Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa
File:                     7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa (raw, json)
Hash identifier:          u+0tisLx+EZ+FVhslaiOaXA0rD6mD3lxousUuDzm8Jg=
Subject key identifier:   C8:2C:A9:43:3E:55:DB:63:50:E2:5A:B0:10:88:15:DF:AA:9A:E2:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848424334BEA3DDE22687C67700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa
Signing time:             Thu 19 Dec 2024 13:45:39 +0000
ROA not before:           Thu 19 Dec 2024 13:45:39 +0000
ROA not after:            Wed 19 Mar 2025 12:45:39 +0000
asID:                     396603
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:34:be:a3:dd:e2:26:87:c6:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:39 2024 GMT
            Not After : Mar 19 12:45:39 2025 GMT
        Subject: CN=6dbee1ea-413d-4fc8-8f36-4deba0775e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:58:11:ac:fc:a5:6f:ff:cf:1c:cf:5e:ed:
                    d6:a2:f9:52:5f:17:cf:75:98:15:df:05:63:b4:e4:
                    eb:3f:cc:e7:52:d3:fe:31:a3:03:04:ac:7f:09:e6:
                    f8:49:27:1e:98:18:8d:b1:ae:cd:17:6d:83:7f:55:
                    7b:35:44:e4:01:7f:12:53:fd:c4:6a:30:4e:d5:18:
                    ce:08:81:16:16:30:38:be:f2:82:5f:19:02:44:25:
                    fd:38:d2:7c:f7:f0:01:94:64:4c:8b:f5:4e:24:72:
                    3f:cf:31:a4:19:c8:ca:2a:0b:b1:a1:20:c1:ca:b1:
                    0d:28:dc:1a:79:b6:70:b4:ba:e4:14:2e:13:5a:26:
                    f1:e3:b0:50:53:56:05:83:8d:e2:e2:f4:1f:9b:a8:
                    83:d8:4f:53:a9:0a:2f:16:16:6e:b3:7c:0f:d0:76:
                    73:b5:b9:78:8b:96:53:98:a0:ad:16:41:78:b2:d3:
                    28:25:98:f3:05:3d:7e:57:87:1f:74:cb:93:5b:d6:
                    64:c3:f4:74:f9:b3:a1:49:fa:87:5a:82:4b:21:7a:
                    37:f8:e3:d1:53:d4:a7:d2:e5:14:97:2e:81:37:5e:
                    5d:15:73:fa:e8:a2:90:49:e0:2c:98:c2:4e:a4:f2:
                    65:0c:54:a9:b0:6e:d7:7a:34:07:c2:d8:20:e9:5f:
                    d3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:A9:43:3E:55:DB:63:50:E2:5A:B0:10:88:15:DF:AA:9A:E2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7bf450ba-e1ac-3552-b988-cb030a49bfd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:20:54:af:49:ff:bf:e7:5d:67:90:40:2d:8c:74:eb:9a:dc:
         0b:d5:d0:23:2e:22:fd:98:30:98:d8:f9:7f:9f:c6:07:6d:21:
         24:0a:51:d8:08:60:bb:b9:9e:52:d1:ce:22:05:5a:8b:cd:ed:
         67:45:f5:6c:8d:40:c0:96:aa:5b:4a:23:8d:1b:5d:b3:f8:c9:
         52:47:da:98:07:16:b8:96:5e:16:6a:0e:54:42:d7:ed:9d:7c:
         3d:0f:73:8a:e4:a9:b8:73:a7:1b:e5:d4:89:67:70:2b:8d:42:
         d2:1b:b2:19:65:6d:8f:6e:64:63:b4:51:93:1b:46:5a:d6:14:
         3a:56:6f:8f:19:2c:c8:83:f9:24:da:b6:19:a4:fd:47:38:24:
         51:51:0c:11:6a:78:3c:b5:10:78:bc:03:85:b8:80:7d:07:64:
         12:c0:a1:16:65:3d:a9:fd:c6:be:2d:d1:5c:c8:45:66:92:64:
         ab:4b:cf:e4:a6:79:b5:f6:9a:82:bf:75:fb:74:85:97:52:2b:
         0f:3e:ec:d8:1e:21:01:14:81:0f:a4:bd:d9:80:d9:aa:d4:12:
         33:8a:67:09:13:98:e7:f9:fa:8c:20:59:d5:a7:05:c4:f1:24:
         17:b6:25:35:3e:29:19:b5:02:52:74:b2:a4:19:5e:3f:af:8c:
         8f:96:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:38 2025 by rpki-client