Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683fa016-c707-3a52-afcc-de99b47bcb45.roa
File:                     683fa016-c707-3a52-afcc-de99b47bcb45.roa (raw, json)
Hash identifier:          xa9CZnZPxihUS9Yrzu522yIenbfAGwN8xNgFz8CeY58=
Subject key identifier:   51:24:2F:FE:D9:DD:E1:02:B8:22:6A:5E:C0:C9:E2:41:A6:75:D5:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584894A5DC743985F6321081C080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683fa016-c707-3a52-afcc-de99b47bcb45.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     396615
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:dc:74:39:85:f6:32:10:81:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=b514e1ce-432f-4fc5-a6a6-0a8175c563ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:6c:7e:a1:aa:55:36:00:8a:46:1f:b9:98:
                    6e:4c:41:7c:e7:60:88:6a:c2:dd:cb:69:6f:0f:ea:
                    cb:5f:c0:d1:da:f3:e5:26:25:d6:7c:a7:22:12:05:
                    1c:5b:38:ae:55:6b:61:eb:87:3e:b1:3c:12:a7:52:
                    5e:b1:14:fa:d2:86:9d:01:2d:8b:5d:4d:b3:f1:ed:
                    73:e0:f7:ad:d1:e9:b0:bb:04:bd:fb:b7:08:a5:4f:
                    fe:ef:1d:10:65:86:1c:7b:b6:f5:66:f6:bf:a5:a2:
                    28:8e:b8:b1:6c:b7:1c:c9:01:9f:2e:06:56:2b:ef:
                    86:1d:99:30:63:7c:f6:7a:5f:94:06:de:48:18:10:
                    33:12:ca:46:8c:10:f6:03:3f:3e:32:d3:1e:cf:85:
                    9e:a5:c5:4a:ed:03:cb:70:be:8d:09:b6:1d:da:06:
                    ba:ab:0f:a4:30:ff:f1:f7:8b:35:8c:c7:d6:03:97:
                    11:21:00:e9:d1:96:93:40:f3:af:77:ef:24:ea:bd:
                    75:74:b6:1b:97:b2:87:bb:e2:35:f5:cf:d4:a6:b4:
                    89:eb:85:b7:17:79:af:c3:81:86:07:af:36:2a:a1:
                    95:4c:89:51:4d:1f:e6:b3:f3:46:c2:09:54:8c:dc:
                    65:36:44:09:49:f9:69:5c:66:11:e1:74:7f:52:fa:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:2F:FE:D9:DD:E1:02:B8:22:6A:5E:C0:C9:E2:41:A6:75:D5:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/683fa016-c707-3a52-afcc-de99b47bcb45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b9:34:62:c2:40:de:11:20:9c:76:3e:61:75:2b:17:a6:d4:
         e3:0a:ce:16:ee:8f:89:ea:94:2b:c8:de:d9:80:fe:6a:81:50:
         46:11:e2:82:a3:1f:0d:91:e3:cc:94:6a:98:fe:98:7c:88:8a:
         1a:45:48:d4:32:e9:86:ec:99:c9:d5:1b:62:8d:21:0b:cd:2a:
         ce:de:8a:09:af:31:e3:9e:5f:db:5e:ec:16:07:10:e1:26:03:
         55:83:ed:ec:ad:07:e3:0b:57:7b:5c:9a:40:d3:23:95:db:e5:
         4b:95:68:63:21:ba:76:28:c3:8c:a6:2d:dc:31:2e:41:21:4b:
         39:a6:10:5f:d9:76:ec:e3:fd:f9:70:13:7b:d0:9b:b8:77:57:
         b3:eb:4e:cb:1f:72:21:8e:bc:ce:79:e8:d1:24:1b:3d:b2:9d:
         0b:a2:3f:54:5e:3e:4f:0b:d0:cc:dd:4c:4c:13:75:13:06:bd:
         93:d2:39:75:a8:22:da:e3:8a:90:53:ca:90:2d:64:22:26:39:
         8a:b4:c0:aa:a7:28:1f:d1:72:2f:68:63:d5:6c:50:90:d2:39:
         c0:e1:50:79:f4:66:9d:dc:73:24:70:30:33:f0:fd:e1:1d:62:
         2e:90:e8:62:09:75:93:4a:91:6e:89:5d:a9:f5:39:cc:49:53:
         f8:f9:dd:ff
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiUpdx0OYX2MhCBwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk
YjUxNGUxY2UtNDMyZi00ZmM1LWE2YTYtMGE4MTc1YzU2M2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkntsfqGqVTYAikYfuZhuTEF852CIasLdy2lv
D+rLX8DR2vPlJiXWfKciEgUcWziuVWth64c+sTwSp1JesRT60oadAS2LXU2z8e1z
4Pet0emwuwS9+7cIpU/+7x0QZYYce7b1Zva/paIojrixbLccyQGfLgZWK++GHZkw
Y3z2el+UBt5IGBAzEspGjBD2Az8+MtMez4WepcVK7QPLcL6NCbYd2ga6qw+kMP/x
94s1jMfWA5cRIQDp0ZaTQPOvd+8k6r11dLYbl7KHu+I19c/UprSJ64W3F3mvw4GG
B682KqGVTIlRTR/ms/NGwglUjNxlNkQJSflpXGYR4XR/Uvp6VQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFEkL/7Z3eECuCJqXsDJ4kGmddU+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjgzZmEwMTYtYzcwNy0z
YTUyLWFmY2MtZGU5OWI0N2JjYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBruTRiwkDeESCcdj5hdSsXptTjCs4W7o+J6pQryN7ZgP5qgVBGEeKC
ox8NkePMlGqY/ph8iIoaRUjUMumG7JnJ1RtijSELzSrO3ooJrzHjnl/bXuwWBxDh
JgNVg+3srQfjC1d7XJpA0yOV2+VLlWhjIbp2KMOMpi3cMS5BIUs5phBf2Xbs4/35
cBN70Ju4d1ez607LH3IhjrzOeejRJBs9sp0Loj9UXj5PC9DM3UxME3UTBr2T0jl1
qCLa44qQU8qQLWQiJjmKtMCqpygf0XIvaGPVbFCQ0jnA4VB59Gad3HMkcDAz8P3h
HWIukOhiCXWTSpFuiV2p9TnMSVP4+d3/
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:13:27 2025 by rpki-client