Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/702bddcb-bda4-3936-b729-e773d0c914f0.roa
File:                     702bddcb-bda4-3936-b729-e773d0c914f0.roa (raw, json)
Hash identifier:          dlgYLQUDEaRmnIxDJCzrg93u9L2MxyziYLuUmecFtto=
Subject key identifier:   D5:5D:A0:C9:2A:F6:CA:6C:32:B2:64:16:91:0A:9D:F6:02:D8:77:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858486695CFDF4D13ECB851787980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/702bddcb-bda4-3936-b729-e773d0c914f0.roa
Signing time:             Wed 01 Jan 2025 14:00:53 +0000
ROA not before:           Wed 01 Jan 2025 14:00:53 +0000
ROA not after:            Tue 01 Apr 2025 13:00:53 +0000
asID:                     396617
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:66:95:cf:df:4d:13:ec:b8:51:78:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan  1 14:00:53 2025 GMT
            Not After : Apr  1 13:00:53 2025 GMT
        Subject: CN=2fca430c-8cc6-4c8b-82bc-aed6468c2e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:72:a7:bb:9c:5b:0b:c2:f9:7a:88:6a:5f:
                    ee:50:34:34:e8:71:a9:65:23:12:44:26:d4:53:6c:
                    da:23:ca:39:2f:d9:3d:18:e5:9b:a1:68:e5:60:fc:
                    32:77:82:39:bf:c3:fb:9f:89:1c:8f:52:06:4d:87:
                    b8:4f:4f:d7:07:81:30:81:ab:3d:99:7c:74:b7:ec:
                    21:fe:ab:4f:07:1c:f0:8e:35:ce:b6:17:68:78:bf:
                    3f:69:25:b8:ef:4b:8f:f8:54:60:c9:5a:e7:41:c9:
                    a5:9a:e2:81:7e:bd:90:98:84:ae:50:18:66:5b:26:
                    ef:11:b6:e6:ad:5a:8c:cd:c3:ba:76:1e:9c:69:6d:
                    d9:ac:6a:d3:7f:63:c2:ca:5e:ff:6b:2e:d6:7f:f7:
                    af:cd:38:cc:41:9f:71:4d:01:f6:d8:a8:8c:9c:cd:
                    37:f7:34:23:79:ec:f9:e7:42:d9:d3:00:b4:a2:75:
                    ee:b0:d1:9c:5b:f9:36:2c:d4:cb:26:1e:7c:22:94:
                    17:e0:73:74:4f:1f:61:c9:b0:c5:4e:5e:68:e6:64:
                    d4:a4:d4:2e:af:a8:12:96:87:e5:e1:97:3b:35:24:
                    22:d6:d5:2f:d3:19:f2:af:bc:dd:f2:2b:82:3d:63:
                    72:3c:f7:c3:14:43:70:cc:11:27:3e:6f:f5:bc:d4:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5D:A0:C9:2A:F6:CA:6C:32:B2:64:16:91:0A:9D:F6:02:D8:77:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/702bddcb-bda4-3936-b729-e773d0c914f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:67:6f:6a:e8:66:4a:28:59:d2:61:18:62:6a:5e:5b:a0:
         37:8b:1c:8b:dc:97:77:99:29:0b:9e:fb:1f:93:bf:08:ac:bc:
         44:96:6e:d4:b1:31:e4:f9:eb:b5:5b:c2:7c:b8:11:bf:36:0c:
         7c:7a:69:1b:9a:68:c3:c0:52:fb:6d:1c:c6:89:ad:f3:7c:79:
         3e:49:54:ab:c3:85:42:30:06:81:c9:1a:0e:db:08:80:4d:04:
         a3:b3:ed:7b:b3:8e:9f:24:a0:d3:46:75:bb:06:0a:3f:00:df:
         25:68:5a:5b:dd:ec:99:d9:cd:89:0d:61:3e:b8:63:b5:d6:48:
         80:2f:46:ea:d0:49:a3:26:e0:8e:6f:53:54:67:4d:eb:83:1c:
         39:ef:b0:b9:86:87:0f:43:d5:c8:b0:a8:5d:da:05:25:b2:d1:
         0d:28:d4:95:fc:98:ab:69:17:fc:a8:48:cc:f5:91:42:d6:65:
         39:78:4e:1c:bd:b2:bf:f3:51:73:0d:84:ed:bd:e7:91:2c:90:
         c1:57:f2:d1:9b:75:0e:5a:85:fd:9f:b3:a1:59:7e:b9:af:b8:
         11:8b:bd:da:89:3c:61:56:13:e6:0f:3c:e4:4e:f6:80:d7:26:
         79:c0:ac:73:e5:dc:37:d4:56:44:51:5d:c8:de:de:a7:60:1e:
         43:bf:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:33 2025 by rpki-client