Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa
File:                     67cbebac-17d5-3929-b4d2-359890a2d8d6.roa (raw, json)
Hash identifier:          SwWGrZBO7OasztqNkHrrgxUxGIgCrurMdyqaHD40gUE=
Subject key identifier:   18:D1:89:07:10:2E:F5:73:08:90:E4:6B:42:E7:24:3E:F9:4B:AD:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858489A3B3E4382F6A234F12F4940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     36627
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:3e:43:82:f6:a2:34:f1:2f:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=b3200ce1-953d-4468-a0c1-9744b466c7f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:80:c9:89:93:87:9b:ff:b7:49:4d:a4:54:
                    50:53:bd:0c:29:cc:fc:47:f9:ba:46:46:45:17:22:
                    c7:ac:cd:27:ca:81:24:b3:55:61:d7:50:11:a0:52:
                    64:a7:a8:4c:2e:19:b7:96:2d:ad:06:85:eb:fb:3e:
                    48:64:94:43:48:fe:99:2a:50:1c:e6:27:c4:a2:44:
                    97:8e:08:de:0a:83:57:15:5a:64:f3:7e:f4:63:3e:
                    07:74:2c:49:b7:4e:fb:1e:1a:76:36:d4:42:5d:ad:
                    0d:cd:f7:6e:3b:db:1c:05:9f:e3:64:de:94:a6:a3:
                    ad:6a:80:4d:79:3f:40:c0:1b:db:2d:4d:9f:8b:b4:
                    b4:e1:42:8d:e8:8b:1a:4e:bb:39:95:10:68:6b:d0:
                    a2:3a:48:0e:e5:95:c2:2c:c5:95:fc:17:15:35:77:
                    06:7f:e8:87:b4:f1:8e:74:35:27:b7:49:f9:8e:e4:
                    dd:2b:10:16:85:d8:12:4c:2f:bc:da:e5:3a:7e:ea:
                    8c:fa:36:f0:da:24:36:6f:94:fc:9f:b2:fc:f7:5e:
                    7f:bc:cf:c7:c1:aa:27:51:9c:fd:9a:7f:86:00:52:
                    92:c7:13:74:a5:ac:bb:c9:d2:ce:3b:59:66:12:62:
                    02:21:64:11:f9:6a:ef:35:d7:8b:ec:1e:b3:38:a1:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D1:89:07:10:2E:F5:73:08:90:E4:6B:42:E7:24:3E:F9:4B:AD:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:40:7e:79:3e:6b:55:47:2d:bc:be:23:07:09:5d:aa:f4:49:
         66:a4:1d:c7:1e:55:68:36:f7:db:ea:da:b7:52:95:09:3f:3c:
         77:f8:bd:14:2d:dd:a6:db:87:64:ef:ae:6c:b3:bb:ad:ad:7a:
         f8:68:79:1b:3f:20:a1:d6:78:c6:5d:3d:3c:3d:79:ec:8f:c7:
         2f:f4:8f:31:9d:57:af:1b:2a:2c:9b:7d:9e:1b:3f:d8:c0:b7:
         ce:25:cb:55:59:84:63:04:32:d8:2f:75:c7:d8:69:f8:e6:c3:
         0b:5e:d8:e3:b5:50:f3:7a:e9:b5:72:42:e8:dc:31:51:91:58:
         f6:24:e9:c8:6a:b4:c7:79:df:57:4c:5e:7e:3d:c1:25:52:d6:
         dc:67:90:d8:e2:4d:b1:fb:f7:b8:ae:35:ad:4e:47:1b:87:e6:
         74:3f:0e:c6:5f:b1:ca:d0:26:03:9a:ae:f4:59:e2:9d:a6:96:
         68:bd:bb:7f:ff:3e:53:84:c1:4c:f6:61:41:f0:7d:15:6b:36:
         1b:13:06:d1:c6:71:e5:b2:07:e8:51:84:c6:14:23:db:4f:7c:
         ee:cb:b2:bb:47:d3:51:74:93:a5:bf:2a:9d:9f:b4:04:63:98:
         55:ca:4b:f0:fe:a8:15:e4:0e:8a:db:77:93:48:2d:7f:d0:1c:
         cd:65:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----