Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dff32e3-6af7-3a4a-894e-6e367b14835e.roa
File:                     6dff32e3-6af7-3a4a-894e-6e367b14835e.roa (raw, json)
Hash identifier:          g4MhqNQ6jrbn5y4sTux//H8t9PJNwXBjVIjUZ9LLFgM=
Subject key identifier:   86:BD:23:3D:9B:49:DF:F8:FC:9F:FB:4E:36:75:82:93:C3:A7:1E:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848854B3597C800E19C7BA41840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dff32e3-6af7-3a4a-894e-6e367b14835e.roa
Signing time:             Sun 12 Jan 2025 14:00:53 +0000
ROA not before:           Sun 12 Jan 2025 14:00:53 +0000
ROA not after:            Sat 12 Apr 2025 13:00:53 +0000
asID:                     396587
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:4b:35:97:c8:00:e1:9c:7b:a4:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 12 14:00:53 2025 GMT
            Not After : Apr 12 13:00:53 2025 GMT
        Subject: CN=445bcded-99bf-4130-85ac-b64e27fa74b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:d9:45:38:58:bd:b1:ea:bb:6f:ed:5d:cd:
                    8f:03:1b:98:6c:e4:49:63:36:37:8e:00:db:e6:4a:
                    2b:f9:b0:79:48:97:92:11:d3:c1:63:d4:50:b4:67:
                    cc:40:56:84:f6:42:f1:68:d9:41:1c:30:95:68:56:
                    55:d5:73:c1:cb:37:90:85:36:95:7e:7d:f7:c8:90:
                    dc:17:67:43:cc:37:4b:f8:08:28:3d:a7:d6:87:08:
                    23:c4:54:0a:9c:d2:6d:ae:bc:07:63:2a:6c:4a:c1:
                    c1:bb:7b:13:a7:1b:17:c3:a2:13:68:92:37:5c:59:
                    0b:14:73:40:da:58:01:65:2d:2c:5b:dc:84:ef:24:
                    cb:49:12:7b:c4:4a:eb:d6:a3:f7:d3:21:05:7e:8d:
                    e5:b6:ed:9e:d7:5a:8b:dd:30:e5:73:f6:24:87:4e:
                    3b:f6:fa:30:37:b3:4a:37:32:d5:e5:a2:8f:f9:16:
                    8e:dc:38:81:dd:f8:b1:8e:1a:71:20:8c:85:7d:68:
                    9b:4c:99:7d:36:63:52:fa:b3:74:43:71:12:b3:19:
                    72:ee:d5:0a:f5:f3:9d:8a:1e:c7:46:67:0e:da:ee:
                    d0:e5:13:38:c6:4b:5f:36:e6:37:df:ed:00:de:91:
                    37:67:05:fc:17:5b:ca:83:0e:70:c5:75:8c:cc:67:
                    7a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BD:23:3D:9B:49:DF:F8:FC:9F:FB:4E:36:75:82:93:C3:A7:1E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6dff32e3-6af7-3a4a-894e-6e367b14835e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:ab:1a:8c:67:ef:80:5a:b3:b8:f8:b1:51:6d:41:e4:0b:f5:
         78:5d:73:f5:b1:76:1c:70:8b:0a:51:06:38:6a:10:8e:6b:f7:
         44:8d:8b:e6:f7:2d:87:e7:46:fe:40:6b:4e:49:3b:e5:8f:e2:
         bd:8f:4f:0f:03:05:92:61:3a:cd:d8:b4:bf:69:81:a2:b6:71:
         26:5a:f2:d1:19:ed:3d:0c:de:ad:17:5b:bc:70:11:9d:f8:9c:
         a1:46:a2:e9:3e:8f:4a:11:48:3e:54:05:47:c5:e7:dc:c8:54:
         9b:55:80:f6:be:d3:fe:11:f4:47:c9:2f:e8:34:fe:fb:29:6d:
         7d:a5:5f:f7:ff:1b:01:26:27:21:88:fd:4d:95:91:81:f2:d0:
         5c:f6:17:c2:57:ec:cb:b5:cc:dd:c3:ca:a9:05:be:ea:31:20:
         02:ea:46:ae:32:c7:09:ef:59:c3:6c:1c:38:6f:16:47:2b:ff:
         56:3d:c2:15:1a:ab:88:9f:aa:52:e6:95:30:d0:32:79:05:fd:
         98:5b:f2:00:b9:6b:6a:37:f0:c3:c9:27:51:16:ad:6f:97:7b:
         0f:16:da:0a:6c:67:e3:b5:92:27:9b:e3:9e:21:d9:c9:ce:d7:
         9c:37:64:fd:6c:c5:59:66:4c:d0:e6:a9:33:4d:df:9a:e3:bc:
         c6:68:0a:52
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiFSzWXyADhnHukGEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDExMjE0MDA1M1oXDTI1MDQxMjEzMDA1M1owLzEtMCsGA1UEAxMk
NDQ1YmNkZWQtOTliZi00MTMwLTg1YWMtYjY0ZTI3ZmE3NGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttPZRThYvbHqu2/tXc2PAxuYbORJYzY3jgDb
5kor+bB5SJeSEdPBY9RQtGfMQFaE9kLxaNlBHDCVaFZV1XPByzeQhTaVfn33yJDc
F2dDzDdL+AgoPafWhwgjxFQKnNJtrrwHYypsSsHBu3sTpxsXw6ITaJI3XFkLFHNA
2lgBZS0sW9yE7yTLSRJ7xErr1qP30yEFfo3ltu2e11qL3TDlc/Ykh0479vowN7NK
NzLV5aKP+RaO3DiB3fixjhpxIIyFfWibTJl9NmNS+rN0Q3ESsxly7tUK9fOdih7H
RmcO2u7Q5RM4xktfNuY33+0A3pE3ZwX8F1vKgw5wxXWMzGd6WwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIa9Iz2bSd/4/J/7TjZ1gpPDpx4sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmRmZjMyZTMtNmFmNy0z
YTRhLTg5NGUtNmUzNjdiMTQ4MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC5qxqMZ++AWrO4+LFRbUHkC/V4XXP1sXYccIsKUQY4ahCOa/dEjYvm
9y2H50b+QGtOSTvlj+K9j08PAwWSYTrN2LS/aYGitnEmWvLRGe09DN6tF1u8cBGd
+JyhRqLpPo9KEUg+VAVHxefcyFSbVYD2vtP+EfRHyS/oNP77KW19pV/3/xsBJich
iP1NlZGB8tBc9hfCV+zLtczdw8qpBb7qMSAC6kauMscJ71nDbBw4bxZHK/9WPcIV
GquIn6pS5pUw0DJ5Bf2YW/IAuWtqN/DDySdRFq1vl3sPFtoKbGfjtZInm+OeIdnJ
ztecN2T9bMVZZkzQ5qkzTd+a47zGaApS
-----END CERTIFICATE-----