Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bf9203-8cbe-3fcd-89eb-b128c4b4b32e.roa
File:                     65bf9203-8cbe-3fcd-89eb-b128c4b4b32e.roa (raw, json)
Hash identifier:          yDK1VW2QkKL3+seXuuu/JVRBegKqP8vL+/Q+9eo4p0Q=
Subject key identifier:   BF:9C:EB:A5:C2:B3:88:FD:B0:28:D5:16:C8:32:3D:C0:C1:21:9B:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3ACECCB005DFA93DC940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bf9203-8cbe-3fcd-89eb-b128c4b4b32e.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     396591
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:3a:ce:cc:b0:05:df:a9:3d:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=e4733535-19a8-482e-a95b-243908d5133f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:18:36:3a:0e:00:da:46:d1:e7:f9:dd:3a:
                    f3:31:24:2e:e6:c4:36:44:cd:a3:a1:97:25:1f:cd:
                    44:8f:c4:9c:26:b9:f0:61:a7:21:02:5e:5b:d1:a3:
                    81:08:9b:bf:59:22:59:d9:b8:bc:25:ff:1c:40:07:
                    a3:9d:61:0b:5a:3e:fe:e3:af:05:51:d7:f9:1d:91:
                    30:4e:8e:39:3e:37:b4:23:7a:cc:4f:89:15:68:cf:
                    3e:ed:1e:13:7c:dd:fe:2c:d4:ce:4a:8b:2a:30:c2:
                    99:75:33:e0:81:19:ee:6b:07:00:d1:da:2e:6f:ab:
                    e2:b7:86:94:d5:fd:0d:cd:1a:e9:8d:f6:d8:e4:3c:
                    eb:1e:5b:73:94:68:df:d0:7a:93:08:f0:1b:ec:03:
                    e9:ab:71:37:e9:c0:47:99:ec:d1:05:7b:9d:d6:7b:
                    a7:d2:61:12:47:0a:fb:29:1a:75:38:6b:35:c6:a8:
                    3b:58:33:af:fa:a1:4e:eb:1d:57:1e:af:02:56:a4:
                    95:6d:a0:ef:68:ee:f0:56:f5:bc:63:a4:de:f4:00:
                    3d:47:dd:ab:37:78:d2:64:40:49:14:df:12:e9:0f:
                    df:00:37:a9:e0:af:87:e8:1f:31:89:2e:4a:72:b4:
                    c2:09:ca:c3:c6:ec:4c:58:1e:4d:b5:23:a8:3f:6f:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:EB:A5:C2:B3:88:FD:B0:28:D5:16:C8:32:3D:C0:C1:21:9B:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65bf9203-8cbe-3fcd-89eb-b128c4b4b32e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:58:51:c6:8c:c5:da:0a:1d:65:48:8a:82:5c:41:7f:d3:e6:
         59:0e:c7:89:5c:b6:30:e0:60:73:39:c2:ad:1d:59:69:29:5f:
         7a:e3:94:b6:fe:3c:c8:0f:24:dd:a3:07:2f:47:a6:26:77:ea:
         f8:02:14:43:32:b4:b1:fe:95:56:76:25:21:92:56:08:03:d6:
         ab:e8:ba:d2:d2:43:62:43:9f:b0:e6:83:34:ee:77:91:db:0d:
         7a:11:f3:0a:c4:99:93:ad:0d:f2:f6:b5:c7:7a:36:e8:25:ec:
         4d:af:a7:17:98:24:1f:a7:b4:2a:64:0a:b3:21:23:43:4e:d9:
         82:78:86:5f:a6:1f:fd:ed:97:c3:87:9a:18:8c:4c:2a:e1:7a:
         74:f4:bc:da:49:3d:6d:6c:bb:6b:c3:9e:9c:03:24:78:8d:ee:
         4e:bd:b2:23:99:59:a4:00:23:b4:d4:cf:68:45:aa:f8:ed:9a:
         de:28:7f:1a:28:97:4f:f1:08:c1:8a:cb:69:00:b3:5a:65:44:
         91:4e:d5:b0:eb:b2:eb:58:9e:c8:f6:50:c3:d6:0b:58:6e:5c:
         b5:1a:48:af:04:5c:14:84:c2:65:3c:e3:5d:f9:bc:a1:45:1d:
         33:1e:79:bd:b7:06:85:ed:dc:0a:8d:37:61:49:df:68:52:8c:
         df:5a:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:15:18 2025 by rpki-client