Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c60ad63-55be-3844-86b4-dbf58cda3315.roa
File:                     8c60ad63-55be-3844-86b4-dbf58cda3315.roa (raw, json)
Hash identifier:          4lNKv+nLCnzEd/HuJVMJqXZhrO1QRJh6lMG3kn2xZ5Y=
Subject key identifier:   DC:F7:32:C9:3B:0C:B3:B1:EA:B5:CB:BF:B1:18:94:D3:CB:AE:7F:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584842433C4CDB707DA6208817C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c60ad63-55be-3844-86b4-dbf58cda3315.roa
Signing time:             Thu 19 Dec 2024 13:45:43 +0000
ROA not before:           Thu 19 Dec 2024 13:45:43 +0000
ROA not after:            Wed 19 Mar 2025 12:45:43 +0000
asID:                     396541
IP address blocks:        192.42.178.30/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:43:3c:4c:db:70:7d:a6:20:88:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 19 13:45:43 2024 GMT
            Not After : Mar 19 12:45:43 2025 GMT
        Subject: CN=af921516-1c8e-48a5-9de1-f4cb904b33c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:f1:23:d2:60:a1:4f:f0:a1:34:04:28:3d:
                    0c:fb:64:af:23:95:53:76:06:87:73:e0:40:7c:8e:
                    6e:8c:ac:f3:1c:08:d4:ae:eb:1b:3c:07:99:3c:b0:
                    72:53:59:c3:ed:e4:17:07:ae:a5:df:e1:4c:ea:b3:
                    59:f6:2a:63:20:55:b5:02:99:0d:04:60:cd:a9:b1:
                    37:6c:e2:b9:df:0d:cc:c2:d0:c3:e5:1f:17:a3:de:
                    48:18:59:69:47:a3:bb:80:5e:43:fb:1b:07:d1:b5:
                    c0:e2:1a:9f:b4:53:30:76:9d:be:90:17:f1:c9:b8:
                    d9:26:79:f8:0e:3e:15:29:07:e3:93:0b:f4:cf:de:
                    e9:9d:65:d8:5f:66:c1:a1:79:ec:70:36:3d:45:1f:
                    ed:26:8d:bf:1e:40:44:08:f1:92:d4:2f:fc:32:21:
                    fa:7b:c1:78:06:0d:68:83:d3:7b:c8:20:44:2f:d1:
                    0b:47:3f:be:ac:28:41:81:a1:86:e9:28:55:7d:8c:
                    e7:55:fe:25:f0:26:18:72:a7:55:17:f8:2d:ea:3f:
                    7e:e4:44:4a:fa:15:af:ba:6f:a5:a3:6f:27:56:27:
                    4f:f7:9e:a0:ac:18:3f:34:59:ef:66:11:9f:dc:b9:
                    64:e5:3a:5d:30:a7:36:c7:1e:66:c6:4e:20:ed:cb:
                    00:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F7:32:C9:3B:0C:B3:B1:EA:B5:CB:BF:B1:18:94:D3:CB:AE:7F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8c60ad63-55be-3844-86b4-dbf58cda3315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:68:68:7f:38:80:07:3e:7b:d4:11:15:cc:8d:4d:de:71:6b:
         3d:f4:63:28:82:37:a2:17:7a:bf:9b:fd:8c:bc:5b:a2:2b:9c:
         42:9a:83:6c:62:6b:b6:fe:94:a8:7a:47:48:39:3f:eb:63:bc:
         7c:bf:43:80:bf:eb:c2:77:b2:17:5f:ef:a4:03:2e:fc:09:e2:
         d8:b6:b6:85:dd:52:92:90:66:6d:a8:2a:cc:c7:1b:ab:cd:be:
         1c:56:7a:3b:8a:2c:0b:3c:1d:d6:e6:9d:5f:f1:b0:20:fe:12:
         e1:09:cb:88:f8:4c:08:cf:7c:af:02:9c:f2:42:9d:cb:56:8d:
         c5:c8:89:25:05:a2:12:31:27:b9:9b:14:88:f6:38:07:60:38:
         ac:ac:4c:f4:4d:dc:97:b0:5f:c6:15:a1:f2:d2:68:30:56:31:
         67:e3:22:52:26:71:3f:fb:29:ee:21:e0:45:6f:ae:66:1e:13:
         58:93:61:a0:29:78:cc:14:15:18:48:a0:e0:8d:d0:75:64:a1:
         5c:8f:d1:cd:8e:65:8a:e4:f0:45:2d:8e:2c:d8:f3:44:cf:fe:
         08:e9:51:ef:6a:59:90:e2:14:38:d4:97:c8:9b:08:78:b5:74:
         9f:a2:05:10:79:39:2a:12:43:04:a1:6c:be:65:6a:ef:78:20:
         d3:2e:e4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:05:55 2025 by rpki-client