:af:b7:51:ff:
                    31:ca:8d:96:35:49:59:c1:3c:a9:0d:06:1a:b1:25:
                    ec:87:d7:3f:e2:38:c6:16:25:82:14:3f:ce:be:6d:
                    42:1a:d7:ca:7f:02:5f:88:f0:d0:7c:15:1a:2c:80:
                    9d:b8:61:2b:62:48:46:db:76:2b:47:30:76:03:e0:
                    0e:7d:b2:d1:ee:68:4a:27:a0:54:40:cc:89:a1:ab:
                    e0:f6:ae:09:aa:02:db:42:7d:41:10:d1:ba:c9:29:
                    be:1c:92:79:53:0d:91:26:bb:db:6e:73:2b:b3:b6:
                    e6:2a:24:e2:c1:02:2a:f7:58:c1:92:e7:84:25:89:
                    e9:68:c0:83:c5:a6:1a:8a:0e:f2:d9:51:b8:91:86:
                    1b:32:62:12:dd:07:14:55:6a:c0:c8:46:8b:79:80:
                    b1:4b:81:9e:2f:47:a9:c4:49:2e:38:a2:5f:f9:5c:
                    8f:fc:2f:2e:98:6e:2b:61:f7:1a:2f:80:08:63:db:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3C:4F:E6:41:DE:26:CE:7A:A5:D3:67:19:0C:91:FB:A8:A4:5A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b5dcefd-bd8a-367f-888b-19b8b280330b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ce:5e:46:1f:3f:77:5f:61:d3:42:d1:cd:22:c7:89:4d:11:
         c6:43:73:df:4c:41:56:5e:49:d1:21:33:fb:37:50:60:6a:52:
         16:0e:2a:d9:89:61:f5:f7:25:93:ee:8a:38:eb:6e:19:96:a8:
         44:fa:49:ca:d7:c1:20:73:a6:8e:b4:c9:1c:1e:c0:c4:0c:1f:
         6f:a4:9b:44:5c:a3:1e:be:c1:fa:11:e1:df:51:0f:84:5b:ad:
         3e:f0:b7:79:e8:bf:d8:6d:e7:49:31:bc:6d:26:f8:28:38:2f:
         c2:ba:f3:46:71:c5:ea:26:d5:7d:93:dd:ec:17:5b:7e:e1:71:
         f5:a6:7b:c2:d4:30:24:41:e8:38:fd:34:d8:24:7d:fa:7a:f8:
         08:89:a8:66:64:db:a0:9a:cd:67:63:3f:58:22:6c:38:16:1a:
         bb:8f:5c:1d:a1:5b:25:73:92:b6:87:c3:44:4c:47:8e:a8:0c:
         30:cb:24:14:57:c7:13:fb:74:e0:9f:e9:82:c9:a7:d6:bf:0a:
         69:56:68:2e:3a:cf:17:af:9b:ed:11:93:0a:5d:d5:d1:67:2d:
         f8:d1:e8:ae:ec:0e:f5:45:39:f6:1f:41:67:5f:a0:2c:58:4f:
         97:9e:1d:03:e5:80:19:25:bc:1a:32:b4:4f:87:cd:1a:e6:79:
         1e:f5:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----