Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8232e212-a0a7-348c-abde-7981be234f67.roa
File:                     8232e212-a0a7-348c-abde-7981be234f67.roa (raw, json)
Hash identifier:          33PqC8gG1VkzGtmRQP3c4fTSeD0UkT9NJSaUy2PIGkA=
Subject key identifier:   D3:14:F4:13:59:D8:7A:4D:2B:00:B2:A8:93:C3:42:5D:34:AB:4F:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858485E35A82E944778C24FAE0600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8232e212-a0a7-348c-abde-7981be234f67.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     36622
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:a8:2e:94:47:78:c2:4f:ae:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=3445e01b-6d35-4c51-be95-77a7be0dd38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:1d:87:1c:94:73:41:53:04:5a:88:5e:cf:
                    b5:5e:06:e5:f0:f3:bc:27:67:e5:4b:95:8a:2e:0a:
                    69:48:75:a8:97:93:c0:22:f4:9d:9d:af:67:b4:e7:
                    2c:fb:52:dc:78:d5:8c:fc:71:6d:7c:8d:9a:ab:b9:
                    41:f3:21:7a:6d:8f:d5:06:04:4d:a9:6d:26:fd:d3:
                    6c:5b:2a:7f:c8:b0:91:85:34:a6:bc:63:23:fd:90:
                    30:18:6b:bd:d3:f6:47:9b:54:52:e1:a6:c5:0f:89:
                    af:ad:b8:13:96:8e:b0:c6:ba:c4:4d:3e:06:ee:21:
                    44:6b:6b:0c:93:8d:dc:c5:26:f9:c8:64:6a:38:af:
                    15:ed:b6:cf:5f:24:78:94:11:fb:95:cd:5d:35:3a:
                    78:27:c0:7a:52:53:f5:70:53:0e:16:b3:b9:f8:8e:
                    48:90:4c:ed:78:16:ed:f0:4c:29:78:ab:ce:c6:83:
                    31:4f:69:cd:f8:2d:8c:b1:fd:69:f7:fa:37:ee:7e:
                    8c:20:ae:b3:58:ec:73:02:31:cd:80:d6:eb:da:37:
                    cd:7e:18:06:6a:45:b0:9c:f6:5a:8a:3a:05:86:cc:
                    68:d9:44:60:fd:1d:db:91:c6:6c:1a:59:40:c5:75:
                    c5:a1:b6:6f:fa:6d:76:2d:61:87:bf:a7:bb:33:f5:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:14:F4:13:59:D8:7A:4D:2B:00:B2:A8:93:C3:42:5D:34:AB:4F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8232e212-a0a7-348c-abde-7981be234f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5d:f7:66:2a:d0:77:db:5a:e6:1e:d0:ee:62:25:c9:50:d7:
         59:c5:77:45:14:43:57:46:dd:f1:e8:f0:20:49:fe:d8:48:5b:
         ed:30:8c:5f:9d:bf:95:69:da:1a:78:91:92:d7:36:48:2e:86:
         38:9f:a3:3a:a1:41:9f:74:ce:f4:ee:b9:5f:2f:a4:57:48:c2:
         03:64:c1:7f:84:42:67:fe:f7:60:99:65:86:ef:d9:f6:16:69:
         e9:90:e2:ea:76:3f:be:cc:66:c6:42:19:75:b9:a6:1e:92:99:
         e0:49:da:35:1a:0f:98:d5:7d:56:84:38:f7:a5:c7:d1:b9:bf:
         72:92:23:10:27:bc:3e:d4:1e:d7:2e:c7:62:3b:cd:b0:08:0f:
         09:ca:8d:f6:f1:b6:ca:23:03:92:9b:5b:a8:42:a8:ca:02:43:
         25:e0:52:ad:4e:b2:47:9a:09:3a:b6:e0:55:f1:f4:7f:b2:04:
         34:f2:08:40:d5:27:6f:cd:66:7d:d8:cb:78:77:e5:1a:95:a3:
         7b:f0:5c:73:90:78:6a:c3:32:8a:46:17:5e:e2:35:83:7b:4b:
         c8:7b:55:54:56:c2:a4:2c:b1:1e:be:62:c0:fd:d4:04:f3:3e:
         6b:a4:51:8f:0d:47:ef:9d:16:4e:05:ae:27:7c:ac:98:5b:b1:
         45:c5:a3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:49:53 2025 by rpki-client