Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6e14fa-c1b7-311f-942f-0fcb8f1064ca.roa
File:                     5b6e14fa-c1b7-311f-942f-0fcb8f1064ca.roa (raw, json)
Hash identifier:          zx0nyxYXgqx1I4bYGpZJxJHaRl0v4brtuBx0I5d5boI=
Subject key identifier:   5F:77:E1:A4:CE:2D:78:6B:AB:8B:8F:98:2A:98:0C:F8:7E:F4:9D:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842433596F1A1FB0F91E86B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6e14fa-c1b7-311f-942f-0fcb8f1064ca.roa
Signing time:             Thu 19 Dec 2024 13:45:39 +0000
ROA not before:           Thu 19 Dec 2024 13:45:39 +0000
ROA not after:            Wed 19 Mar 2025 12:45:39 +0000
asID:                     396547
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:35:96:f1:a1:fb:0f:91:e8:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:39 2024 GMT
            Not After : Mar 19 12:45:39 2025 GMT
        Subject: CN=0a73efc9-ebdf-4e4b-97de-6ccb2d47fb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:63:2b:36:70:3c:6b:20:7f:ab:60:77:89:a5:
                    f7:a3:9e:bc:d0:c2:08:af:cc:0e:d4:eb:3a:d9:4c:
                    6f:16:58:72:df:08:f4:a6:22:e1:16:8b:35:48:c2:
                    d4:36:16:e6:6e:20:c6:38:57:6e:99:9b:12:22:b9:
                    d5:c9:71:ab:51:eb:e9:c0:20:db:47:43:98:48:7c:
                    15:dd:b8:d8:4f:28:25:29:3d:de:cb:41:4a:19:29:
                    fc:ab:e2:4e:a1:0e:f5:dd:0d:ef:df:90:92:ae:93:
                    d6:af:a9:dc:27:6e:cb:4d:dc:83:de:7c:6e:86:87:
                    8a:0b:3b:bb:05:6f:82:3a:ca:63:3f:e7:0a:81:36:
                    64:6b:43:b7:03:dd:e2:55:f1:ec:9d:7f:f1:1a:04:
                    84:bd:33:62:0f:dd:08:76:07:f9:c6:ec:43:e1:c1:
                    c8:09:ee:9f:cf:32:73:8c:26:36:32:5e:21:34:87:
                    88:ec:6b:46:b5:6e:e2:73:55:17:bb:f9:70:64:73:
                    39:c1:a6:47:f2:91:be:bc:cb:22:aa:75:7e:98:62:
                    98:c0:3f:51:1f:d5:8f:85:ee:57:0d:86:df:cf:30:
                    d3:ef:c2:40:70:52:89:d8:17:de:e1:a1:4b:db:8b:
                    3f:c8:dd:bd:7d:13:42:e6:f8:78:7b:e6:9c:5e:17:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:E1:A4:CE:2D:78:6B:AB:8B:8F:98:2A:98:0C:F8:7E:F4:9D:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b6e14fa-c1b7-311f-942f-0fcb8f1064ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:59:00:b0:dc:5a:b7:84:8c:7a:80:00:48:a4:07:66:68:
         e3:d0:3d:03:da:e4:b7:75:9a:9f:a4:50:af:4d:b8:b6:52:06:
         41:69:3d:ff:c0:e6:ca:32:dd:28:14:49:e0:9f:43:ec:0c:70:
         c3:db:38:5a:22:c9:ff:7b:51:14:97:37:c7:e3:c6:93:0c:49:
         6a:af:45:a4:bf:ad:0a:c2:a4:81:79:51:4e:a5:21:c1:7d:89:
         85:32:85:30:69:a0:a9:6d:cc:79:c9:e9:4b:bb:30:4f:07:7f:
         a7:b8:d7:13:19:47:88:05:ef:8a:e1:b4:44:a4:e5:e0:e2:ee:
         46:15:2c:52:4f:20:32:a1:5a:1c:a8:f9:73:a1:b0:ab:96:86:
         fd:b2:49:97:dd:7e:c0:a2:8a:0d:b4:67:3a:b6:8b:7d:16:18:
         82:82:27:c5:ae:7f:8a:0a:cd:c0:d4:ca:d0:e3:23:95:59:db:
         d8:aa:02:3f:7f:37:1e:29:76:7f:15:0a:01:78:9d:a3:63:b4:
         de:29:41:17:20:e4:da:3b:df:61:53:16:ec:b5:db:b2:75:4c:
         2e:fb:8f:58:83:d9:f5:7b:4c:9c:51:4b:42:c9:47:6c:9b:7a:
         7a:46:72:33:c0:2e:1e:28:cc:dd:e4:c6:e7:63:35:47:2c:e3:
         84:b0:0f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:56:15 2025 by rpki-client