Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646b5853-b79b-35da-a1fb-0caae53575ed.roa
File:                     646b5853-b79b-35da-a1fb-0caae53575ed.roa (raw, json)
Hash identifier:          m9C3o0dpAzFgGlkT3+2Ek7U9iMCncxuPT/z+ISi/GPQ=
Subject key identifier:   D6:E0:02:52:A9:FA:3D:0B:B1:B1:CA:52:76:B2:8E:F9:A4:54:CA:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3D19565DE03D8DCB0EFA
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646b5853-b79b-35da-a1fb-0caae53575ed.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     36629
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:3d:19:56:5d:e0:3d:8d:cb:0e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=e642eea4-0b4c-43a6-911a-40e456c48b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:8c:71:1e:1f:b8:a7:ff:fb:47:ff:99:66:
                    2c:50:5e:03:35:c1:47:cf:f7:d8:a8:27:92:a6:ce:
                    43:86:cd:e8:f0:c9:0c:80:ac:3e:79:6b:9c:eb:7d:
                    5f:e5:b9:66:ae:21:fb:81:4d:d4:7b:3d:8d:2e:de:
                    93:8a:85:9b:dc:1a:55:3f:7e:8e:d3:de:0d:fe:e6:
                    97:22:fc:1a:89:ce:7b:75:b1:9d:8c:ca:16:6a:fc:
                    53:e3:2f:47:90:1b:59:64:7d:54:51:11:91:42:27:
                    90:ee:8c:a1:ba:88:82:8f:aa:4a:66:dc:3c:a8:db:
                    35:54:42:8f:6a:ca:e6:65:f1:ce:55:52:36:05:25:
                    9e:14:34:e3:23:16:dd:13:34:3b:0d:56:4e:19:a8:
                    25:aa:d3:28:2e:a6:39:df:80:af:59:a5:52:28:64:
                    d1:d7:b4:f7:5a:f5:55:a5:0f:d7:50:89:39:dc:4e:
                    d2:e0:fb:58:e2:db:f9:37:be:9a:08:f3:7e:46:22:
                    61:b9:66:a3:bb:19:d8:35:ec:90:1e:d6:61:65:59:
                    25:d3:c9:2b:59:29:31:e8:ac:c2:e5:68:3c:0e:95:
                    d4:88:bc:b5:d2:49:54:15:cf:d4:5f:22:ac:70:5e:
                    1a:d0:7b:39:8e:da:10:f4:5f:41:92:c7:05:db:b4:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E0:02:52:A9:FA:3D:0B:B1:B1:CA:52:76:B2:8E:F9:A4:54:CA:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646b5853-b79b-35da-a1fb-0caae53575ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:38:ce:01:7f:43:c4:bb:07:79:a7:78:0f:78:a1:cc:fc:
         77:2c:9f:e9:2a:20:87:7b:93:82:d9:24:fd:4a:e4:e3:bb:87:
         df:a0:4c:c0:16:6a:09:0d:af:8d:8c:7a:d0:2b:76:1c:46:50:
         55:67:de:b6:35:96:14:b9:9f:d0:81:3d:e6:b3:d4:e1:3a:d0:
         80:4e:d1:24:4d:2e:27:1e:1f:7a:98:83:50:63:02:a4:96:d5:
         76:82:fa:35:95:ee:43:18:55:0b:cc:b5:15:ac:02:93:5e:bd:
         94:ea:a9:6f:71:eb:65:09:91:c4:4b:0e:5a:0c:72:c6:d8:63:
         8f:a2:9a:6d:a6:d6:36:e5:99:21:ca:24:64:b8:0c:32:bd:30:
         1d:69:f3:89:22:9c:82:ba:c8:ae:77:d4:6a:41:4c:ff:c8:bf:
         f7:90:32:d1:15:1c:01:8d:64:b6:56:eb:a5:39:86:91:b4:2c:
         54:5d:e1:49:16:2b:d0:e9:f3:b5:96:1a:dd:91:22:20:09:67:
         b4:53:fb:65:59:73:95:94:07:a8:bd:31:0d:64:d4:cb:5e:51:
         47:b7:fe:5f:a5:9f:5f:2e:b9:f7:95:ee:51:5d:83:9d:6b:18:
         60:9b:c2:ff:f8:68:b7:23:f2:1d:95:aa:a4:62:9a:9c:fe:bf:
         52:60:38:1e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiaOz0ZVl3gPY3LDvowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ZTY0MmVlYTQtMGI0Yy00M2E2LTkxMWEtNDBlNDU2YzQ4Yjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDCMcR4fuKf/+0f/mWYsUF4DNcFHz/fYqCeS
ps5Dhs3o8MkMgKw+eWuc631f5blmriH7gU3Uez2NLt6TioWb3BpVP36O094N/uaX
Ivwaic57dbGdjMoWavxT4y9HkBtZZH1UURGRQieQ7oyhuoiCj6pKZtw8qNs1VEKP
asrmZfHOVVI2BSWeFDTjIxbdEzQ7DVZOGaglqtMoLqY534CvWaVSKGTR17T3WvVV
pQ/XUIk53E7S4PtY4tv5N76aCPN+RiJhuWajuxnYNeyQHtZhZVkl08krWSkx6KzC
5Wg8DpXUiLy10klUFc/UXyKscF4a0Hs5jtoQ9F9BkscF27RWjwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNbgAlKp+j0LsbHKUnayjvmkVMooMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQ2YjU4NTMtYjc5Yi0z
NWRhLWExZmItMGNhYWU1MzU3NWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAnMjjOAX9DxLsHead4D3ihzPx3LJ/pKiCHe5OC2ST9SuTju4ffoEzA
FmoJDa+NjHrQK3YcRlBVZ962NZYUuZ/QgT3ms9ThOtCATtEkTS4nHh96mINQYwKk
ltV2gvo1le5DGFULzLUVrAKTXr2U6qlvcetlCZHESw5aDHLG2GOPopptptY25Zkh
yiRkuAwyvTAdafOJIpyCusiud9RqQUz/yL/3kDLRFRwBjWS2VuulOYaRtCxUXeFJ
FivQ6fO1lhrdkSIgCWe0U/tlWXOVlAeovTENZNTLXlFHt/5fpZ9fLrn3le5RXYOd
axhgm8L/+Gi3I/IdlaqkYpqc/r9SYDge
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:02 2025 by rpki-client